Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/a1vmGlazk9Q3cILO3T_6uZqowwQ.roa
File: a1vmGlazk9Q3cILO3T_6uZqowwQ.roa (raw, json)
Hash identifier: QTWQc7a1JoU3NPzm0TpYB9nTsDM7kCAkv1G3GSiCR/s=
Subject key identifier: 6B:5B:E6:1A:56:B3:93:D4:37:70:82:CE:DD:3F:FA:B9:9A:A8:C3:04
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A4165CB248B343753EF769FE70F6E1206
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/a1vmGlazk9Q3cILO3T_6uZqowwQ.roa
Signing time: Tue 29 Aug 2023 13:05:04 +0000
ROA not before: Tue 29 Aug 2023 13:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:4165:2b3d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:41:65:cb:24:8b:34:37:53:ef:76:9f:e7:0f:6e:12:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 29 13:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b5be61a56b393d4377082cedd3ffab99aa8c304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:40:e0:e2:7b:fd:a0:06:ca:8c:cc:5f:08:22:
65:67:78:18:57:d8:2b:1f:b7:cc:85:a6:05:8d:74:
2b:cf:45:04:33:b3:fb:b4:28:a3:f9:0f:97:a7:a2:
a4:4c:ad:99:90:2a:44:22:73:60:7c:ad:20:f5:ca:
0c:f2:a0:0c:63:59:42:70:71:7e:1d:5e:90:1d:29:
e5:2e:ff:a9:10:91:e8:f2:17:28:11:9f:3d:4f:70:
ab:20:ce:e6:fb:0a:66:42:da:69:38:92:d2:eb:af:
9c:d2:75:83:32:57:31:75:91:40:d7:de:23:7d:82:
61:6a:9b:ee:7a:26:95:a1:2e:e3:bd:e3:3c:b7:e6:
bf:f3:c7:75:a2:f0:9c:9b:79:b7:25:e5:bc:b9:14:
75:e4:aa:e0:42:eb:a6:f1:5b:74:77:3b:d3:28:18:
00:95:f0:1c:0f:91:a2:db:bd:88:2e:7c:8e:65:c1:
35:61:2d:9f:8a:88:09:97:72:a6:61:36:46:66:fb:
38:bf:14:8f:3b:cf:5e:df:52:b6:8a:47:d7:8e:d6:
93:fa:a5:94:42:e0:a0:a7:3d:69:ed:81:af:5b:ec:
61:0c:bd:61:2e:1c:51:ea:4a:77:dc:0c:ce:69:fc:
46:d5:16:3c:f0:d1:9a:ef:ac:aa:6d:6b:ea:88:f9:
b3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:5B:E6:1A:56:B3:93:D4:37:70:82:CE:DD:3F:FA:B9:9A:A8:C3:04
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/a1vmGlazk9Q3cILO3T_6uZqowwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ad:6f:7a:8a:30:38:44:ba:24:93:9e:77:40:c1:ae:45:2e:33:
4b:44:7f:ff:ce:78:b9:aa:4e:f5:4a:16:37:22:21:c8:45:11:
8e:f8:3b:2d:23:58:3a:41:ff:c5:6d:3e:ad:c5:af:10:55:a7:
e0:36:2d:da:8d:fe:72:05:6b:df:93:c0:79:4b:ae:37:bd:e3:
11:fb:d0:06:7f:c6:8d:f8:30:9f:40:34:4d:85:44:29:06:cf:
f4:83:88:03:21:a2:08:7d:29:46:56:59:d7:08:88:38:6a:8f:
c8:b6:42:58:6a:5c:50:90:d3:32:91:51:23:ae:df:42:e4:41:
51:9f:2c:53:66:de:fe:b7:f9:59:d6:61:8f:79:9a:c5:6a:3c:
61:cb:5f:84:e0:b7:58:01:f5:cb:43:02:f2:7c:b7:fa:bf:5e:
68:38:eb:fb:d3:6b:ba:20:f6:5b:9b:1b:7e:b0:a0:e0:25:b9:
8b:4c:1a:7c:c0:3d:04:18:26:82:68:b7:f2:70:7c:ac:f8:a9:
af:22:d6:c7:c0:e7:1b:79:63:87:56:80:7e:7a:17:16:46:01:
73:20:05:87:06:75:8a:94:b2:e6:33:cc:90:e2:da:d6:8a:0d:
67:ab:5a:dc:94:61:11:1e:ff:b0:29:47:2a:64:8f:06:12:f8:
8f:9c:ad:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 13:51:53 2025 by rpki-client