Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SbLGUyt7yHOgmIXv43_b5IV3Ej4.roa
File: SbLGUyt7yHOgmIXv43_b5IV3Ej4.roa (raw, json)
Hash identifier: EzPcGQgssfU4/lzqM/yx4cqIkpaen0Eemh9jveD+Nv0=
Subject key identifier: 49:B2:C6:53:2B:7B:C8:73:A0:98:85:EF:E3:7F:DB:E4:85:77:12:3E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188992E0CECF2F36A83D4E5EA2ABFB157E9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SbLGUyt7yHOgmIXv43_b5IV3Ej4.roa
Signing time: Thu 08 Jun 2023 04:05:12 +0000
ROA not before: Thu 08 Jun 2023 04:05:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:188:992d:7855/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:99:2e:0c:ec:f2:f3:6a:83:d4:e5:ea:2a:bf:b1:57:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 8 04:05:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=49b2c6532b7bc873a09885efe37fdbe48577123e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0d:f3:ed:07:e7:4f:6d:17:ac:f8:db:fa:c4:
0c:3b:8c:4d:a2:2f:1e:5e:51:a1:9e:d9:9a:85:76:
44:e8:61:12:61:ec:73:f5:d0:c6:15:88:9d:46:3d:
58:da:37:60:33:11:3e:a9:a4:bc:53:4b:32:77:0b:
b0:e5:05:88:c8:41:f5:f6:95:7c:b5:21:0e:6b:f2:
71:74:aa:84:49:ee:a9:17:7a:cb:4a:c3:4e:23:b5:
c8:84:3b:e2:8d:c2:45:fa:0f:56:6d:61:f2:ba:ff:
73:b1:47:5b:3f:97:c1:8d:4a:20:95:4b:84:d0:ec:
ec:df:72:15:8f:f1:13:f2:ab:61:2e:ce:40:49:e3:
60:1b:d6:28:cf:b0:31:6b:ba:44:e5:bc:4e:29:f3:
85:14:e5:8f:cf:8b:6e:07:75:26:bc:fa:50:23:99:
8f:b9:5e:a8:9c:38:96:4c:47:2e:9e:76:83:d2:b8:
99:85:1a:25:f9:85:97:dd:72:74:7a:97:b9:56:10:
da:52:5c:51:30:10:66:c6:70:b3:17:a3:a1:44:3d:
f9:6d:dd:2c:61:db:23:b0:a7:5c:64:cd:63:6f:dd:
27:80:0e:57:c4:8b:59:b9:1f:98:c0:37:5f:63:29:
b1:16:a8:51:e2:fd:d1:a7:59:34:f6:3c:ac:db:d8:
e3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B2:C6:53:2B:7B:C8:73:A0:98:85:EF:E3:7F:DB:E4:85:77:12:3E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SbLGUyt7yHOgmIXv43_b5IV3Ej4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
60:a0:5d:61:f5:b2:ce:6b:4e:0f:39:ce:41:1a:0b:b6:be:11:
f2:00:6d:d3:62:9e:45:97:94:03:a9:60:4c:67:a1:d3:a2:4d:
86:f9:82:06:af:4c:8e:ae:c2:27:7f:9e:c6:58:85:34:68:5c:
bf:45:0d:0b:89:75:3c:64:21:31:ae:f1:fe:10:81:64:43:79:
cf:12:ad:00:b5:3a:1b:cc:5f:d6:9d:d5:42:a6:32:55:31:f9:
c5:3a:f7:d8:73:97:d1:67:a5:27:2b:4f:27:53:29:32:07:55:
e8:41:bc:83:1f:c8:74:c2:94:a6:b3:f0:6b:7d:04:3f:64:f4:
fb:0f:f0:d1:41:38:e4:8a:dc:b5:43:d8:60:51:00:b4:0f:a3:
f1:0c:43:75:31:95:2e:a5:74:c7:cc:90:29:f0:3e:49:1d:bb:
8f:3e:a7:cc:88:92:4e:36:aa:14:26:fd:63:1b:53:29:fe:38:
23:06:61:32:7e:13:de:d6:3b:97:c6:69:a5:19:73:cd:66:d0:
c0:c4:35:99:f0:5b:c2:c9:96:04:fd:dc:8a:44:90:f0:75:0c:
be:d7:ad:9e:b2:65:7f:b8:f4:aa:4e:b0:bd:19:0b:de:60:a7:
c3:88:ea:21:9e:f7:20:76:60:5f:64:8b:1d:5d:0b:9e:fb:03:
81:5a:18:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:27:48 2025 by rpki-client