Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dyUqbPUFjyXP1emr6K4PRLd7f3c.roa
File: dyUqbPUFjyXP1emr6K4PRLd7f3c.roa (raw, json)
Hash identifier: XMqPgUlC26tlhfhpZq9nYLRPfHmyvmyzVjfadEOzRC0=
Subject key identifier: 77:25:2A:6C:F5:05:8F:25:CF:D5:E9:AB:E8:AE:0F:44:B7:7B:7F:77
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018733B1ACA2F1625B45CD66F27879AD05FC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dyUqbPUFjyXP1emr6K4PRLd7f3c.roa
Signing time: Thu 30 Mar 2023 18:04:54 +0000
ROA not before: Thu 30 Mar 2023 18:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:187:33b1:4f6c/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:33:b1:ac:a2:f1:62:5b:45:cd:66:f2:78:79:ad:05:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 30 18:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77252a6cf5058f25cfd5e9abe8ae0f44b77b7f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ee:c9:ab:51:80:a1:5a:9d:6c:59:8d:aa:5e:
94:ec:41:84:f4:df:71:3b:18:c5:da:49:0a:40:76:
4b:93:8a:80:e0:af:46:d9:1f:4b:1f:17:d9:89:57:
f3:8e:eb:48:a0:6a:ee:8f:7f:f6:b9:34:86:50:25:
95:5b:31:33:bb:17:2d:f7:d6:de:61:43:1f:81:cf:
f4:bf:04:15:7c:49:34:0d:c7:18:54:4f:8c:ce:37:
69:73:23:67:88:34:0e:e1:7a:81:cf:f5:b8:dd:80:
9d:64:9d:09:17:25:8c:64:f4:d9:5b:39:78:02:ef:
c0:14:76:61:23:b0:4d:92:02:e1:b6:c7:ae:64:1e:
bb:a8:d9:e8:2d:4a:ac:ae:03:82:d4:95:38:53:d4:
7d:b7:98:61:7e:02:50:98:09:90:e6:25:94:48:0b:
34:0a:46:9a:dc:20:8f:07:b4:34:d3:30:9a:23:63:
e7:ec:89:c1:7f:90:67:11:d3:3d:57:77:a2:46:31:
22:d5:02:94:2e:bf:8d:75:51:4e:95:ba:b7:49:4a:
19:9c:68:cf:98:88:3c:8e:32:12:93:8a:40:87:13:
a4:bf:f7:81:ce:78:2a:16:dd:5f:ac:4e:38:2c:56:
75:f1:84:aa:71:5f:8a:bf:c1:13:72:b6:84:d6:81:
86:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:25:2A:6C:F5:05:8F:25:CF:D5:E9:AB:E8:AE:0F:44:B7:7B:7F:77
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dyUqbPUFjyXP1emr6K4PRLd7f3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6c:f9:05:38:4e:f2:24:13:f0:1f:56:ce:a0:43:1c:c3:0e:1d:
4b:c6:1d:8c:ed:04:ad:ee:bd:ea:28:e6:34:e9:0d:cd:83:fe:
31:7d:bb:5d:ab:44:f3:e6:6c:29:c5:aa:42:cf:b3:76:f9:10:
61:ed:67:e1:1d:db:dd:ea:8a:f1:ff:1f:43:d7:8a:1a:96:1a:
23:ed:75:1f:b7:08:96:fc:af:43:0c:a8:a6:8d:35:ef:d3:93:
61:5b:60:2d:cc:34:28:3c:58:92:73:1d:ba:d0:cc:c6:1d:85:
bc:b0:50:9f:64:0f:9f:51:b8:32:de:97:f5:0e:93:f7:bb:9e:
7c:12:a4:79:bc:f2:ea:e0:f2:cc:50:4f:64:13:0a:e5:ad:0e:
54:f7:d2:4c:ad:56:05:35:cf:18:23:69:4d:f9:60:15:eb:94:
4e:db:6b:32:c6:2d:d0:2d:51:5e:e8:df:60:e2:10:11:65:f0:
17:74:c0:6f:49:ec:8e:d8:a6:56:9d:50:20:2d:ad:1a:81:43:
b0:51:7c:be:0f:04:39:7b:86:8f:fa:5f:c7:da:cb:84:e3:9d:
09:80:05:fb:e6:80:d6:a5:bd:35:4e:53:69:4c:4b:a8:0f:61:
24:e8:22:ba:08:92:cb:ad:2b:78:e0:85:8a:73:f9:dd:ca:71:
c7:1d:c0:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:46:16 2025 by rpki-client