Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/T782pY5yxv4o20UY3f0mS9tNdYc.roa
File: T782pY5yxv4o20UY3f0mS9tNdYc.roa (raw, json)
Hash identifier: QFYjDZUT6dXNWbwpdmNMDzY75UTuXUnGYna7L9BpydU=
Subject key identifier: 4F:BF:36:A5:8E:72:C6:FE:28:DB:45:18:DD:FD:26:4B:DB:4D:75:87
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187074F900F202C488598149E2D0FA9AFAD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/T782pY5yxv4o20UY3f0mS9tNdYc.roa
Signing time: Wed 22 Mar 2023 03:14:27 +0000
ROA not before: Wed 22 Mar 2023 03:14:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:07:4f:90:0f:20:2c:48:85:98:14:9e:2d:0f:a9:af:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 22 03:14:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4fbf36a58e72c6fe28db4518ddfd264bdb4d7587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ca:9d:a4:3b:6e:c5:0a:41:6f:86:f8:c4:75:
c8:10:86:c7:75:69:e7:ca:c8:e0:62:8f:d8:ba:15:
7f:33:02:fa:34:f0:2d:53:fd:d3:db:7e:10:ed:d8:
32:60:80:b4:eb:34:09:62:29:07:b2:70:a4:a9:37:
59:f7:b4:a1:5d:7e:b1:71:9f:d7:76:7d:ef:b6:47:
6d:4c:53:8d:90:46:35:6f:3c:8f:4b:1a:ba:8a:1d:
46:6b:4e:8c:b3:0e:b5:8c:b7:3f:43:66:bf:f2:21:
e7:2b:8d:7c:b3:97:12:86:ca:14:4b:17:61:5f:30:
39:84:bf:d5:8e:17:eb:91:39:4c:42:27:79:1e:32:
f6:34:62:67:a5:58:3b:af:de:c9:f5:f8:93:e2:2f:
4a:c9:b7:38:a1:df:fe:7e:db:8d:22:59:09:55:41:
b2:b6:ef:e5:77:80:c1:bf:ca:82:c6:25:53:42:51:
95:3c:99:67:ab:de:b9:ee:e9:bc:eb:bf:72:d3:4c:
b8:b2:c7:08:d7:d0:2c:f3:53:21:00:1d:43:d6:0e:
d8:ed:f1:0c:ca:a3:75:08:c0:2f:c7:29:3c:b1:9a:
7f:af:1f:76:1b:51:20:40:c3:24:0f:3d:07:6c:1a:
c4:23:af:8b:2e:39:93:be:d0:c5:55:5c:0d:90:57:
f8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:BF:36:A5:8E:72:C6:FE:28:DB:45:18:DD:FD:26:4B:DB:4D:75:87
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/T782pY5yxv4o20UY3f0mS9tNdYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7b:c6:db:f6:81:0a:31:0e:0d:3f:e9:fe:20:4a:4b:01:15:3b:
06:fe:3c:1b:df:ff:72:60:fc:aa:4d:e9:a2:3f:e2:e2:72:32:
e6:c4:55:1c:e3:5d:73:6f:ce:8e:ae:32:4a:a9:11:0f:90:26:
4a:94:2c:09:e3:29:f6:c4:1e:52:82:b6:e2:7d:24:8d:53:cd:
ed:36:21:ed:38:7e:ee:62:c0:0d:24:2c:4b:95:2d:55:e7:ad:
81:8b:7d:55:64:e9:ce:d8:27:c5:0c:71:c6:bf:03:ad:b0:b7:
68:f0:af:00:8c:ca:e3:63:65:16:29:93:6d:e0:8a:30:e1:0e:
75:36:da:de:33:75:0e:e2:a7:53:cf:0e:d9:7f:12:d3:db:48:
c8:52:9a:08:9e:d8:c4:58:00:3b:df:6a:bb:7e:e3:d0:5b:d9:
7b:ac:d2:b7:ed:cf:0d:78:bb:79:07:46:45:79:e6:6c:50:3f:
88:6d:1c:c7:e3:60:d3:85:70:be:5e:3f:8a:0d:5e:b3:86:2a:
f3:f4:39:81:a3:37:1f:38:3e:66:b1:f8:5e:09:bb:1f:08:2b:
02:3d:4d:b1:70:8d:1c:2a:5c:d5:54:62:1d:2b:5e:bf:3e:13:
4f:6f:e5:44:6a:62:f6:0d:25:a7:c8:ae:15:b3:d3:01:ec:e3:
5f:92:cb:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:13:54 2025 by rpki-client