Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SdMx75HAHmrH63QulH2ulJnL0Xs.roa
File: SdMx75HAHmrH63QulH2ulJnL0Xs.roa (raw, json)
Hash identifier: uQKt38agfMcXSCD5BdrK42hISnPQXWFxIYv5V5WXvPE=
Subject key identifier: 49:D3:31:EF:91:C0:1E:6A:C7:EB:74:2E:94:7D:AE:94:99:CB:D1:7B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187F5E20F1D22158826BB076E77E21E50F5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SdMx75HAHmrH63QulH2ulJnL0Xs.roa
Signing time: Sun 07 May 2023 11:04:05 +0000
ROA not before: Sun 07 May 2023 11:04:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:187:f5e2:261/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:f5:e2:0f:1d:22:15:88:26:bb:07:6e:77:e2:1e:50:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 7 11:04:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=49d331ef91c01e6ac7eb742e947dae9499cbd17b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:69:61:ad:a1:f3:50:e1:17:95:32:ed:75:99:
f1:9a:b8:e1:bd:ed:a0:1c:e7:86:5a:0e:bf:07:0b:
a5:93:57:1e:d7:41:0c:de:78:fd:4f:59:9b:ec:9b:
4e:82:25:6c:bf:e0:65:d8:f2:05:c0:34:7e:a2:1f:
ed:f0:f5:52:d2:3c:15:5e:59:c2:c5:86:cf:89:bb:
58:df:de:91:a9:c3:9d:f9:8a:4d:cb:4b:db:bb:ab:
63:6a:9d:16:62:bb:79:19:38:b9:2d:70:fa:29:74:
6c:00:c8:9f:f3:5d:01:06:48:96:80:39:b8:c9:90:
37:c2:45:c6:1a:32:65:e5:ee:69:61:09:66:b1:d2:
4f:9f:0b:a0:33:ec:c7:b8:82:57:c0:e2:ef:03:29:
1a:78:fc:32:70:c8:9a:b8:e0:25:e2:16:66:6c:93:
6c:33:29:b0:54:b9:de:4d:a3:ad:fa:b9:67:77:72:
ea:2a:aa:51:f6:b0:9e:98:01:f9:41:9c:36:35:2d:
ca:c8:7f:67:8b:5b:fe:54:f3:a7:53:75:a1:1e:19:
78:2c:d0:e8:8d:4d:04:f4:0d:dd:c1:64:e5:1c:94:
4a:83:b8:00:dc:7e:7d:5e:4b:e6:b2:33:eb:2c:44:
eb:6a:6b:a2:cc:33:67:f8:48:93:c7:f6:48:80:41:
f1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D3:31:EF:91:C0:1E:6A:C7:EB:74:2E:94:7D:AE:94:99:CB:D1:7B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SdMx75HAHmrH63QulH2ulJnL0Xs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9f:e8:4c:07:8f:27:68:53:e8:6a:e3:6a:8b:e9:f7:a7:ba:22:
f4:0c:60:5d:0f:2e:80:fa:bd:81:8b:f4:fa:81:e9:3c:c5:f3:
a7:4b:96:72:18:25:0e:17:31:41:73:dc:73:0b:6f:6d:03:29:
1f:30:53:75:93:ba:40:1b:1c:18:1f:18:02:29:86:5d:99:82:
81:69:bc:8c:2b:86:e6:0a:39:48:3c:e8:4f:fc:b5:e6:15:37:
bc:95:54:d5:85:05:2f:13:59:6e:25:54:54:4a:ce:07:c3:6b:
07:d9:76:c2:b4:52:bb:6c:60:80:79:7b:11:78:99:94:c6:a8:
7c:c9:4c:42:62:42:69:4e:a5:87:2d:9b:66:a2:14:33:a6:b0:
57:d8:0a:71:aa:54:cf:49:27:1f:20:a6:75:89:72:10:5e:79:
6c:f3:17:ca:30:00:67:42:8a:de:83:7f:df:a0:44:e1:23:e2:
f6:e3:0d:62:3f:74:11:7b:1c:ce:6b:f0:ec:1b:d5:f7:d6:5f:
bb:18:33:45:6b:f8:72:93:84:af:4b:d5:4c:07:89:10:c2:84:
2d:de:5c:d0:1d:e6:c9:d6:2e:fc:da:cd:c0:3b:de:ca:62:63:
26:33:62:70:f3:90:6a:85:42:9e:40:ea:ed:82:eb:59:e2:c5:
e4:43:c3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:13:53 2025 by rpki-client