Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SevJMIsuhQNsZZ_fD3NDrDeokRk.roa
File: SevJMIsuhQNsZZ_fD3NDrDeokRk.roa (raw, json)
Hash identifier: 4pMcYztXiTrU7e9OcTZ7+xmr69XS4qwkhmkf/cVDXg4=
Subject key identifier: 49:EB:C9:30:8B:2E:85:03:6C:65:9F:DF:0F:73:43:AC:37:A8:91:19
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186FBB941814406690AB1B6F2A21AB0E550
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SevJMIsuhQNsZZ_fD3NDrDeokRk.roa
Signing time: Sun 19 Mar 2023 21:14:27 +0000
ROA not before: Sun 19 Mar 2023 21:14:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:fb:b9:41:81:44:06:69:0a:b1:b6:f2:a2:1a:b0:e5:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 19 21:14:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=49ebc9308b2e85036c659fdf0f7343ac37a89119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e5:b8:c2:e2:b1:a7:c1:e2:11:6a:12:97:ed:
82:c9:f5:c4:03:05:a0:12:b1:82:7b:17:70:77:d2:
80:53:ee:79:c9:02:b7:38:7f:3f:12:2a:78:70:0a:
c9:4a:79:af:29:38:3a:b4:01:42:d8:91:aa:d0:b0:
75:2f:ef:d4:f5:41:d0:ed:1d:13:60:a3:49:b0:24:
76:8b:60:fc:8a:ea:18:c8:f8:6c:2b:b9:56:00:64:
8f:62:c5:f6:78:52:1a:56:4c:18:8b:ae:7b:51:4c:
d3:c3:b4:aa:7a:7c:9a:e7:54:b1:f7:23:bc:c3:71:
b4:e4:d6:e0:3a:26:1e:e9:7e:7e:18:79:4b:cb:70:
dd:ee:5d:f0:ae:cc:56:16:fc:a9:11:4a:d1:16:c7:
16:b7:9d:fd:d2:59:6e:c5:60:03:53:3e:a9:ba:dc:
e3:50:2f:67:5e:de:e9:41:26:ff:e1:46:d2:80:1f:
59:8c:2f:d8:04:ab:22:09:a3:66:98:42:0b:60:79:
a8:4b:b0:9b:21:fe:01:c8:60:b4:5a:ef:42:f6:12:
b4:9b:4c:33:33:84:d8:a9:56:24:a6:77:b6:e1:88:
b9:02:ec:d3:61:33:7b:59:06:4a:82:93:22:c2:4f:
a4:5a:55:3c:f6:5a:ed:80:43:7b:ff:44:c9:8f:b1:
bc:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:EB:C9:30:8B:2E:85:03:6C:65:9F:DF:0F:73:43:AC:37:A8:91:19
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SevJMIsuhQNsZZ_fD3NDrDeokRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
90:d3:e5:f2:20:df:56:ac:44:bf:14:b4:af:9e:65:21:ab:72:
72:59:37:41:27:34:99:ca:8d:4a:bc:1e:ba:dc:79:4f:58:78:
97:97:8e:f7:5f:d9:39:15:06:6f:2f:28:5e:c1:7c:63:3b:e4:
25:48:44:fb:39:00:b6:86:8d:65:75:85:dc:20:15:f2:c5:6d:
e2:78:95:e7:92:a4:2a:85:93:df:1d:ee:c5:f2:aa:a6:e2:e5:
53:9d:50:83:50:17:20:92:b3:72:30:ea:66:cc:80:a5:3c:63:
89:76:f5:9f:44:2b:e8:fe:9c:f0:57:0b:6a:3f:e7:cd:fc:3c:
7f:33:ee:ce:a1:89:69:b6:07:b7:0c:b3:9e:88:20:84:e1:1b:
af:12:76:83:fe:93:15:47:72:08:b6:ae:77:e5:98:db:94:ad:
d4:bf:81:e2:2b:b9:9a:a0:0c:c0:a7:95:51:d6:e8:30:02:8e:
ea:0c:31:90:f8:68:98:38:ba:f1:04:ed:bc:fa:92:2e:0d:ab:
30:e1:59:6a:92:98:58:c7:7f:1e:44:86:23:ab:e8:f9:b7:3b:
e7:d5:1e:85:1e:83:dd:d0:cf:da:46:f5:a6:c4:f0:e1:91:62:
0d:dd:c5:3b:8a:22:2b:c4:34:4e:b9:a8:de:78:19:cb:7f:47:
26:0d:36:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:14:44 2025 by rpki-client