Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Rna7Dg5fMzMs411gugpwZJ_c7-o.roa
File: Rna7Dg5fMzMs411gugpwZJ_c7-o.roa (raw, json)
Hash identifier: yR9mXcahVBEsRaWvgsKTvdaia2opavlXzyybNpQ5WIU=
Subject key identifier: 46:76:BB:0E:0E:5F:33:33:2C:E3:5D:60:BA:0A:70:64:9F:DC:EF:EA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186CA92083996B98F5F286989287304E6FB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Rna7Dg5fMzMs411gugpwZJ_c7-o.roa
Signing time: Fri 10 Mar 2023 08:10:13 +0000
ROA not before: Fri 10 Mar 2023 08:10:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ca:92:08:39:96:b9:8f:5f:28:69:89:28:73:04:e6:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 10 08:10:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4676bb0e0e5f33332ce35d60ba0a70649fdcefea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:bd:a9:d4:c4:52:d9:97:18:24:4a:58:51:a0:
19:8a:d1:1e:69:67:25:f9:c1:42:97:be:f4:5b:3f:
de:03:12:1e:82:18:78:6a:e4:18:21:d8:49:19:64:
eb:17:f9:bf:2e:b2:bc:c0:4b:76:41:38:23:eb:02:
7d:2e:e7:25:ff:8c:cf:2c:f1:75:a7:2c:e2:d7:a3:
79:d4:a5:03:47:3f:b2:93:ca:2a:a7:85:68:02:b3:
93:05:7c:e1:cb:19:13:75:95:26:3e:fe:a3:99:e4:
ee:08:df:62:1b:09:09:61:96:05:26:b3:bd:7d:e8:
0a:32:87:15:e5:6c:fe:ba:77:da:80:87:16:93:6c:
13:4e:a9:f2:59:f8:19:e8:3f:07:b2:db:42:d8:f5:
ad:05:67:19:e8:3b:4d:d7:3f:4c:6b:8c:3c:a3:68:
e9:a5:c2:4d:f7:f1:f3:ee:97:cc:63:df:ac:89:c8:
a5:90:81:2a:40:f5:6f:03:90:d7:fb:f9:d3:88:b7:
15:67:7a:4d:69:ac:6a:9f:d8:f9:40:15:d9:6e:31:
f2:95:a0:97:99:5b:e3:ea:08:44:ad:a8:f6:4c:d0:
93:8e:2b:4c:dc:a5:ea:21:8c:bb:0d:bd:c7:7b:18:
2e:fd:8c:dc:68:bb:d8:97:82:db:82:1f:6a:ab:44:
3b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:76:BB:0E:0E:5F:33:33:2C:E3:5D:60:BA:0A:70:64:9F:DC:EF:EA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Rna7Dg5fMzMs411gugpwZJ_c7-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3b:16:ff:82:d5:df:b2:9a:b0:89:50:ec:d1:d3:5b:81:15:04:
7e:f0:61:aa:d5:b9:11:6f:61:25:78:8d:42:94:d0:8b:df:5a:
a8:0a:e6:d2:c6:d6:c0:6f:23:c3:51:13:f8:4c:dc:84:7d:b9:
47:3d:7a:f8:1d:de:eb:21:5c:87:d4:64:ac:07:d7:a8:97:7b:
0d:31:ff:15:b4:fb:7a:fe:98:ae:eb:ff:be:64:de:d7:f4:44:
ce:cd:b1:96:6f:2d:79:e7:71:48:4e:b1:b4:c3:ac:00:d7:d0:
b0:b7:f1:d6:62:4e:f6:71:e7:cd:c0:c4:d1:16:6c:8e:c4:3b:
69:6c:77:07:69:9a:b2:66:e1:71:66:8e:02:33:4c:3a:f4:86:
a3:f0:07:de:08:dc:bb:67:95:f3:2a:73:8f:47:65:d0:9b:3d:
fc:34:a6:2d:6d:b8:c5:a3:65:a9:54:fe:6d:10:1d:50:df:8f:
b3:dc:cd:13:77:97:7a:7a:0f:ee:8a:4a:6b:4e:fd:60:ab:7c:
09:0f:54:4d:f4:e9:ac:77:65:fc:d6:9e:0c:1b:ff:92:82:a3:
e5:56:a1:ce:16:aa:a1:b5:0c:34:8a:89:f3:2d:3b:38:f3:2f:
6b:a5:18:cc:6f:0d:6b:93:e0:6a:e2:90:1e:57:27:2c:d0:d2:
35:6e:48:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:52:01 2025 by rpki-client