Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fI5Hpp5V6XgoArxfZQ_bZEYvknI.roa
File: fI5Hpp5V6XgoArxfZQ_bZEYvknI.roa (raw, json)
Hash identifier: xnqvYWgvJsC93VyKFZBL/e79U+CJBW+a2SrzdAtXzxs=
Subject key identifier: 7C:8E:47:A6:9E:55:E9:78:28:02:BC:5F:65:0F:DB:64:46:2F:92:72
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186C2032BD06812BC86752C8A00DB84DFDA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fI5Hpp5V6XgoArxfZQ_bZEYvknI.roa
Signing time: Wed 08 Mar 2023 16:17:13 +0000
ROA not before: Wed 08 Mar 2023 16:17:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c2:03:2b:d0:68:12:bc:86:75:2c:8a:00:db:84:df:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 8 16:17:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c8e47a69e55e9782802bc5f650fdb64462f9272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e6:ea:bb:a5:20:af:39:bc:56:85:cf:e9:05:
8c:0d:e1:70:24:c5:d6:78:76:47:e8:3d:5c:6e:1c:
55:bd:0b:6f:fa:e7:3b:0f:a4:c8:be:60:2a:c2:b3:
bf:89:07:54:06:ae:47:b3:63:3f:9d:b4:5e:8d:67:
42:ff:96:65:88:34:e1:b7:ce:d9:2e:e8:39:e9:58:
be:ae:d0:3c:54:9b:5a:8e:d8:33:72:10:c9:1a:04:
7f:e1:f5:58:44:a9:f4:ab:c0:af:4d:b2:9b:0e:fd:
c0:18:71:ca:e8:c1:16:eb:4e:6d:20:e3:0e:cd:bd:
ef:8c:68:20:af:d9:08:4b:57:b9:3e:1c:28:d8:0f:
80:b9:9c:3a:4a:bd:71:db:44:06:2c:68:2d:91:d3:
8b:db:8a:0b:2a:d6:6f:29:77:68:74:f6:8e:7e:9c:
6f:3e:9a:97:ec:e4:df:eb:45:04:a0:c2:a3:ce:62:
ae:da:57:5c:c3:76:c4:a9:50:8e:7f:ed:e6:b2:00:
1b:44:78:23:2c:c4:d0:7e:52:80:0d:0e:de:3b:85:
2a:0d:6e:0f:42:b4:9f:54:95:41:67:c5:5e:68:f7:
f4:88:85:8c:51:9d:de:cb:1f:ff:ef:c8:e4:72:c8:
93:e7:a6:5a:2f:db:59:ed:9f:2d:8e:07:cc:16:7d:
da:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:8E:47:A6:9E:55:E9:78:28:02:BC:5F:65:0F:DB:64:46:2F:92:72
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fI5Hpp5V6XgoArxfZQ_bZEYvknI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
88:06:3d:df:4e:fd:8a:3c:95:3a:2f:0b:90:f4:c6:76:4c:8f:
1e:e2:09:5a:9d:43:aa:66:7a:69:42:76:32:77:d0:91:2a:43:
14:4c:22:bd:84:27:36:dd:49:e1:c8:97:c8:c3:8f:11:1c:71:
25:12:a5:d4:e6:24:09:0a:b2:c4:07:c8:fd:d9:aa:12:05:5c:
8a:95:47:86:72:44:2f:85:f7:2f:1d:5e:8e:54:92:8f:72:b4:
2c:73:0d:4f:73:6c:24:87:26:a4:38:c1:04:81:79:a8:b5:32:
d5:a2:b5:aa:01:05:55:72:5c:01:d1:06:15:0e:30:34:e4:f0:
a9:dc:a4:35:92:ec:0e:bb:47:3c:fd:18:08:6a:8d:69:d5:8b:
ce:3f:51:83:37:9c:a5:b4:78:be:e1:91:9e:44:f6:2a:fd:7a:
ba:cd:79:78:4b:0a:73:a6:d3:15:ad:8f:77:e7:65:92:9c:39:
58:33:e3:43:ab:4c:ec:e3:53:54:4a:cb:a5:5e:80:a1:9f:af:
45:e0:57:1b:27:3d:51:73:7e:9c:9f:ed:47:56:f2:bb:ce:4b:
1e:03:54:8a:36:6e:5f:08:c3:51:b4:4f:b2:49:f9:45:89:a9:
75:f3:a8:06:21:8f:6f:eb:31:d3:aa:a3:47:5e:2d:60:8d:62:
9d:89:56:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 21:16:05 2025 by rpki-client