Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RsvlD59acaXc-4V8NtvG6J6TvVw.roa
File: RsvlD59acaXc-4V8NtvG6J6TvVw.roa (raw, json)
Hash identifier: Ep+U077Cr6ruGYPnRYntg9aG56Vho1wOYXBgtO0eOq0=
Subject key identifier: 46:CB:E5:0F:9F:5A:71:A5:DC:FB:85:7C:36:DB:C6:E8:9E:93:BD:5C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184430188941223293027DBD25133436971
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RsvlD59acaXc-4V8NtvG6J6TvVw.roa
Signing time: Fri 04 Nov 2022 14:18:04 +0000
ROA not before: Fri 04 Nov 2022 14:18:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:43:01:88:94:12:23:29:30:27:db:d2:51:33:43:69:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 4 14:18:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=46cbe50f9f5a71a5dcfb857c36dbc6e89e93bd5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ae:5b:a9:4e:fd:ea:16:ca:a0:65:4e:a3:4f:
db:1b:6d:db:f8:db:ea:c4:0e:34:d5:85:fc:85:1b:
f3:8b:19:e9:64:0a:81:7c:21:c2:f5:59:9b:64:27:
36:1e:ff:e4:57:4e:30:75:2f:58:08:77:44:59:c5:
f6:ca:2a:00:8d:c3:81:87:1d:66:7c:79:52:29:0c:
99:4d:a7:59:d5:73:9a:40:e9:e1:0e:7a:91:14:4b:
58:89:29:1e:28:29:33:6b:38:08:8d:97:bf:31:b8:
d3:4f:a0:77:9f:eb:f1:a9:50:bc:dc:03:6b:74:6c:
fe:9c:18:3d:5b:c9:7c:cc:69:21:bd:b5:9c:8f:a9:
34:f3:78:3d:b9:7a:ba:4d:65:9e:66:0c:a4:95:af:
96:c3:d8:fb:7b:51:4d:8d:dd:46:05:3d:b7:e8:52:
0f:48:c2:dd:66:c5:eb:58:b9:26:9c:7b:b6:76:cd:
3a:03:61:9f:48:ed:a0:4f:de:4a:17:35:b2:d9:27:
a5:72:be:31:e3:3f:83:c7:43:45:2b:07:32:34:54:
e2:68:4c:be:96:b1:99:36:58:b8:a1:45:fe:d2:8d:
91:c4:1c:9f:79:6f:b1:fc:0f:0d:8b:77:30:a6:92:
cd:cd:b5:a8:59:db:b6:21:79:6e:96:c1:c0:97:dc:
e3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:CB:E5:0F:9F:5A:71:A5:DC:FB:85:7C:36:DB:C6:E8:9E:93:BD:5C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RsvlD59acaXc-4V8NtvG6J6TvVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7b:9f:e4:aa:69:d7:68:11:b6:ad:0e:13:6a:c8:45:31:c5:2e:
e0:ea:b9:99:99:a0:18:a5:64:13:85:a2:8e:51:b5:c1:47:93:
50:10:8b:b8:d8:ee:5f:e4:77:d7:d0:79:49:25:dd:34:7f:bf:
ff:28:4d:6a:66:fd:91:a8:49:b4:3c:4b:a3:cd:68:ef:cf:33:
3d:12:2b:21:fd:2a:31:60:66:38:9b:2c:12:e2:bd:0a:16:77:
c3:dc:81:35:16:c5:2c:6f:17:70:ff:48:ad:8d:87:29:12:e8:
01:56:77:24:e3:c0:12:eb:42:37:00:3c:85:56:e2:9f:2e:b7:
55:e0:bf:7e:ff:e9:2c:ba:34:b6:c3:b2:3b:b8:d9:59:c0:08:
53:67:d7:4e:06:ec:4e:a5:ad:e0:1e:aa:97:fd:66:a5:53:27:
54:8b:49:00:05:a3:33:3f:48:69:7f:40:54:59:0a:03:64:36:
14:63:e0:3e:a1:72:e6:b8:18:b3:e5:ae:ba:13:07:d6:1c:26:
c7:1c:e7:e3:0d:4b:9f:a9:8c:d2:0b:45:cc:8e:ef:b2:b1:b7:
7f:f4:4b:68:77:32:29:ac:7b:88:4d:5b:53:a9:73:e1:08:32:
11:75:a8:76:7e:49:4d:8a:9b:3a:9a:18:75:e8:45:54:db:62:
4c:9e:99:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 17:08:20 2025 by rpki-client