Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SX_KrzsG7_TDDpG9RVLHU1HmYrE.roa
File: SX_KrzsG7_TDDpG9RVLHU1HmYrE.roa (raw, json)
Hash identifier: 6KC7li2gaIZOlffLm0vMfQVVKm7Pq/TTIfI2UyoVYGc=
Subject key identifier: 49:7F:CA:AF:3B:06:EF:F4:C3:0E:91:BD:45:52:C7:53:51:E6:62:B1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01868FF83A40FBE10141BD649BFB66614878
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SX_KrzsG7_TDDpG9RVLHU1HmYrE.roa
Signing time: Sun 26 Feb 2023 23:04:15 +0000
ROA not before: Sun 26 Feb 2023 23:04:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:8ff8:26f2/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:8f:f8:3a:40:fb:e1:01:41:bd:64:9b:fb:66:61:48:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 26 23:04:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=497fcaaf3b06eff4c30e91bd4552c75351e662b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e9:28:5f:95:5b:38:42:80:59:d2:6b:5b:f9:
79:83:91:f1:7e:55:65:a6:a2:4e:8b:4d:08:98:dc:
0e:8d:ab:87:c1:21:f6:71:b7:2b:90:94:7b:3d:a0:
b1:38:cd:18:a5:3a:f8:b6:bc:6c:41:32:6b:eb:7b:
2f:f5:f1:7b:f2:69:c1:7c:46:b9:a3:09:11:e3:04:
0e:91:bb:84:a8:bd:ca:15:72:d7:ce:3d:10:5d:08:
da:35:ae:c1:e5:b2:8b:5b:40:1a:5e:5d:0a:f9:2a:
42:d5:ab:68:2a:69:28:e5:f5:b5:43:9f:8c:30:65:
b5:dd:d8:5c:c9:d1:b6:eb:bb:eb:f5:f9:7d:47:3f:
fa:40:a5:dc:b9:5b:ad:c8:01:e4:8e:5c:55:aa:4c:
c0:af:1a:95:07:af:e7:6f:f7:1f:5e:cc:61:a8:a2:
10:2b:df:68:3e:ee:4c:5f:ee:cf:b5:2b:d2:2c:2f:
fa:c0:c4:73:6d:54:91:ec:37:02:3e:32:b4:14:11:
b5:97:f0:97:99:b7:28:b3:6a:52:4a:69:58:8b:45:
e0:78:37:78:0e:93:72:55:17:88:1a:18:2b:66:4e:
1a:49:6f:96:e4:7e:0f:cc:70:cb:2b:85:39:2f:91:
d9:64:fd:26:7f:fd:d0:6b:af:43:fa:d4:f6:02:13:
77:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:7F:CA:AF:3B:06:EF:F4:C3:0E:91:BD:45:52:C7:53:51:E6:62:B1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SX_KrzsG7_TDDpG9RVLHU1HmYrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
35:8a:29:22:3b:cd:ef:0c:95:cf:16:4b:a5:f4:f8:00:9e:9e:
47:0b:41:22:5d:91:57:34:51:84:8a:c1:30:26:e7:ed:25:81:
5f:18:88:43:8f:22:74:81:a3:e4:25:4b:40:24:65:b3:95:70:
4a:bf:e0:ae:59:2c:4a:2f:85:61:97:6e:21:36:98:39:43:5c:
47:27:3b:6c:f6:0d:89:3a:b3:06:2b:6b:ba:3a:8f:33:db:7d:
03:40:e5:36:5b:4f:ea:60:d9:4f:0c:23:c8:3f:18:04:97:16:
52:1a:3e:fd:5f:6c:9e:3d:fe:e3:0f:ff:a6:26:3f:7f:d0:90:
f0:8f:88:aa:ef:f6:ef:55:7f:dc:c1:17:92:69:0b:00:14:22:
b5:f3:8e:fd:ac:88:dc:96:50:7c:1a:d3:4f:ad:44:3b:f7:93:
ae:4f:4f:2c:17:14:56:75:4c:d3:de:ed:8e:33:52:d1:57:01:
db:1d:2d:74:ab:e9:31:c6:48:83:1d:14:83:1f:43:37:53:3a:
46:e5:60:b4:7e:5f:3c:46:ea:d9:68:8f:4f:2a:81:a6:c2:e5:
df:ae:46:a9:4b:b1:7c:1a:50:b5:f1:c2:d7:86:44:0e:3d:12:
58:d4:71:e0:91:4f:73:ad:5d:b8:d9:38:53:fd:15:fc:89:7a:
ce:61:29:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 02:57:06 2025 by rpki-client