Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/U_BRGB5V0hO9bcHu5JWS0zBgXaU.roa
File: U_BRGB5V0hO9bcHu5JWS0zBgXaU.roa (raw, json)
Hash identifier: 5xfEqaENpfs+34HShC7rz6bk0XJ7z7g6Y7HkVcNi6B0=
Subject key identifier: 53:F0:51:18:1E:55:D2:13:BD:6D:C1:EE:E4:95:92:D3:30:60:5D:A5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189774E9860FDA385497F682A2EBB340413
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/U_BRGB5V0hO9bcHu5JWS0zBgXaU.roa
Signing time: Fri 21 Jul 2023 07:16:26 +0000
ROA not before: Fri 21 Jul 2023 07:16:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:77:4e:98:60:fd:a3:85:49:7f:68:2a:2e:bb:34:04:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 21 07:16:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=53f051181e55d213bd6dc1eee49592d330605da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a0:73:29:ff:1b:7c:3d:e2:4e:69:a8:b4:e3:
80:60:19:1d:40:35:02:62:04:36:6c:82:62:97:99:
25:9a:c6:03:9a:5f:1e:ac:80:a1:a7:21:55:73:1c:
02:f0:c5:21:e3:9e:a6:9b:11:b3:3e:e6:7a:5a:d4:
6f:3d:85:92:af:1e:29:16:76:16:67:18:96:1d:b3:
80:26:ed:4b:eb:c3:fb:df:e3:cd:97:b3:4d:bb:be:
d1:43:a2:61:ea:c2:7d:6d:e1:0d:4d:54:90:ae:69:
fa:c7:5c:9b:89:16:0f:a1:05:88:37:6c:ef:22:74:
50:24:93:4b:d1:54:26:eb:a3:38:5c:36:dd:d1:60:
7f:db:db:4c:f9:92:ca:7c:33:4f:3b:02:8d:aa:11:
53:55:0b:b9:ab:9b:9f:5e:c3:41:9e:cd:8e:18:12:
1b:2f:3f:f0:86:e4:b8:7f:c9:8e:d9:24:f4:1d:5a:
12:76:24:88:42:94:43:72:91:fc:28:ed:c7:b1:7c:
d9:5d:d3:77:ca:bd:0c:40:f5:4f:49:e9:df:db:1b:
9b:24:68:f6:f2:fb:f8:1e:d0:c1:57:bc:22:36:34:
9d:19:dc:fe:e4:fb:f1:f5:dd:9e:b9:fe:17:16:ad:
3e:dd:91:4e:3f:da:11:ca:8b:2d:bf:90:5f:46:75:
aa:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F0:51:18:1E:55:D2:13:BD:6D:C1:EE:E4:95:92:D3:30:60:5D:A5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/U_BRGB5V0hO9bcHu5JWS0zBgXaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
36:31:f4:43:f0:ec:45:55:b3:5e:2c:7b:3b:e9:4b:c7:54:de:
a0:e3:e4:a6:50:b3:2d:26:78:d6:b7:88:5f:ad:ec:35:2a:91:
b6:50:27:16:9f:1a:fd:46:27:a1:fd:51:6b:5c:ed:2b:00:51:
bf:a2:ab:c3:0f:76:bf:9a:64:3c:6a:90:8a:17:f9:c7:23:1c:
ea:97:64:f6:aa:76:ef:35:33:9c:0c:93:be:97:37:7b:26:36:
c2:55:a2:f5:ea:16:f7:f5:85:61:f1:17:5b:31:15:97:f3:2c:
06:c1:fe:ce:83:29:df:b0:26:48:76:ed:7d:1e:0c:8c:10:68:
c9:50:5e:2e:c9:54:91:a5:ea:f7:cc:c3:70:07:5b:d0:9d:09:
15:b4:43:06:61:51:6d:ce:3c:f3:2b:3d:84:13:54:c3:d6:8d:
6a:cd:71:00:70:90:d0:3a:a8:06:71:7a:e2:bb:11:b0:46:a8:
04:22:2d:a3:e6:63:c9:b7:24:59:aa:af:a7:bd:f9:7c:35:4f:
6a:71:a4:4b:f7:f9:1e:fc:fd:33:25:89:67:ba:93:e8:a0:8b:
44:4f:3e:27:c5:09:96:ca:ec:88:ec:74:cd:54:08:ab:09:72:
cd:c2:79:81:fe:2c:c8:ae:d8:8f:65:02:2a:cf:33:ed:e1:1e:
79:f7:42:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 05:18:08 2025 by rpki-client