Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/e0yYgQW1uVrCy0O_HWOqRaIO4E4.roa
File: e0yYgQW1uVrCy0O_HWOqRaIO4E4.roa (raw, json)
Hash identifier: p1go4bHp9GOJjz8Vk1ZnCi/1uXdJ99RGk8PQR2K+5Aw=
Subject key identifier: 7B:4C:98:81:05:B5:B9:5A:C2:CB:43:BF:1D:63:AA:45:A2:0E:E0:4E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186DCCB92CC8D88CEAA0830074C5467DFC1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/e0yYgQW1uVrCy0O_HWOqRaIO4E4.roa
Signing time: Mon 13 Mar 2023 21:06:14 +0000
ROA not before: Mon 13 Mar 2023 21:06:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:dcca:fad5/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:dc:cb:92:cc:8d:88:ce:aa:08:30:07:4c:54:67:df:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 13 21:06:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b4c988105b5b95ac2cb43bf1d63aa45a20ee04e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:4a:8f:6f:79:23:e2:0f:93:9e:0b:77:81:5b:
f9:c1:ca:5a:af:3c:e5:84:a0:cc:3b:99:8b:a0:17:
0d:a2:f7:47:21:b3:ae:c6:8e:f0:0f:c3:ab:39:60:
df:8d:a4:ad:ad:f3:02:33:b6:92:5a:d4:0d:05:bd:
59:e2:c8:ea:6e:85:20:d5:d9:e5:cd:6f:b2:f4:59:
36:99:7c:2e:92:43:81:9c:d1:e2:a0:67:a4:85:91:
53:1d:fa:dc:7a:d4:32:48:1f:65:6b:6c:3f:a7:c7:
40:e9:59:a0:de:9a:97:95:a9:82:d2:74:34:7f:08:
4f:41:0e:aa:50:26:c7:76:f3:5e:29:cf:fb:fe:6c:
12:ef:84:bf:eb:49:81:a6:88:0e:02:c1:b2:0e:69:
3f:fa:2e:3c:4a:e7:e8:64:c0:61:b4:e0:40:5f:b0:
08:52:f7:19:f5:c6:91:b0:53:e1:12:39:52:e4:af:
0e:0b:45:f7:46:5e:74:14:23:b6:fa:9a:d2:5b:74:
a8:04:95:fa:e5:55:bd:5e:bc:06:28:24:e3:55:55:
b0:81:6a:15:18:c2:2b:16:36:1a:fa:84:ef:d3:62:
7b:57:f7:c9:6d:81:0e:f8:a4:d5:8e:52:58:9d:8d:
0b:21:a4:23:31:9c:27:a9:dd:c3:70:17:58:50:30:
7e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:4C:98:81:05:B5:B9:5A:C2:CB:43:BF:1D:63:AA:45:A2:0E:E0:4E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/e0yYgQW1uVrCy0O_HWOqRaIO4E4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
32:0a:7f:d8:12:69:dd:61:4b:c9:ed:7c:27:40:d5:9d:e8:f8:
21:58:ea:9d:44:98:73:45:bc:b6:5e:2b:c6:5c:df:13:49:1e:
77:e1:bd:7d:55:da:ca:70:b4:d3:86:1b:ef:ea:98:f9:73:9c:
f5:68:99:17:6d:cd:51:ff:1d:32:7f:be:c7:49:ee:cc:78:78:
92:08:5b:db:01:4a:cd:43:06:96:29:d2:84:b2:cf:3e:21:a5:
8a:d6:43:d1:10:66:a3:5b:1d:16:5a:d6:0f:9c:16:8b:ab:30:
e0:df:99:43:0d:44:88:58:99:75:3f:9b:a6:c8:8b:45:d2:c5:
73:61:ac:b0:fe:9c:ab:4c:38:a4:01:a1:cb:7b:38:e3:64:8b:
b9:03:6d:95:cb:65:fd:71:45:03:93:1f:7c:fd:ae:17:af:51:
47:86:73:b7:aa:75:87:cc:20:03:a1:5d:b2:fe:fe:21:74:c7:
12:aa:8c:26:fa:7d:47:f1:96:ae:1d:b4:8e:ab:17:1c:6f:61:
ea:d0:e9:84:18:d2:e6:9d:b0:e2:84:bc:75:ef:ed:78:92:d8:
c1:a7:9c:ba:a0:b9:23:18:8d:7f:5d:a0:df:9c:cf:91:2d:fb:
34:9f:29:71:31:38:0f:5a:c7:44:2c:a4:d9:74:49:1e:df:c0:
e8:f3:5c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:44:08 2025 by rpki-client