Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/chRkFuUxaSYNqlSxphBqtIUBmto.roa
File: chRkFuUxaSYNqlSxphBqtIUBmto.roa (raw, json)
Hash identifier: I6J+XpKsAyOqc5b5gbw4pzmu/wviBdPk8zYDZGsqyXw=
Subject key identifier: 72:14:64:16:E5:31:69:26:0D:AA:54:B1:A6:10:6A:B4:85:01:9A:DA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01873E3F63CE186B18BD04E8CBC28493B035
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/chRkFuUxaSYNqlSxphBqtIUBmto.roa
Signing time: Sat 01 Apr 2023 19:15:54 +0000
ROA not before: Sat 01 Apr 2023 19:15:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:3e:3f:63:ce:18:6b:18:bd:04:e8:cb:c2:84:93:b0:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 1 19:15:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=72146416e53169260daa54b1a6106ab485019ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ce:ec:e9:1e:02:2a:58:13:4c:e0:24:f9:ce:
38:b7:3a:3c:28:0c:dd:4d:97:05:03:0f:39:17:6c:
aa:ac:6b:dd:85:d1:13:0e:96:f1:25:7e:44:0c:cd:
8c:d5:76:07:db:fc:ce:70:0e:6d:10:09:06:e6:08:
cc:80:74:61:64:7e:ff:fc:eb:b3:ec:ce:b2:c0:93:
fb:c4:f2:28:7a:c5:28:59:cd:c2:97:42:35:1a:2c:
96:9a:0f:5c:e5:b1:4d:28:c3:1f:a3:53:0f:bf:0a:
46:5a:e9:41:fc:83:d4:4e:01:a2:02:7d:47:5c:34:
df:11:c1:25:44:9d:37:5e:9f:6c:23:aa:1a:78:4b:
61:ba:15:d1:17:94:e3:ca:3e:2c:21:3b:24:ec:ed:
d5:c9:1d:5e:b1:9b:f2:91:10:2b:1e:02:0a:5d:73:
d3:3e:49:13:b1:cf:24:fd:3a:c5:85:39:58:57:c7:
a3:d2:01:4e:aa:0b:56:42:b3:75:b7:86:b4:36:11:
42:13:a7:2f:49:98:be:21:67:61:4b:c8:b7:85:26:
3c:ce:e2:f8:c6:2e:5b:67:5f:7c:bb:37:60:f0:09:
1a:09:9b:75:88:ae:a7:68:5a:89:0e:7a:1b:5b:18:
80:ff:ea:c3:42:4d:ae:6c:4e:3f:d6:da:13:14:65:
37:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:14:64:16:E5:31:69:26:0D:AA:54:B1:A6:10:6A:B4:85:01:9A:DA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/chRkFuUxaSYNqlSxphBqtIUBmto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
20:ae:52:09:ad:fc:51:76:a3:16:ad:bb:06:56:a3:56:cb:d5:
c7:1a:a2:12:17:2d:07:bb:12:a2:86:b5:4f:54:6d:cc:f9:d3:
13:ea:d9:29:f4:43:ac:b4:cc:6b:1e:b9:7e:e3:d5:12:51:9f:
f4:6a:7f:8f:3f:f8:ab:7a:0b:77:89:0c:7d:af:4a:55:24:59:
3b:ae:57:51:b1:19:ea:0a:60:13:fa:ad:a6:1d:cc:5b:be:c3:
42:b8:23:16:27:ef:f8:d6:5f:cb:5a:2c:d6:47:71:63:2a:17:
c7:0b:06:84:3e:f9:bf:38:2a:9e:70:5b:48:82:0e:f9:f6:67:
ac:e0:46:fb:ef:45:f8:06:ea:58:54:55:cb:49:af:22:e1:c8:
d4:38:98:49:6c:a9:69:c4:5e:e3:26:2b:5a:77:d0:b5:38:93:
fa:b4:48:ba:ba:b8:fa:08:f5:37:70:81:fd:91:bb:2c:0a:b6:
e6:22:bc:9c:c1:bd:9e:f8:0b:55:aa:c3:0c:ea:89:4d:0f:db:
fe:15:dd:75:6f:10:38:b5:4c:20:f9:dc:99:5c:7c:41:9c:bb:
e5:84:8e:0b:d8:ee:9e:0c:0f:87:60:d2:61:94:ff:19:cc:e0:
83:54:a4:e5:bd:0b:8e:27:31:8a:c7:b2:62:57:aa:94:48:2a:
55:ac:0b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:49:19 2025 by rpki-client