Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ds1Lz70HcDi9B6l7H31jyghZJSo.roa
File: ds1Lz70HcDi9B6l7H31jyghZJSo.roa (raw, json)
Hash identifier: 7hcbu6sU5/THy2w29ghEiYIbLUDO2d0asZT4wsFNQhA=
Subject key identifier: 76:CD:4B:CF:BD:07:70:38:BD:07:A9:7B:1F:7D:63:CA:08:59:25:2A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01880F38A0A49E91D6966BD8EBB6C965F988
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ds1Lz70HcDi9B6l7H31jyghZJSo.roa
Signing time: Fri 12 May 2023 09:09:09 +0000
ROA not before: Fri 12 May 2023 09:09:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0f:38:a0:a4:9e:91:d6:96:6b:d8:eb:b6:c9:65:f9:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 12 09:09:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=76cd4bcfbd077038bd07a97b1f7d63ca0859252a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:81:af:0e:46:73:55:5f:7d:42:ca:06:b8:6a:
78:5c:12:b3:4f:3d:45:6d:bb:5f:ce:0a:53:bb:ed:
41:66:8a:83:f3:51:20:de:b6:1f:41:d5:23:2a:d1:
1f:4c:7f:dc:e6:50:ef:9d:6a:6a:da:47:66:05:09:
1b:a3:78:6f:3b:68:38:ce:19:1a:eb:f7:04:af:11:
da:8c:ef:88:00:44:ca:d4:c4:f9:a9:11:ff:0b:69:
49:fa:24:d8:56:7c:f5:bf:1e:be:f8:70:f7:90:f2:
6e:93:b5:3a:7a:a9:c1:b1:0e:04:97:52:43:f9:d5:
7c:54:ef:89:83:00:a9:37:d2:66:92:67:9c:fa:cc:
9d:be:61:5f:87:2b:9b:8f:1e:29:78:6f:de:70:da:
c1:b7:92:e0:29:fa:79:87:ef:73:f0:3c:77:dc:40:
3b:9e:1f:07:c2:b0:1e:62:a2:51:72:14:3a:38:18:
46:49:4a:c5:53:ca:a9:8f:16:df:52:1c:96:bc:40:
37:7f:61:df:68:d2:fb:fb:a1:27:fa:68:a3:92:5c:
3d:c1:f6:32:70:db:18:3f:07:9d:54:7b:23:55:33:
b0:97:69:b7:a7:51:54:f6:ea:45:9b:00:75:84:72:
72:84:40:b2:ec:61:1a:77:16:9d:c6:69:0b:a7:a4:
60:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:CD:4B:CF:BD:07:70:38:BD:07:A9:7B:1F:7D:63:CA:08:59:25:2A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ds1Lz70HcDi9B6l7H31jyghZJSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a6:19:27:d4:b5:24:6b:bb:b7:b8:96:fb:88:76:67:01:ed:c0:
29:2d:ad:11:d6:46:77:df:34:1a:e0:ed:8f:84:65:d0:7b:79:
68:8a:6a:03:99:23:f5:5f:ba:bc:8e:1d:4b:09:f8:fd:02:9b:
60:e7:44:57:ab:40:ef:b4:6d:60:f3:59:b5:6f:cb:7c:63:b7:
51:15:37:f0:49:7f:67:05:c7:e0:df:61:5e:79:db:3b:44:0d:
5d:86:ce:76:d2:57:46:a9:e3:1a:94:fc:db:17:b6:18:f6:de:
ad:5f:82:79:a4:3e:a8:6b:76:cd:73:cf:2b:27:80:57:5d:7f:
1d:2d:b9:0f:98:c9:81:7a:40:87:72:87:f9:d9:47:b1:1c:7e:
a9:10:6d:c9:17:5f:cd:e7:6f:44:e6:21:bb:70:a8:8a:91:ae:
ae:23:fa:58:ba:16:24:c8:99:95:0b:8b:9d:52:0a:8f:97:42:
02:a5:ee:30:2d:55:23:10:22:03:69:96:e3:fe:ab:92:2c:f0:
43:e9:54:50:fb:71:d3:20:c2:a3:c6:57:74:96:96:8b:60:a2:
da:a0:9a:25:72:7c:7d:8b:cc:dc:a6:5b:44:8f:70:7e:22:38:
dc:8d:b1:bd:5b:9c:08:3a:70:d9:d6:08:55:e9:cc:a4:fb:0d:
34:3d:e7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:20:42 2025 by rpki-client