Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dVW3BKlwn0BiUz4bsOBGwOpdinA.roa
File: dVW3BKlwn0BiUz4bsOBGwOpdinA.roa (raw, json)
Hash identifier: f3dLTIh3xMRm2OlCswmKB7+9w09ntteEH6eSuYe9iyE=
Subject key identifier: 75:55:B7:04:A9:70:9F:40:62:53:3E:1B:B0:E0:46:C0:EA:5D:8A:70
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01895BD4F905070268E5AD57B5F887EDDD5D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dVW3BKlwn0BiUz4bsOBGwOpdinA.roa
Signing time: Sat 15 Jul 2023 23:13:51 +0000
ROA not before: Sat 15 Jul 2023 23:13:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:5b:d4:f9:05:07:02:68:e5:ad:57:b5:f8:87:ed:dd:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 15 23:13:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7555b704a9709f4062533e1bb0e046c0ea5d8a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:99:ed:7d:73:de:4d:9a:26:aa:69:99:37:3a:
3c:b3:c4:3a:ba:9f:6e:57:00:98:2b:b0:28:e8:f2:
95:1c:8d:38:fc:5e:e7:6b:09:f8:13:06:7f:0f:ad:
b8:e2:01:3c:45:52:71:89:35:d6:ca:5b:de:a9:04:
c9:eb:77:4a:70:39:4b:09:a0:78:fa:02:b8:3d:03:
33:0c:d0:04:e8:6d:3a:82:cb:7c:c2:29:c9:e1:51:
65:27:7f:fa:14:17:92:0f:36:28:c5:ae:c0:e4:3b:
55:8b:01:03:ff:a7:eb:19:bf:a4:f1:d0:56:b9:31:
48:eb:07:32:75:07:56:81:d8:d6:ed:41:d7:de:99:
6e:31:37:36:a5:3d:6b:88:92:c1:ad:b9:ec:3b:81:
3e:df:10:a8:ac:a9:56:5c:d7:fd:c1:23:87:f1:9c:
42:e4:aa:fb:bd:41:12:67:29:fb:ef:73:3a:d1:4f:
12:0b:0d:1f:aa:b7:cd:7e:53:4d:b7:6a:be:b6:7a:
15:d4:11:79:43:ab:1b:b3:44:70:a0:27:33:11:7c:
3d:db:82:37:5b:9b:4e:53:80:d7:2b:de:86:98:2e:
c1:37:8a:c7:5e:aa:ed:af:57:cc:6b:b7:26:49:95:
4e:08:cf:c0:83:3b:13:9a:4e:67:2c:8e:c0:66:98:
75:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:55:B7:04:A9:70:9F:40:62:53:3E:1B:B0:E0:46:C0:EA:5D:8A:70
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dVW3BKlwn0BiUz4bsOBGwOpdinA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5f:24:35:e1:b8:af:8f:73:36:b8:ac:ee:02:e9:cf:3b:e1:98:
cc:32:5c:81:c5:ec:b1:35:15:47:72:b1:c3:54:3b:80:5c:4d:
9b:c7:b1:85:c8:a1:0d:ad:89:ae:bb:d1:5b:b0:ea:23:4a:5e:
80:47:a0:cc:a0:d1:4e:9a:f5:96:a4:2d:c7:6a:72:61:3f:8a:
37:5b:f2:f2:3e:fd:51:14:82:d9:b1:55:8d:df:2a:45:4e:e9:
98:bb:ef:c4:37:a1:9b:57:14:9a:22:91:f2:40:14:27:99:b2:
b4:63:04:24:8c:7a:21:5d:2a:08:50:48:9d:07:14:be:97:22:
4c:25:82:c8:e4:2e:c3:a8:ef:fd:b6:cb:22:bf:b9:19:17:d1:
64:2c:0f:fb:38:d0:29:6e:5c:28:6d:73:3e:01:2c:13:c1:28:
e1:83:9f:40:e3:16:c2:8c:8f:0e:f5:ba:06:47:a6:22:a2:1d:
2a:e0:30:b8:8a:ac:e2:30:9e:78:a4:b3:32:a5:53:00:42:95:
50:b9:66:e3:52:71:e1:f9:69:91:86:0b:80:77:a8:51:c0:60:
a2:06:cd:ec:6c:1a:f3:75:58:2e:a9:d4:c5:a3:92:80:f1:25:
22:c2:4f:35:a2:1d:66:ce:23:bd:7f:3a:92:67:cb:c9:dd:3d:
1e:de:13:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:50:36 2025 by rpki-client