Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_4vXRNmsy3mSfw9nGiTYS6PVB1Q.roa
File: _4vXRNmsy3mSfw9nGiTYS6PVB1Q.roa (raw, json)
Hash identifier: HSkRpCZdkJEAmPTaNTd7XwKuwsw82uzXNyKFaVhQbbM=
Subject key identifier: FF:8B:D7:44:D9:AC:CB:79:92:7F:0F:67:1A:24:D8:4B:A3:D5:07:54
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186C67904BEBD915A66ABB5256676613654
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_4vXRNmsy3mSfw9nGiTYS6PVB1Q.roa
Signing time: Thu 09 Mar 2023 13:04:25 +0000
ROA not before: Thu 09 Mar 2023 13:04:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c6:79:04:be:bd:91:5a:66:ab:b5:25:66:76:61:36:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 9 13:04:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff8bd744d9accb79927f0f671a24d84ba3d50754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ce:b5:25:6d:d4:34:32:63:4c:79:61:bb:66:
4c:80:42:d1:0b:fd:d7:50:79:9c:d3:47:41:70:e6:
3a:07:ba:d0:ae:3b:cd:f9:6f:ce:69:f4:7e:fe:9b:
68:d6:18:f1:23:d1:ba:40:a6:81:46:fb:d8:f2:55:
ca:41:7d:4a:be:2d:4f:a0:30:55:5d:52:fd:96:fc:
89:7f:d4:23:f5:c4:ac:79:9d:72:2d:49:17:43:ae:
a0:e3:e5:7a:d6:f7:a7:db:3f:fa:1b:d8:55:75:eb:
1a:a3:26:44:1e:ac:fd:f0:84:3a:14:92:93:b4:18:
a1:cb:c8:d3:d7:53:2f:b9:c0:86:d7:0d:c5:b2:91:
53:ed:97:e5:3e:53:7f:f6:89:e6:a4:fe:b3:d7:71:
19:d1:66:95:9b:fb:14:39:3b:40:d4:33:20:f3:d6:
a5:59:73:14:7b:c4:5b:f2:05:03:f4:9f:b2:70:5f:
fe:90:9b:9e:da:04:40:fc:55:6d:6d:e7:e8:cc:5b:
45:4b:86:76:8e:0a:7a:87:85:5d:54:26:a9:64:c3:
a0:c8:63:b3:f3:e1:b8:79:e9:b5:f8:09:7e:df:53:
8b:19:97:7b:6b:d7:d8:e4:8e:91:02:e0:90:ce:2b:
6c:91:e1:95:b4:77:ac:1f:cb:a3:2e:8b:db:ac:6f:
42:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:8B:D7:44:D9:AC:CB:79:92:7F:0F:67:1A:24:D8:4B:A3:D5:07:54
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_4vXRNmsy3mSfw9nGiTYS6PVB1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
66:e9:a8:23:40:49:b3:b9:a4:19:86:8b:f5:72:15:71:89:4b:
b4:94:22:bd:83:d2:ad:ee:50:d5:1e:ed:dc:13:c2:51:d8:b7:
62:08:d1:1f:f1:2f:f8:be:cd:17:bd:3b:70:4d:e0:40:1a:c2:
c1:25:96:3b:bd:b6:9c:0e:8f:64:9d:83:42:d3:31:ec:cc:fd:
76:8a:d7:d6:dc:5d:ac:d9:c2:81:6d:7f:40:fb:ce:27:6d:29:
eb:a4:d1:20:2d:52:dd:9c:28:d9:14:2c:e2:ce:d7:6a:3b:17:
4a:1a:0c:9d:32:74:ff:7d:81:0d:12:df:97:d7:1b:c3:68:da:
23:8b:0b:fc:e2:09:e0:33:0e:94:a7:dc:56:c5:b8:3d:e0:67:
bc:56:7e:48:2a:0a:7d:20:fd:05:55:1c:a4:dc:a4:07:7f:6d:
31:ac:27:ee:11:2d:40:a0:98:31:ad:88:b1:7b:3d:35:ba:04:
49:c8:ae:d2:66:fd:f8:06:44:7d:1d:15:0c:b5:d3:bc:b0:f7:
46:ee:c5:30:48:46:03:51:e3:3c:4f:e5:8e:1b:4e:69:d7:ed:
fc:be:9f:64:b4:5d:29:76:b4:c6:d3:b6:fc:6d:95:af:4c:38:
99:c9:db:2c:27:17:d3:5e:a0:60:32:dc:f8:70:ed:cb:c7:86:
87:11:8b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 23:19:24 2025 by rpki-client