Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/g0xd0j9CY7ttmlIiSkN65ELtuSQ.roa
File: g0xd0j9CY7ttmlIiSkN65ELtuSQ.roa (raw, json)
Hash identifier: 5kLsi/BhFpkNDKf64Wsq2xDXePjnUJlGiPLlWdvP7Oc=
Subject key identifier: 83:4C:5D:D2:3F:42:63:BB:6D:9A:52:22:4A:43:7A:E4:42:ED:B9:24
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182B3AA41C452453D4D5A880688904BC488
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/g0xd0j9CY7ttmlIiSkN65ELtuSQ.roa
Signing time: Fri 19 Aug 2022 01:14:15 +0000
ROA not before: Fri 19 Aug 2022 01:14:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b3:aa:41:c4:52:45:3d:4d:5a:88:06:88:90:4b:c4:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 19 01:14:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=834c5dd23f4263bb6d9a52224a437ae442edb924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:62:74:a8:04:cb:b3:e1:c3:18:60:f1:3e:08:
10:0b:45:de:d1:56:85:a9:4e:d6:cb:83:7e:cb:18:
e0:34:b6:e9:cd:37:50:0b:1b:b0:06:80:a2:fe:1b:
fa:ad:d6:2c:73:fd:f2:59:72:8f:87:04:e3:cd:75:
dd:48:fd:2c:ab:fe:9a:0f:49:e1:99:75:e6:28:e7:
1a:02:3b:47:9d:bc:06:8b:dc:14:84:ef:c5:3f:7c:
ce:7e:d8:0c:4d:35:83:d9:06:97:7c:08:0f:1b:b2:
94:05:2e:6e:fb:6a:60:40:26:df:f6:b6:50:a8:0c:
e0:e8:69:fa:b7:c3:c4:2a:46:ba:89:88:ce:58:79:
6a:f8:28:e4:42:f5:f1:0b:f2:60:67:96:3c:b8:36:
34:9c:c0:ca:5f:85:c6:aa:18:65:ad:0f:6c:97:f3:
39:c0:8b:ae:1e:71:0c:45:72:9f:bd:f7:ab:c7:a3:
f1:17:11:1d:28:de:ab:f5:ae:be:9d:77:e0:34:0d:
87:3b:5b:29:48:5a:49:c6:e0:44:60:fb:0f:c0:60:
4f:73:ad:9b:9d:2a:02:6d:e7:75:a1:a8:1d:72:8b:
cb:50:88:42:ad:d8:eb:d1:02:ce:f9:83:fb:04:ce:
37:06:ad:08:ba:0a:af:ad:c6:3f:40:2e:a1:5e:82:
27:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:4C:5D:D2:3F:42:63:BB:6D:9A:52:22:4A:43:7A:E4:42:ED:B9:24
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/g0xd0j9CY7ttmlIiSkN65ELtuSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b1:16:89:94:bb:62:88:d5:37:b4:c3:f3:d8:62:6f:31:78:7a:
d2:c7:02:08:79:c1:df:49:85:1b:8f:a3:d3:6b:0a:3d:7d:7c:
62:8a:46:87:ca:48:57:34:d6:ab:e0:56:ef:7b:84:77:ae:9a:
a2:90:36:63:1d:e1:8e:ec:e4:9b:5d:d5:a4:42:1d:1b:bd:86:
4c:45:0b:78:5b:0a:ff:2c:b1:c2:fd:3e:e9:f1:94:00:0c:2c:
31:a8:94:aa:87:87:c1:9f:97:26:c9:1b:95:ad:1f:3d:cf:05:
e9:d9:8e:12:9e:3e:33:dd:49:52:99:ba:62:c7:cf:f8:2c:72:
bc:66:a6:cf:f5:13:88:8c:2b:5c:c4:4f:16:ba:7d:e6:d4:10:
f9:ea:da:c9:14:b5:bc:10:d6:bf:35:14:b2:7b:89:6b:2b:6d:
96:ba:e7:ca:05:d2:22:18:8b:ec:54:3a:eb:a1:62:42:0c:24:
a9:33:8d:ab:40:ca:0e:df:44:19:d3:dd:ad:4f:43:b8:46:2b:
03:f4:f1:ca:47:f6:19:69:9e:02:a9:9a:a6:9c:b8:20:ef:35:
3d:50:3c:59:d8:84:d8:58:cf:62:15:f8:60:63:02:da:a3:a9:
e5:49:1b:b2:af:94:44:f3:3f:eb:84:c0:bc:c0:9c:27:bd:12:
80:f9:34:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 01:11:25 2025 by rpki-client