Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/S7WUPELIX0ks6ZgJgVYHLvTnQ_Q.roa
File: S7WUPELIX0ks6ZgJgVYHLvTnQ_Q.roa (raw, json)
Hash identifier: jMTdyDB22L+qcxOZIArOPF+WWoM7hrx/1fcRhmus7Pw=
Subject key identifier: 4B:B5:94:3C:42:C8:5F:49:2C:E9:98:09:81:56:07:2E:F4:E7:43:F4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01871A968EABFA9207692FFA0919D220C900
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/S7WUPELIX0ks6ZgJgVYHLvTnQ_Q.roa
Signing time: Sat 25 Mar 2023 21:04:47 +0000
ROA not before: Sat 25 Mar 2023 21:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:187:1a96:eaf/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:1a:96:8e:ab:fa:92:07:69:2f:fa:09:19:d2:20:c9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 25 21:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4bb5943c42c85f492ce998098156072ef4e743f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:08:1c:b2:e2:07:2c:be:de:10:95:b7:67:26:
28:db:7c:1b:7f:d8:4f:2f:e7:ee:9a:2c:33:81:07:
05:27:77:6c:41:7b:62:a1:6f:f6:1c:45:44:e9:3d:
68:d2:3c:cc:77:0e:31:7d:40:be:a7:69:ef:7c:81:
b2:96:67:0f:fb:4f:52:a4:30:05:b7:74:8c:5e:49:
51:48:8f:6f:c7:5f:71:fa:8d:76:3c:97:25:36:03:
f9:fb:f9:46:98:10:c7:82:58:08:5b:fc:82:19:96:
51:32:de:37:9c:d8:f8:ae:f6:9b:09:cc:a1:3a:69:
13:61:b6:fc:72:64:fc:6f:1a:46:71:e1:ff:34:61:
67:cc:60:7b:24:76:93:15:f7:16:4c:13:fe:23:5a:
4a:42:43:dd:9e:0c:15:23:58:29:07:bd:b3:97:20:
c7:d7:67:c6:4f:24:7b:6f:19:8b:94:50:ee:23:8e:
dc:52:ef:85:8c:23:e3:32:95:21:a9:93:af:ac:14:
d8:9e:fb:d1:75:dd:a4:d6:ff:cd:a6:f8:32:b5:0e:
6b:a7:ba:53:53:f3:8a:c5:c5:95:e6:16:9d:53:90:
78:4e:fd:2d:3e:56:f5:b7:14:9f:c2:a0:bc:66:79:
1f:2e:e3:8f:d4:be:4f:9d:34:dd:3d:a9:9c:84:48:
8d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B5:94:3C:42:C8:5F:49:2C:E9:98:09:81:56:07:2E:F4:E7:43:F4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/S7WUPELIX0ks6ZgJgVYHLvTnQ_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7c:1a:18:d1:c4:11:3a:8f:df:e4:79:86:fe:35:a8:91:28:5d:
10:53:99:51:6d:c3:5f:17:07:3a:20:64:d4:99:e8:c1:6c:bf:
16:26:b2:38:56:13:5a:dc:58:7c:90:35:d8:5f:3a:46:6d:dd:
45:99:0a:a7:ae:d1:86:9e:c8:f1:c1:10:cf:2d:85:8f:f5:8e:
eb:16:d7:c8:ca:52:af:f8:43:5e:c7:03:16:32:02:f2:3c:a7:
56:40:a3:ee:43:c2:b8:29:9f:da:88:90:38:a6:94:6b:a8:c8:
31:1f:2a:f3:04:ab:1c:19:64:86:42:a8:33:ae:a0:54:d9:80:
c9:f6:00:97:7d:90:23:85:d5:91:8c:d0:d3:a9:5c:93:1e:24:
6d:e5:0f:6f:0b:44:9e:74:5c:fe:05:bd:5d:21:d8:49:ba:e8:
20:c8:d5:4e:a7:e6:6a:cc:b3:f4:d6:94:d4:44:77:6b:57:60:
95:28:4c:db:d1:71:09:58:79:85:9f:0a:67:62:43:e6:cc:f3:
e0:40:b7:00:7f:95:15:db:5e:31:5a:d7:2f:73:65:d7:30:f5:
5a:ec:91:4b:31:c0:54:f1:2a:92:1c:42:1a:6c:6c:cd:ff:b3:
d2:10:71:c2:f9:52:d9:09:41:19:68:52:40:a6:ad:f0:70:be:
1e:2d:4f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 19:17:27 2025 by rpki-client