Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eNVlzFa636zKyPW3wrVtiFEAD_A.roa
File: eNVlzFa636zKyPW3wrVtiFEAD_A.roa (raw, json)
Hash identifier: NG7YuftZ2Gd+RgJ+gKe6KV6NZPHUP0jlfwrVM25+mxE=
Subject key identifier: 78:D5:65:CC:56:BA:DF:AC:CA:C8:F5:B7:C2:B5:6D:88:51:00:0F:F0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188728E5B0F7EA61B4063697E2FDC332B02
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eNVlzFa636zKyPW3wrVtiFEAD_A.roa
Signing time: Wed 31 May 2023 16:05:12 +0000
ROA not before: Wed 31 May 2023 16:05:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:188:728d:883d/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:72:8e:5b:0f:7e:a6:1b:40:63:69:7e:2f:dc:33:2b:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 31 16:05:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78d565cc56badfaccac8f5b7c2b56d8851000ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:86:77:eb:28:1a:6d:d4:8b:38:a4:8b:18:dd:
15:20:63:0e:7d:1f:f1:d0:c2:aa:c9:83:1e:3e:8d:
c0:36:25:fa:e4:33:37:35:c1:3e:d4:2e:3a:55:6d:
5b:b4:50:18:13:00:36:cb:7c:d3:18:68:53:8b:f2:
6d:66:f0:e4:f5:e9:de:2a:a7:8a:74:a3:f3:ac:f7:
82:f8:2c:00:8d:f9:77:82:9d:c6:a1:b6:a9:5b:85:
e5:09:64:9e:70:13:53:73:72:47:b3:5c:0d:00:64:
3c:c3:07:91:33:86:35:12:d3:d5:e6:49:1a:1e:8e:
4d:27:97:a5:22:c4:b9:e7:49:43:0f:3e:0a:bb:64:
ba:ae:2a:cb:42:14:2c:1c:a2:6e:e3:7a:f0:cc:0b:
cc:6a:b2:6a:df:ba:92:1b:77:14:b9:91:a1:96:44:
27:0b:96:58:7c:82:66:4a:c5:38:07:ec:b8:f3:ee:
c4:5c:68:2b:c8:e1:b4:23:67:4a:ff:8a:0f:ee:60:
a8:f1:5a:39:cb:91:65:5a:a8:04:b4:fa:2b:be:16:
43:6b:f7:de:7f:58:c6:ae:34:31:ba:e4:2b:7a:67:
74:34:75:4a:3a:3c:d0:21:31:07:d8:49:65:c2:9b:
66:de:6b:45:53:04:50:c1:29:94:af:af:d1:d4:3f:
62:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D5:65:CC:56:BA:DF:AC:CA:C8:F5:B7:C2:B5:6D:88:51:00:0F:F0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eNVlzFa636zKyPW3wrVtiFEAD_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
68:72:a1:fb:f3:41:16:1a:04:f5:73:08:69:5f:2e:f7:73:8c:
c1:e4:b6:a5:63:a7:03:7a:c2:f5:5f:2a:7b:58:9d:c9:22:76:
cd:a4:d9:bd:52:d6:fe:16:12:10:b4:1f:20:b6:27:9b:22:55:
fe:d9:d7:ab:2b:5e:0d:a2:33:51:42:10:cf:aa:35:40:cb:c2:
34:60:fc:a8:3d:20:a9:58:fe:b3:af:c4:b7:19:d3:6c:d1:de:
41:7a:b1:34:4c:4d:7c:54:61:8c:3b:0d:ae:03:2a:01:f4:29:
17:da:55:af:fe:09:2d:65:37:a5:cb:90:f5:a1:67:18:1b:b0:
2c:5f:b6:84:a9:9d:2c:1d:3a:27:49:11:2d:38:c8:ce:5e:41:
a4:11:1d:6b:2e:4a:ca:7d:58:6b:1e:3c:5c:f3:3e:34:92:5d:
b7:4e:86:da:92:74:43:bc:55:98:1e:1f:f4:17:fd:1c:e4:61:
a9:1e:16:20:d6:62:75:6e:84:19:6b:04:9e:e6:5d:c6:7a:03:
5c:05:aa:8c:91:5c:3a:81:6f:54:8a:dc:ef:e0:b2:22:b0:38:
07:f0:65:29:d5:e2:c1:90:3b:97:f3:35:30:16:4a:58:92:3c:
a0:9a:14:42:3e:ae:37:06:65:d6:e1:dc:75:97:1b:b8:9e:de:
38:c7:65:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 01:26:01 2025 by rpki-client