Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ri_USdJxvlksa5G_gXzxmeHk9ZY.roa
File: Ri_USdJxvlksa5G_gXzxmeHk9ZY.roa (raw, json)
Hash identifier: TBd+TdAd6vIOPs6itC8jMHMaj7DSoupzEJaUgKUEaZA=
Subject key identifier: 46:2F:D4:49:D2:71:BE:59:2C:6B:91:BF:81:7C:F1:99:E1:E4:F5:96
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018970DA12B5BFB27D47437A2160810A28F1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ri_USdJxvlksa5G_gXzxmeHk9ZY.roa
Signing time: Thu 20 Jul 2023 01:11:27 +0000
ROA not before: Thu 20 Jul 2023 01:11:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:70:da:12:b5:bf:b2:7d:47:43:7a:21:60:81:0a:28:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 20 01:11:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=462fd449d271be592c6b91bf817cf199e1e4f596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c0:f0:05:43:2c:ee:ef:9d:86:c1:11:f4:ca:
04:f7:0f:41:8c:58:57:78:75:a0:28:b5:10:c7:4a:
9d:e5:41:3a:6c:0f:ea:77:2d:8b:c4:f9:ff:44:79:
96:4c:dc:d4:ee:4f:07:0b:c6:57:fc:f2:09:34:54:
00:f2:7c:2c:59:87:93:b2:ca:2e:0b:2a:2f:c0:ef:
07:96:2c:59:da:87:60:cb:1a:3c:e9:ee:33:5e:52:
be:92:44:a1:99:91:6f:b1:da:7f:60:6e:62:63:8f:
e9:44:f8:48:9b:3a:18:72:9b:88:e8:b5:1a:c4:b5:
d9:be:74:50:dd:23:b0:57:2f:c5:d0:61:08:84:a0:
a8:f2:8f:3b:e2:fa:b1:bd:2f:1b:74:8d:ae:73:d1:
92:88:62:dd:3a:88:25:7b:25:8e:47:80:f2:be:07:
fb:8e:a1:6b:3c:f7:db:cc:b1:00:49:91:19:2e:bc:
0e:10:e1:8e:78:e1:0b:79:99:22:42:84:2b:82:f4:
30:aa:91:bb:af:f4:4d:a7:66:33:08:db:2a:e3:b2:
71:aa:0e:c3:17:51:03:51:67:03:c3:5b:d2:f5:4d:
c0:b0:66:de:b6:0a:fc:56:19:8e:6f:d2:88:65:37:
81:b6:36:27:14:b6:16:bb:cf:30:1c:7d:f4:a1:c7:
c4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:2F:D4:49:D2:71:BE:59:2C:6B:91:BF:81:7C:F1:99:E1:E4:F5:96
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ri_USdJxvlksa5G_gXzxmeHk9ZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
64:b3:99:a4:f2:72:9f:0e:ff:8b:e7:bc:75:30:a2:21:8b:88:
9e:98:ac:3b:e4:f7:ba:54:8d:3b:25:b9:51:71:95:c2:a8:89:
61:ad:f9:3a:19:58:68:50:13:3f:6e:aa:c8:26:74:61:e1:60:
24:c0:05:07:ca:a7:53:c3:bf:29:8f:f0:ff:22:d9:5b:96:8e:
6d:d0:5d:35:76:61:6a:12:ab:a8:ab:24:b6:17:83:ad:f4:ad:
9d:31:ca:76:35:65:ec:71:2d:7b:d3:ab:c6:ae:e4:4f:5f:1b:
f0:38:e6:14:9c:c9:91:7b:65:e0:33:a1:d3:6a:93:1e:92:5e:
3c:02:38:b7:10:4d:8e:37:08:9b:f7:b4:55:60:8e:30:b8:93:
56:04:34:a0:e4:32:d7:9c:27:46:d4:8a:48:11:c3:de:8f:7d:
ab:12:93:13:5a:db:03:5e:2a:c9:4c:d9:cb:b8:26:bd:c3:ca:
14:6c:69:6a:4a:a1:4e:6b:1e:85:cf:97:73:f6:30:2a:91:c9:
ae:50:cc:51:d6:b7:c9:db:95:40:a6:14:d8:c5:4e:7a:6d:26:
c9:37:fe:00:5f:f5:7f:75:a1:ed:d4:54:3f:36:4d:f7:d0:51:
e6:55:d6:6d:5b:77:55:4d:79:cd:2d:3a:0e:09:73:0f:80:3e:
fd:e9:7e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 01:52:09 2025 by rpki-client