Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b4kJYfxk9MKfx8VaLd_UPG8swDk.roa
File: b4kJYfxk9MKfx8VaLd_UPG8swDk.roa (raw, json)
Hash identifier: gFgWQh99j+Lb+s2T9oUSevrHHDP6rs890cxRdT8gBFU=
Subject key identifier: 6F:89:09:61:FC:64:F4:C2:9F:C7:C5:5A:2D:DF:D4:3C:6F:2C:C0:39
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01874DE6A6EE4AF9B9F1C5EFB6A946AD3ECA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b4kJYfxk9MKfx8VaLd_UPG8swDk.roa
Signing time: Tue 04 Apr 2023 20:12:54 +0000
ROA not before: Tue 04 Apr 2023 20:12:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4d:e6:a6:ee:4a:f9:b9:f1:c5:ef:b6:a9:46:ad:3e:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 4 20:12:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f890961fc64f4c29fc7c55a2ddfd43c6f2cc039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:57:d4:da:0e:3e:be:60:94:c0:d7:cc:08:1a:
b2:2b:fb:42:a1:65:cd:f4:6b:70:a1:aa:cd:88:22:
ae:19:d6:bc:ad:6e:ac:b5:1e:a8:c2:29:64:21:2a:
94:66:6f:6e:64:da:d4:f0:79:81:6b:8d:cd:8a:bc:
e9:82:63:7a:4b:d0:05:5a:ab:91:b7:f5:b8:73:be:
90:bc:2a:ba:de:e4:77:15:47:cb:aa:82:be:6b:d2:
83:31:e9:5e:b1:48:aa:06:36:3a:fb:84:e0:5d:2c:
cf:c9:1e:2f:6e:0d:75:25:9a:6f:21:14:61:4b:5a:
1c:cf:19:69:7e:d9:97:6b:7c:6d:0b:dd:72:83:f9:
e7:6d:a5:47:5d:3c:c0:a5:de:31:2e:66:e5:20:c6:
e8:86:dc:36:3a:3a:bd:c4:2a:d1:bb:39:a0:29:68:
dd:be:04:b7:b9:8d:64:51:65:28:c3:64:84:b8:01:
19:f2:b3:97:03:d3:b1:1b:21:72:ce:c0:d1:f9:7f:
3e:05:0b:22:90:04:93:37:4e:07:d9:c9:06:61:02:
76:71:a6:5b:29:84:72:1b:c7:32:c6:44:94:55:dc:
44:66:ce:9d:2f:9b:f8:92:73:56:0a:47:32:0a:9a:
b4:ed:91:60:af:7f:fd:21:ff:94:96:3a:0b:09:31:
25:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:89:09:61:FC:64:F4:C2:9F:C7:C5:5A:2D:DF:D4:3C:6F:2C:C0:39
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b4kJYfxk9MKfx8VaLd_UPG8swDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
67:10:33:24:dd:e3:a1:ab:33:05:1f:28:db:11:05:c9:56:c4:
93:46:6f:f6:e6:a7:64:f1:9a:d8:52:82:6c:59:95:2e:24:a5:
16:b7:f7:3d:eb:31:25:6e:20:db:95:aa:f0:c7:c6:fd:95:18:
19:c7:9c:d5:cd:b8:1f:54:50:e3:67:f2:ff:4d:93:25:0e:d3:
48:75:91:9f:2d:6b:25:88:5d:f9:16:29:b8:64:89:ad:dc:e3:
2f:5a:6a:57:9d:41:35:a2:47:31:b7:32:2b:ea:81:32:03:23:
da:75:e6:80:cc:97:6d:c7:e1:2b:98:2a:74:7d:63:6d:7e:24:
17:f2:05:8d:9f:94:e1:34:95:f4:eb:9d:2f:6c:dc:96:12:16:
1c:45:19:15:33:03:2e:e5:d6:f4:c8:24:d8:b6:cc:a8:79:e9:
ea:1b:38:6f:d9:8a:45:01:67:6d:4b:f0:04:ac:e5:94:3b:31:
e4:9b:01:3f:18:df:90:f5:cb:d8:27:be:6c:de:95:a4:9e:52:
48:f9:2e:d7:f7:0f:29:09:5c:43:24:92:a9:5f:3e:c8:a8:b9:
8c:0f:d9:30:cc:43:c6:7d:38:c5:eb:79:47:59:35:8d:9f:ee:
f6:15:53:76:d8:6e:d7:b4:a1:86:83:c8:67:21:29:2f:5b:0c:
53:36:87:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 22:20:33 2025 by rpki-client