Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/a1DL26SteW3Z86UEESmdV9z_U6s.roa
File: a1DL26SteW3Z86UEESmdV9z_U6s.roa (raw, json)
Hash identifier: xu++hNsY3+xiI84FnqS3jjNLT/QPf3dBKlzNW6l1SmU=
Subject key identifier: 6B:50:CB:DB:A4:AD:79:6D:D9:F3:A5:04:11:29:9D:57:DC:FF:53:AB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183A98A462CA60AD968DF86BDD8C31C281F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/a1DL26SteW3Z86UEESmdV9z_U6s.roa
Signing time: Wed 05 Oct 2022 19:05:54 +0000
ROA not before: Wed 05 Oct 2022 19:05:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:183:5f81:ab13/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:a988:9cc3/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a9:8a:46:2c:a6:0a:d9:68:df:86:bd:d8:c3:1c:28:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 5 19:05:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6b50cbdba4ad796dd9f3a50411299d57dcff53ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:20:e1:fb:d5:63:5b:9a:c6:55:9c:93:8d:28:
9d:b2:db:4f:67:58:98:8a:fd:96:eb:77:07:d6:4b:
cf:3d:b2:e0:29:55:c3:ef:4e:f8:5d:7a:cd:00:44:
44:e9:9d:11:cc:53:65:77:60:ba:03:56:b1:38:32:
fc:ce:77:02:67:e2:32:09:37:af:72:37:67:13:dc:
85:57:8f:97:5e:b3:c6:14:f5:91:b0:b9:5b:80:b7:
e4:cc:a0:7d:b4:3e:fa:ad:b1:4c:b8:ac:f8:61:02:
50:e5:89:f1:0a:57:da:51:6b:60:46:4b:4b:c9:b7:
0f:63:cb:4e:3a:cf:dc:bb:7c:27:e3:8c:3d:06:9e:
dc:77:98:7f:ef:01:76:1c:c5:8e:17:e8:89:87:6d:
cb:03:4e:df:71:f6:a1:ff:7b:75:86:e5:59:b6:f0:
05:9a:b7:8b:61:c0:f8:6b:39:d4:5c:ab:f8:a2:b0:
76:b7:f9:3c:43:fa:cb:8d:5b:94:2f:1a:a6:d0:7a:
b3:13:30:91:5a:b1:fa:37:8c:cc:c7:b0:40:d2:4b:
1a:6b:52:ac:14:7c:ca:d7:18:1a:c6:72:70:0a:ac:
d5:e0:a5:fc:cd:41:4f:b2:c9:21:16:5e:36:a4:11:
bf:2b:6f:70:33:65:78:e4:bf:c2:43:e9:40:a6:78:
96:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:50:CB:DB:A4:AD:79:6D:D9:F3:A5:04:11:29:9D:57:DC:FF:53:AB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/a1DL26SteW3Z86UEESmdV9z_U6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5b:97:6e:e0:40:c6:f4:97:a8:34:b6:71:ef:82:9a:f9:b7:91:
53:37:3b:09:68:13:19:6a:86:49:35:0c:87:4b:00:7e:ff:9f:
33:fe:82:05:72:e5:1a:a0:3e:0c:eb:33:7a:99:df:2c:d9:0c:
c2:b7:0d:30:bd:af:22:d8:df:ae:7d:17:2c:f5:d0:ad:b5:6a:
81:82:40:25:4b:15:67:27:58:4e:3b:36:d5:0a:a5:0d:3a:3d:
6a:17:c6:da:7a:3a:5f:69:30:07:97:28:2f:a7:d2:65:3e:e5:
95:61:68:df:7a:18:b7:76:64:ca:a5:7c:b9:9c:0e:a2:7a:1d:
62:95:06:52:3f:4d:3f:fb:33:a8:40:98:4b:d8:f7:ce:b7:c0:
a4:8c:b4:8e:30:bf:e0:d1:4e:01:6f:99:7f:96:4a:5c:af:c0:
f2:ec:c6:63:47:91:ec:21:5a:d0:c1:7b:cd:61:b6:e8:2f:79:
fa:ef:12:0c:94:fe:51:c6:11:bf:d0:63:2d:70:b8:89:c6:0f:
b3:44:53:06:f2:d0:66:78:5f:6f:bd:2f:d3:5a:db:28:7b:e1:
c0:fe:65:11:3a:a8:8d:f5:14:95:c4:93:d6:08:0f:65:97:5a:
e2:7e:9a:fb:3f:b4:fb:47:fe:6a:e7:40:47:af:18:35:46:8d:
b9:e6:2e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:33 2025 by rpki-client