Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d5qwiAZHp4FcB_d39jk3GukqmNA.roa
File: d5qwiAZHp4FcB_d39jk3GukqmNA.roa (raw, json)
Hash identifier: sokBLUcWTU6rvNxGC9vP7H/Dq/IvwGAiPPRDvQ0kPRM=
Subject key identifier: 77:9A:B0:88:06:47:A7:81:5C:07:F7:77:F6:39:37:1A:E9:2A:98:D0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187589E4DCF07F00E8AAB4AC37E355744A0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d5qwiAZHp4FcB_d39jk3GukqmNA.roa
Signing time: Thu 06 Apr 2023 22:09:42 +0000
ROA not before: Thu 06 Apr 2023 22:09:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:58:9e:4d:cf:07:f0:0e:8a:ab:4a:c3:7e:35:57:44:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 6 22:09:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=779ab0880647a7815c07f777f639371ae92a98d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:00:71:9b:ec:6b:0b:93:6d:a3:6a:55:c2:ed:
43:d7:45:ba:fe:69:fd:14:d3:87:d6:80:32:ad:22:
78:a9:c3:3a:86:c7:89:18:28:ca:cd:9f:79:53:c5:
e6:c4:cb:2d:dc:7a:30:cd:64:4e:33:72:ee:44:8c:
8b:b8:4f:09:3c:d0:c1:73:b3:9f:c3:4e:06:a6:d4:
44:16:dc:77:31:4d:db:4a:58:cc:57:e7:a8:92:a1:
9c:ce:ba:ec:27:68:52:2a:6e:46:08:be:43:b1:dc:
2b:3e:d2:c7:4f:87:ef:f1:03:19:f7:9b:65:17:f3:
9d:a8:ff:9c:0b:a4:aa:11:44:43:b3:52:89:1f:16:
55:f3:57:99:b3:8f:45:56:c5:90:c3:a2:fc:2f:d7:
29:53:cb:6c:ce:48:1d:5f:1f:84:2b:20:0c:8a:14:
d9:f5:15:72:89:f0:67:6d:ad:97:14:3c:65:05:67:
a4:9b:26:f7:c3:79:ff:0b:bb:2e:2c:92:47:0a:47:
67:5a:3d:4b:f4:2b:5b:60:38:e3:50:c4:b7:60:d1:
00:56:f5:3f:6b:01:88:91:d9:b4:61:da:76:8b:9c:
9d:92:00:90:55:5c:ed:ac:53:dc:52:2c:7a:af:15:
b8:76:64:fe:e9:8a:4f:ca:5c:7a:4c:00:ba:4c:c2:
84:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:9A:B0:88:06:47:A7:81:5C:07:F7:77:F6:39:37:1A:E9:2A:98:D0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d5qwiAZHp4FcB_d39jk3GukqmNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
16:48:96:3a:5c:4c:50:ef:a5:4d:af:db:85:49:a9:23:a2:db:
8f:7d:fa:48:af:a3:9d:de:fc:2e:59:d9:ce:09:a6:1b:47:34:
e3:09:5e:5c:de:a6:bc:36:81:3b:ad:8c:bb:2d:b4:40:7c:b4:
21:f6:bd:a1:5f:76:f5:23:02:fb:9d:37:24:ed:73:b5:e1:3f:
99:e5:8c:57:b3:16:32:55:18:a7:57:a8:70:60:eb:b4:b0:77:
b3:d1:79:75:cc:9b:9b:77:e7:5d:ca:32:49:65:26:a9:6f:d7:
ad:69:5e:40:32:c5:fb:86:0c:4d:b8:d6:b8:d9:30:8e:38:6c:
38:fe:c6:9a:63:d0:d4:40:64:ad:3a:49:cf:e9:fb:dd:29:01:
7e:12:0f:08:45:05:19:36:59:7c:49:f2:5a:06:4b:c8:56:78:
7a:22:7c:bb:15:a5:40:1b:8e:4a:5e:ad:8d:b2:aa:ba:6b:2d:
97:a9:ce:7b:60:2c:4e:a4:4f:c4:a7:d3:de:de:9a:1b:b2:4a:
6f:79:b0:0f:78:86:50:6d:38:69:ad:1c:8f:f7:42:c9:96:1e:
3f:3e:56:c5:d8:76:ad:f2:d5:10:cc:de:d8:c0:bb:d2:55:75:
ca:af:09:b2:19:3c:34:71:86:8a:d0:9b:3d:cc:7e:6f:e5:fc:
1c:99:76:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:36:22 2025 by rpki-client