Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/T7DpkvoUt0KXecJaMx12i7Z-GT8.roa
File: T7DpkvoUt0KXecJaMx12i7Z-GT8.roa (raw, json)
Hash identifier: 2KOs25g8BE6GT1QrzKvQ5mHcBdI4gNLtukEYsTCxbcI=
Subject key identifier: 4F:B0:E9:92:FA:14:B7:42:97:79:C2:5A:33:1D:76:8B:B6:7E:19:3F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01885DC3ACB5D299B833C4F241B3E77E4D57
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/T7DpkvoUt0KXecJaMx12i7Z-GT8.roa
Signing time: Sat 27 May 2023 15:11:24 +0000
ROA not before: Sat 27 May 2023 15:11:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:5d:c3:ac:b5:d2:99:b8:33:c4:f2:41:b3:e7:7e:4d:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 27 15:11:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4fb0e992fa14b7429779c25a331d768bb67e193f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d8:1f:07:de:a0:14:64:10:21:8e:04:d4:62:
69:8e:1a:d4:f7:e4:96:0b:1a:fe:3a:df:58:7b:3d:
f2:c8:e6:07:7f:2f:1f:88:4c:6e:30:37:9d:6f:70:
93:48:ef:8d:9c:87:63:d3:d5:1c:aa:11:5b:1a:e2:
4c:7e:6d:37:93:c7:87:b3:7c:6d:a2:a9:17:43:57:
dd:a7:be:82:47:57:4c:af:56:f2:59:27:0d:e8:a1:
50:f7:26:39:8f:19:31:4d:1c:4a:df:b1:04:b6:13:
26:dc:a2:64:91:49:f5:54:35:a6:25:63:6b:67:5c:
f2:61:95:17:44:ea:47:c6:91:b1:18:6f:15:e2:48:
79:7c:81:94:6f:57:18:5c:67:93:80:24:2d:a1:b2:
30:45:89:96:a9:fb:55:d0:89:43:c9:ea:41:5d:fd:
88:dd:69:2e:9d:dc:d9:58:85:38:80:52:d2:12:30:
df:30:16:48:db:37:95:80:00:39:2f:42:fd:4d:e3:
e4:28:b4:9b:3f:34:94:b9:7f:8c:19:bb:d6:a8:6e:
01:eb:7a:ce:08:28:28:1e:a1:f7:c2:41:f2:55:46:
46:c6:75:45:e8:cc:24:29:f8:38:6f:58:a7:bc:87:
29:13:68:09:bf:66:a7:f3:14:03:7b:fe:c5:0c:6a:
58:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B0:E9:92:FA:14:B7:42:97:79:C2:5A:33:1D:76:8B:B6:7E:19:3F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/T7DpkvoUt0KXecJaMx12i7Z-GT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6c:8e:39:46:a9:b4:ae:d8:83:8c:0d:70:bb:16:11:b9:8c:e2:
65:98:a8:82:19:ab:62:fc:09:75:ed:62:7e:75:49:10:65:4b:
f8:3c:30:08:eb:8e:42:03:6c:7b:d2:25:57:f8:14:c5:57:cf:
11:f5:21:03:31:ff:0d:36:f3:18:a3:43:bf:b3:1f:fd:9d:88:
d7:7b:f3:e1:32:88:e2:8d:01:53:f8:37:b3:ae:13:29:53:36:
26:1a:23:6a:ae:dd:58:e6:fe:17:f3:ba:11:d4:d9:24:73:d2:
5b:10:09:6d:e5:18:34:ac:e9:61:14:7c:ce:a6:53:01:72:fd:
d7:09:b6:10:b2:14:5c:28:ba:5f:68:33:fa:a7:ef:5e:1e:15:
07:7e:e1:fa:03:87:d6:1c:69:31:18:a4:32:00:7f:31:7d:f0:
1b:4a:13:c7:06:98:c6:18:0d:93:62:a3:cf:98:34:4f:86:28:
50:b3:e2:e3:e1:80:7a:16:c2:d5:b9:19:de:57:13:27:3e:05:
7c:31:1d:c2:fe:f5:a4:e9:84:8e:8e:97:36:46:f6:ab:30:4e:
0b:73:f8:17:b5:53:39:cd:97:18:2c:5f:b4:e0:f7:58:8d:84:
7b:1b:e6:35:0c:cc:72:88:be:38:e3:87:a3:23:d6:ef:77:5a:
1b:fa:1f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:21:12 2025 by rpki-client