Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_viARDqZPThAZdFiCCBD_Cg1uXc.roa
File: _viARDqZPThAZdFiCCBD_Cg1uXc.roa (raw, json)
Hash identifier: lyTj2k1urGRkeNmOGXvO0RtMg5R1o6XpKkJrZfh3Hio=
Subject key identifier: FE:F8:80:44:3A:99:3D:38:40:65:D1:62:08:20:43:FC:28:35:B9:77
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189DC932571C243BEC5DCA7F438DCC8F5A6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_viARDqZPThAZdFiCCBD_Cg1uXc.roa
Signing time: Wed 09 Aug 2023 23:12:58 +0000
ROA not before: Wed 09 Aug 2023 23:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:dc:93:25:71:c2:43:be:c5:dc:a7:f4:38:dc:c8:f5:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 9 23:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fef880443a993d384065d162082043fc2835b977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:5a:63:52:24:36:57:6e:b8:d9:4d:1f:8f:94:
c0:14:3e:8a:c0:52:a3:c2:df:11:79:00:37:78:b9:
e6:74:a0:39:51:9a:f8:8f:c6:d1:8a:91:34:55:94:
4c:26:b0:e8:91:c5:6f:42:0d:87:9f:73:0f:2b:a2:
77:2e:3a:d7:fc:a7:9c:64:d1:6e:32:e2:83:0d:00:
35:d3:2c:e8:02:e7:08:a0:6b:3a:29:73:4c:fb:db:
b2:9e:18:3c:f0:31:71:c1:b8:29:e5:e1:19:81:2f:
d1:a7:78:fa:4a:77:31:57:b4:85:33:81:b7:6b:7a:
c8:13:72:e9:3c:47:c5:d1:36:fc:99:31:9f:4c:b4:
ca:e8:61:34:ff:ef:03:9e:bd:0a:a1:8b:15:d6:b3:
be:69:b2:5a:7c:0f:e4:8d:ff:5c:f7:c3:01:73:9c:
ca:9a:35:ce:4f:97:65:b2:5f:3b:4e:20:e7:dc:cf:
4b:2f:8f:bc:ca:64:63:e2:b6:a3:fa:e3:de:82:b3:
f6:a7:72:4e:c2:27:e2:78:05:ca:5b:b4:3a:40:14:
ec:31:e2:6a:39:45:e2:df:1a:ab:aa:22:e4:4f:77:
49:64:7a:ea:5e:86:0e:14:c3:a8:51:2b:bb:ac:84:
15:67:a0:0c:7c:a9:f4:29:18:9a:19:20:24:d9:f3:
02:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F8:80:44:3A:99:3D:38:40:65:D1:62:08:20:43:FC:28:35:B9:77
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_viARDqZPThAZdFiCCBD_Cg1uXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
00:34:cb:6c:9e:bf:bc:8b:0c:8e:18:c2:d6:83:5e:6d:0b:5c:
0a:19:ef:f6:a7:64:14:51:76:7d:b8:db:18:e1:84:e2:ab:90:
68:58:3e:c3:50:d6:6b:76:74:61:5e:60:24:93:15:36:ad:14:
ae:9e:19:21:f1:ed:a9:5c:8d:2f:20:b2:bf:a1:d6:1d:b6:b5:
59:9c:a4:65:84:08:1c:2a:e9:64:e8:46:0b:d1:2e:99:7e:ef:
74:97:40:53:77:fd:95:3f:7a:61:01:f6:2d:d3:ab:2e:2c:8b:
54:de:be:0e:8e:8b:4d:79:24:fe:4c:d7:cb:29:d0:fc:0e:3c:
53:8e:aa:bf:c3:73:e9:89:c0:19:2f:82:9f:90:27:e1:63:31:
72:3b:42:a9:08:d0:a4:31:dc:3c:f8:c7:d6:13:12:d9:ab:2e:
7c:0f:1b:99:5a:28:90:82:fd:87:99:d2:2c:51:8f:d7:9f:6d:
3c:64:c9:8e:88:10:c9:74:7c:b4:7d:14:36:59:73:07:40:49:
5b:eb:40:8b:e3:ee:0c:21:71:46:10:ba:7b:44:ff:2f:51:7f:
2f:72:c3:56:ec:7e:81:09:59:a2:b2:8d:2d:26:ec:83:28:3f:
cd:bf:34:44:bd:e5:0d:b6:01:dc:7a:69:95:44:27:f0:7b:59:
b8:d0:2f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:08:21 2025 by rpki-client