Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/e9V1_4tTg_pzyQ07DHh_htYoXMY.roa
File: e9V1_4tTg_pzyQ07DHh_htYoXMY.roa (raw, json)
Hash identifier: M9/z5L5Bxddjk8tB3NU8hSzMl+hCD1lZj3ZxjOwOD9I=
Subject key identifier: 7B:D5:75:FF:8B:53:83:FA:73:C9:0D:3B:0C:78:7F:86:D6:28:5C:C6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01877603ED42AB00703B41579DE1571758A1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/e9V1_4tTg_pzyQ07DHh_htYoXMY.roa
Signing time: Wed 12 Apr 2023 15:09:41 +0000
ROA not before: Wed 12 Apr 2023 15:09:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:76:03:ed:42:ab:00:70:3b:41:57:9d:e1:57:17:58:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 12 15:09:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7bd575ff8b5383fa73c90d3b0c787f86d6285cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:41:b3:9d:28:6b:cf:0d:9a:e7:af:87:a7:bc:
6b:ca:be:aa:f8:ef:c2:ab:72:22:3e:f6:91:9b:64:
13:b1:9a:e3:6a:b7:90:57:8b:70:dd:d2:e4:45:5f:
52:0e:a3:33:48:60:62:28:79:69:5e:c8:64:8d:c1:
d4:d1:10:a9:5a:08:dc:a0:e7:56:b5:5a:4b:f8:11:
af:16:9d:d2:9e:68:87:7c:69:2c:65:a8:a1:b5:da:
74:ed:ea:b4:de:2e:36:cd:a7:37:32:3d:6c:64:d1:
9d:69:d3:9d:0e:cd:b2:fe:4c:72:d5:8b:31:35:0c:
a1:e2:55:68:32:42:bd:b5:1a:89:fb:ce:5e:0d:78:
13:42:9a:cb:c3:e5:e8:8f:42:27:f2:dc:f7:8c:de:
1f:25:55:75:87:c6:cf:f2:e0:10:03:dc:db:4b:66:
20:e8:ab:a1:25:28:2b:ea:6d:09:4a:ed:be:96:a5:
f2:c9:9e:be:42:bd:1d:69:b6:ef:ce:9b:8c:f7:1e:
91:b8:73:b9:41:52:e1:48:f9:37:9e:76:58:03:e4:
33:a8:ac:fd:5c:a3:99:8e:66:bf:3d:c4:39:52:11:
b6:62:01:42:bf:53:78:00:15:36:f2:17:52:ea:68:
22:fe:e6:39:34:22:4b:e9:7b:db:e8:eb:e1:68:fb:
26:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D5:75:FF:8B:53:83:FA:73:C9:0D:3B:0C:78:7F:86:D6:28:5C:C6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/e9V1_4tTg_pzyQ07DHh_htYoXMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
64:6e:1b:1f:c8:25:db:cc:bf:2a:e0:c1:e8:a9:d0:c0:d7:ae:
00:23:14:73:2b:c0:8b:bb:4b:1f:c9:6f:d3:5b:d1:c5:4b:86:
82:74:c5:f6:8a:29:a6:5c:f6:e8:b3:82:cb:b6:7c:64:7a:27:
54:e9:c7:fd:74:d1:0e:bd:bf:a1:24:4a:a2:03:46:a6:6d:b3:
b8:e4:5e:de:77:11:fb:06:f7:8d:13:01:3b:0e:d3:27:5b:c0:
72:55:4b:da:d9:d9:9b:1c:86:7a:7e:df:0a:f2:8b:64:f8:f8:
2e:3b:20:6a:2d:0a:0b:21:ba:76:af:c3:22:a3:64:cb:46:40:
c3:e5:9a:3c:6a:cf:b7:43:92:73:7f:53:35:ff:a1:e7:05:73:
af:92:17:43:65:f8:06:84:32:2b:07:58:8e:16:f3:70:ed:9e:
ed:d2:ef:fc:6c:88:7c:f3:32:57:bd:94:e9:8d:56:c4:cb:53:
16:c9:c2:ad:eb:4a:82:10:7a:e9:a9:ad:2d:30:40:8a:45:0a:
55:bf:f2:56:97:f5:ec:cb:22:b8:38:31:7b:df:e3:a6:5a:e8:
d2:ed:5b:e2:8f:63:ed:9c:a0:c6:a3:cd:d8:58:ec:a7:04:a3:
01:96:64:7e:9e:15:e9:85:b5:1d:2a:2a:30:d1:6e:c1:d5:74:
17:9b:e6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:48 2025 by rpki-client