Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cBt2weHZLgDbM_0WrNcWiXYf5T8.roa
File: cBt2weHZLgDbM_0WrNcWiXYf5T8.roa (raw, json)
Hash identifier: i+LVNanT0pQujnElEjwSp55hzMncyofL1WmxwPsLTK4=
Subject key identifier: 70:1B:76:C1:E1:D9:2E:00:DB:33:FD:16:AC:D7:16:89:76:1F:E5:3F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186BA84F888E7FC3CFECE6251D38BC3F47F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cBt2weHZLgDbM_0WrNcWiXYf5T8.roa
Signing time: Tue 07 Mar 2023 05:22:01 +0000
ROA not before: Tue 07 Mar 2023 05:22:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ba:84:f8:88:e7:fc:3c:fe:ce:62:51:d3:8b:c3:f4:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 7 05:22:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=701b76c1e1d92e00db33fd16acd71689761fe53f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:32:26:cc:4d:36:88:7f:a4:e2:91:ef:de:0c:
97:c5:b9:61:a6:6d:78:1e:fd:43:3d:a8:c2:51:0e:
e2:cb:8e:8a:63:31:f3:05:2f:f6:89:f9:e5:cb:1a:
c2:90:54:fa:ba:7d:54:14:7f:7c:c6:c4:bb:2d:db:
80:fe:61:d6:f4:8e:15:b9:a8:20:35:5a:49:52:ca:
e9:6c:de:1c:0f:af:99:4d:5c:51:ba:24:35:97:dd:
e0:b0:d4:d2:d4:49:06:a6:cc:35:b3:53:1c:7c:32:
cc:31:ff:5e:89:e6:f7:ce:34:a4:1c:c6:5c:07:dd:
55:ff:0c:1e:16:b6:ed:e0:88:f0:5a:5d:8f:b0:8b:
cb:bf:18:40:17:7f:a3:e2:d5:4c:18:54:94:25:7e:
84:5f:7c:ce:c4:ee:05:b5:2b:ac:22:51:11:53:94:
4b:a9:0f:65:f6:fc:df:1a:01:99:e1:0a:2f:92:18:
14:d9:da:bc:7a:52:e7:81:95:82:b0:3c:97:07:16:
c7:e7:00:3a:c8:e8:a7:8e:e5:9f:3b:b8:b3:3b:a7:
8d:df:8a:3b:87:14:8e:b0:de:40:52:d0:aa:ca:a4:
3e:7a:7e:76:58:37:f0:7b:49:9c:5e:2d:87:04:03:
39:60:18:94:27:36:b5:b6:5d:6f:65:81:48:84:e7:
ee:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:1B:76:C1:E1:D9:2E:00:DB:33:FD:16:AC:D7:16:89:76:1F:E5:3F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cBt2weHZLgDbM_0WrNcWiXYf5T8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
11:59:a6:1f:f8:a3:82:20:94:bd:94:a8:ef:1d:41:27:7c:1c:
96:15:1c:73:16:e3:79:b1:90:51:ef:27:1b:7d:c9:5d:0d:07:
54:de:91:95:2e:10:08:34:3f:a7:59:04:40:86:cc:5c:36:c5:
22:be:e6:a7:93:4c:14:16:c0:22:d6:e5:7d:bc:1c:af:ba:aa:
d9:5a:10:3d:f0:9d:2a:e4:cf:0f:1c:43:5f:3c:27:51:ca:82:
d1:d8:73:f8:71:d3:3c:ea:80:1e:61:61:08:3d:ae:c7:76:8e:
0a:6b:25:f7:15:77:6d:13:51:d8:2a:8d:53:aa:6b:3b:f4:07:
b8:1f:c4:1f:7c:1e:be:26:7a:22:1a:11:94:08:53:2c:8d:6e:
1c:c5:59:86:9c:76:b1:fe:76:04:ea:17:d8:c4:8c:84:33:a2:
94:9a:bc:2e:9e:12:eb:28:c1:ac:b3:ee:a4:cc:e5:c5:63:8d:
d0:33:b4:da:50:66:16:05:9c:77:87:61:a5:b2:2c:f0:85:96:
f2:8c:00:2f:97:f5:91:e9:ee:fd:30:e4:ef:5a:40:3a:87:55:
0d:43:87:13:17:2b:db:42:b9:8e:5b:fc:76:9a:11:29:e2:cd:
16:a3:38:e2:5d:72:65:06:fc:16:9d:99:4d:40:d4:de:b0:61:
04:a5:ac:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:43:30 2025 by rpki-client