Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/g1O-6mz_wwkf_vEx-2R7fAQRoHw.roa
File: g1O-6mz_wwkf_vEx-2R7fAQRoHw.roa (raw, json)
Hash identifier: 8G0Fn4oI5bwEvvQrm7KfZYVxQQ+8wmh6T/u5lKP87Mo=
Subject key identifier: 83:53:BE:EA:6C:FF:C3:09:1F:FE:F1:31:FB:64:7B:7C:04:11:A0:7C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189EF36E0AE21B66B1349F371419A82031F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/g1O-6mz_wwkf_vEx-2R7fAQRoHw.roa
Signing time: Sun 13 Aug 2023 14:04:58 +0000
ROA not before: Sun 13 Aug 2023 14:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:ef36:54cd/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ef:36:e0:ae:21:b6:6b:13:49:f3:71:41:9a:82:03:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 13 14:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8353beea6cffc3091ffef131fb647b7c0411a07c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:da:ec:27:6b:98:e3:a9:0b:54:04:0a:03:92:
8e:cd:e8:7d:fa:08:72:17:55:c4:79:14:4d:9d:ca:
f1:2b:fe:f2:31:32:de:06:9c:54:74:02:01:74:fd:
a6:5a:fd:83:76:4d:9b:ff:8d:a5:ba:80:e6:1a:92:
5f:a4:64:a1:95:bb:83:c6:8c:a4:20:f7:ce:9f:d7:
7f:fc:bb:a7:d0:22:19:a2:98:73:ed:d1:d9:10:a0:
b2:f2:14:63:39:33:e1:b6:69:e4:ae:ba:d9:98:08:
da:ae:00:20:bf:38:59:c5:2f:6c:d6:b5:a5:8a:e6:
dd:64:07:ad:dd:2c:81:fc:d5:14:32:3b:27:00:53:
6c:a7:3b:bb:bf:31:7a:47:d5:a6:ea:80:53:ca:ce:
23:0c:24:f5:9c:4b:74:fd:68:a6:4c:d2:d9:f8:ac:
3e:67:bb:20:6a:00:93:b8:03:d6:ee:bf:52:17:48:
a7:38:a5:d7:77:e2:e2:1e:73:9e:84:57:2c:86:b0:
d8:f0:a0:d6:db:8e:5c:b2:58:cb:37:39:b1:7c:32:
be:ee:17:db:19:27:52:44:ec:6b:85:a7:94:17:bc:
87:42:cd:c8:b1:3b:d8:b9:ef:bd:08:93:21:be:d6:
d7:74:b8:97:c9:0e:dd:75:5a:4a:a5:b0:e8:cb:57:
0d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:53:BE:EA:6C:FF:C3:09:1F:FE:F1:31:FB:64:7B:7C:04:11:A0:7C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/g1O-6mz_wwkf_vEx-2R7fAQRoHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a0:1c:2e:83:60:ca:7a:de:df:1e:d1:5d:65:2b:06:0e:f5:6c:
b4:e8:b1:f7:e6:26:2d:9d:03:e4:34:34:66:95:d6:b5:39:c7:
e6:e7:97:74:d7:60:59:13:74:60:b5:55:cf:a9:14:ce:d5:16:
62:f8:be:f4:b2:fa:17:9e:22:be:98:25:39:6d:e6:19:5b:f8:
ac:65:d1:87:96:91:22:e3:fb:26:f8:be:60:23:0c:d1:5c:b7:
b6:4b:bc:01:48:2d:a6:b6:26:5c:fd:76:a9:18:9d:4f:08:26:
4f:12:74:eb:5a:45:97:0f:fe:2c:4b:e2:d1:f1:26:d0:6b:92:
a7:6a:4a:40:61:19:73:87:32:e3:aa:34:d0:e0:f6:3a:8a:a7:
22:82:15:ee:59:c5:58:00:43:68:7e:0d:f3:f5:d2:42:08:9b:
a9:c4:3d:3a:69:18:1d:c9:4e:1a:11:82:48:2e:89:ae:80:97:
93:0f:35:10:22:90:15:17:df:a9:9d:e9:8d:3e:98:02:ab:56:
3e:5b:aa:11:2f:15:d9:13:01:c5:c5:4a:04:fe:5a:d2:fa:84:
bf:eb:8e:f8:ae:b0:e3:be:9d:59:a4:d8:ad:6e:fd:bf:b1:14:
2f:40:1e:63:55:6c:6b:fe:7c:aa:96:a4:7f:f9:54:67:07:47:
ab:ca:c3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:23:21 2025 by rpki-client