Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_S8iDuBxdv4ErjIcWiekMe6SnhU.roa
File: _S8iDuBxdv4ErjIcWiekMe6SnhU.roa (raw, json)
Hash identifier: +ve3fSrFDAu5h6Xv7A1vFnmQoeDCS/ejo6YSsFZMpgU=
Subject key identifier: FD:2F:22:0E:E0:71:76:FE:04:AE:32:1C:5A:27:A4:31:EE:92:9E:15
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018722FC0E747981124FD21D2656256C2E66
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_S8iDuBxdv4ErjIcWiekMe6SnhU.roa
Signing time: Mon 27 Mar 2023 12:12:36 +0000
ROA not before: Mon 27 Mar 2023 12:12:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:22:fc:0e:74:79:81:12:4f:d2:1d:26:56:25:6c:2e:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 27 12:12:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd2f220ee07176fe04ae321c5a27a431ee929e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fb:3b:3b:25:ea:d2:b5:5f:fe:34:9f:2e:43:
99:89:7c:b2:3e:b3:7f:88:13:63:fa:ed:e3:db:45:
74:ec:b8:ef:fb:63:75:fc:ba:96:8d:4b:38:31:dd:
ac:e7:d1:84:d1:8b:bd:0c:47:04:d8:a5:da:b9:eb:
c6:c9:fd:c9:ab:12:5c:6c:42:c8:d9:49:76:69:64:
16:af:69:e3:6f:c0:e6:bd:48:04:ad:d9:a4:ef:20:
cf:90:85:09:d2:f8:57:06:5f:85:10:bc:ec:1c:a1:
93:88:d2:21:92:41:d1:b2:a8:23:c1:80:b4:d2:04:
6c:1f:d3:00:09:72:f6:a8:b2:fb:fc:89:07:46:54:
2d:20:78:9d:24:da:4d:1f:33:b9:b4:a6:a4:9f:6a:
e7:a1:08:b1:cb:5e:9c:38:0a:a2:11:c8:6a:6f:21:
3f:f4:6b:f7:f3:6a:ff:ae:15:2f:96:f3:e1:bf:ea:
19:3b:aa:4b:76:1a:35:1e:0b:56:1b:3e:99:39:71:
21:eb:0b:fb:ca:a3:2b:11:9a:a4:da:01:69:10:8f:
e4:72:66:c8:5f:30:d9:09:38:4b:ad:bf:71:8d:ba:
5a:80:92:68:ce:e8:02:d7:75:83:ff:8d:f5:f2:3b:
83:74:ca:8e:8a:ff:ad:57:f5:a3:b2:ef:1c:49:ac:
72:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:2F:22:0E:E0:71:76:FE:04:AE:32:1C:5A:27:A4:31:EE:92:9E:15
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_S8iDuBxdv4ErjIcWiekMe6SnhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
08:74:1e:3f:a1:16:eb:97:35:37:99:61:7b:28:a0:ce:80:73:
6b:48:72:63:8a:86:06:09:6a:47:94:66:0c:07:d0:3b:3f:54:
ca:be:8e:5f:ec:76:a7:46:d6:9d:10:46:ec:ee:1c:a3:cd:4f:
2c:4a:62:6c:30:91:c6:d8:76:8f:28:2e:ce:92:33:6b:b1:bd:
4c:29:c2:a7:43:54:72:ab:67:66:a8:a4:7b:67:a8:33:f5:f3:
ec:99:82:ec:ae:65:9e:9a:93:60:9c:af:52:86:09:0c:78:af:
e7:23:08:cb:9e:2c:d2:77:b4:c8:b9:01:25:71:fb:9d:c8:30:
e3:0a:97:76:1e:5a:35:9e:3a:d7:6d:f1:2a:a7:6a:26:89:d6:
5e:73:1c:f0:a0:d0:74:cf:81:1c:16:e4:d8:64:43:61:5f:e7:
4d:a2:4f:dd:8e:be:44:2e:e1:dc:5e:82:a2:5d:8c:7f:6c:98:
2a:18:31:f4:8b:5d:a6:ad:ac:c0:65:cc:d6:c8:af:77:ed:84:
2e:d9:cf:57:56:2c:59:ef:33:a7:a8:ec:44:cf:47:db:6b:f6:
fb:98:d4:ff:c1:b7:29:ce:5f:52:67:0e:88:3a:86:2c:c6:12:
09:53:9d:85:2e:8f:4e:c4:4c:f3:18:06:8e:74:4d:22:4f:33:
8f:81:d1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:41:01 2025 by rpki-client