Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/de69XySjPJSe67jhnYLGM2MZsCA.roa
File: de69XySjPJSe67jhnYLGM2MZsCA.roa (raw, json)
Hash identifier: 2rBRLRPUUP2p6ebQtyxjrfK0J1W0Kty4wrpmj+vA0XU=
Subject key identifier: 75:EE:BD:5F:24:A3:3C:94:9E:EB:B8:E1:9D:82:C6:33:63:19:B0:20
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189DD6EE0EFF942675EDA80B6BAF53B68B9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/de69XySjPJSe67jhnYLGM2MZsCA.roa
Signing time: Thu 10 Aug 2023 03:12:58 +0000
ROA not before: Thu 10 Aug 2023 03:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:dd:6e:e0:ef:f9:42:67:5e:da:80:b6:ba:f5:3b:68:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 10 03:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=75eebd5f24a33c949eebb8e19d82c6336319b020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:42:2d:8c:6c:7a:c8:e2:ee:7a:66:39:f6:26:
d2:a9:b1:74:d8:02:94:5b:8b:3f:ef:cf:3f:97:7a:
fa:38:79:f8:79:bb:ee:05:d9:d7:27:0f:1d:ad:b5:
c3:b4:68:61:e1:6c:61:82:fe:72:71:fc:30:ee:f9:
16:ab:da:fd:58:5c:07:f9:80:d6:72:27:9d:0c:67:
f3:0c:f8:5c:82:e1:17:d1:1a:48:94:5a:97:e6:2d:
eb:b6:74:06:e9:e8:fd:2f:70:53:95:39:b0:81:d6:
6c:59:e9:d9:01:d5:3e:6c:6b:33:31:71:d2:63:73:
a9:9f:54:d1:f3:24:b0:fe:32:1b:82:6e:ab:15:a2:
62:ff:75:84:bf:d8:87:c0:80:8b:84:ac:03:02:19:
0c:cf:3c:28:81:22:ea:35:a0:e2:f7:ee:3f:ce:03:
0d:a1:3e:9c:81:0e:6b:f2:bd:b6:9f:ce:30:b5:89:
78:83:80:9e:93:c1:c6:4d:7c:ca:ea:bc:4a:d9:23:
de:89:32:27:82:59:29:1d:1c:47:d3:56:81:e0:3c:
20:23:5f:e0:9d:f2:4d:18:37:bb:24:0c:a2:13:fe:
35:e4:7c:57:ce:c8:fb:22:b6:4b:7e:f8:8b:54:4a:
db:55:c6:04:d2:76:2d:b2:b9:97:c6:f5:32:28:cf:
d1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:EE:BD:5F:24:A3:3C:94:9E:EB:B8:E1:9D:82:C6:33:63:19:B0:20
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/de69XySjPJSe67jhnYLGM2MZsCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
60:cf:aa:99:6a:b2:f7:84:05:74:74:0d:19:0c:af:13:1a:56:
54:e8:4d:e3:6a:a7:f4:44:26:a2:4c:26:d0:27:ad:91:1b:fe:
19:84:89:4e:e2:d1:d1:ca:1d:5b:63:77:f5:44:95:55:a0:83:
4f:01:c1:69:af:34:b8:e0:d0:a7:39:a3:c2:4f:21:d5:3a:2d:
a0:1b:68:82:df:4a:c8:13:40:4e:59:5b:aa:d3:8c:33:52:d9:
ec:5c:7a:a4:d1:f5:b6:0b:2b:ec:82:52:bc:b5:86:7e:b9:6e:
8b:20:2d:2f:3a:98:3e:4b:3e:8e:ff:ed:eb:37:46:c3:8e:29:
32:86:4c:82:85:08:d6:fc:aa:57:00:4d:31:06:80:73:69:cf:
c3:06:d3:91:eb:ea:a9:20:2d:f4:ea:1e:75:11:d3:01:2d:dd:
c3:e7:6b:28:2a:0c:8a:02:bf:a5:e0:be:7f:23:24:c2:a0:53:
6b:67:d9:cb:4a:b6:d4:40:3d:45:8d:fa:b7:fd:d8:7d:67:4e:
fe:fa:e9:f4:87:4b:22:d0:e9:0b:d8:5b:c6:9e:ad:45:9d:cf:
49:52:21:4f:45:00:27:d2:8d:b3:b5:f1:46:6e:98:54:58:c8:
75:bf:d8:8d:ce:be:6c:e5:bc:75:b4:12:51:25:04:77:95:72:
22:25:cb:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 07:25:25 2025 by rpki-client