Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/h5n5Yzn7hK932gRtrLZiSQa6uk4.roa
File: h5n5Yzn7hK932gRtrLZiSQa6uk4.roa (raw, json)
Hash identifier: ezKsYIUeP6xRO3FFpIONO7Gbx5xDt/ruswgXCXhvmpM=
Subject key identifier: 87:99:F9:63:39:FB:84:AF:77:DA:04:6D:AC:B6:62:49:06:BA:BA:4E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189F61C77C97BF3EC63ED16DBE03A21CF7F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/h5n5Yzn7hK932gRtrLZiSQa6uk4.roa
Signing time: Mon 14 Aug 2023 22:13:28 +0000
ROA not before: Mon 14 Aug 2023 22:13:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f6:1c:77:c9:7b:f3:ec:63:ed:16:db:e0:3a:21:cf:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 14 22:13:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8799f96339fb84af77da046dacb6624906baba4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:93:cd:91:5c:12:83:5c:5e:d2:20:bc:0d:2e:
20:90:7b:32:eb:92:77:3f:86:70:9f:65:c0:72:31:
b1:ab:80:5f:b2:81:21:d5:d5:e9:4a:a2:e1:9b:44:
03:5e:7e:5e:7b:12:6f:70:ed:8f:34:0c:ae:fb:fd:
43:c7:db:44:8e:1c:b6:35:be:66:e1:14:0c:0c:82:
84:bb:42:f3:82:f9:78:0e:fe:dd:6f:7e:79:ff:90:
d7:08:64:2d:82:72:d4:74:3c:49:a3:58:70:2e:62:
c8:07:0f:48:90:c9:2d:23:97:37:bd:dd:50:2a:b1:
1f:d4:90:88:f6:e5:29:51:f7:b4:56:75:a7:3d:5e:
c1:78:b7:f4:ec:ae:69:3c:7a:0e:86:75:43:33:09:
41:41:9e:b5:08:b1:51:ea:6e:ee:37:0a:17:18:a9:
fb:0f:56:31:48:e0:c9:c3:46:b9:03:b5:81:25:ca:
c5:97:58:3a:a2:77:98:a5:a0:c9:e1:f0:0b:44:08:
c3:6a:9c:b0:17:4c:80:84:11:bc:ec:1d:83:bc:c2:
29:9f:c4:7c:e9:6e:40:8f:53:94:98:83:70:74:46:
c7:a5:93:65:51:31:b8:4a:76:57:82:8c:4f:67:9a:
d3:23:33:2d:a1:b7:72:3c:b7:17:97:db:2d:71:d6:
6c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:99:F9:63:39:FB:84:AF:77:DA:04:6D:AC:B6:62:49:06:BA:BA:4E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/h5n5Yzn7hK932gRtrLZiSQa6uk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
74:d7:db:f7:bd:17:96:79:36:89:74:9e:5c:6f:30:46:e3:3e:
57:bc:7b:17:0d:6b:97:9c:7b:3e:f9:d7:a0:f4:56:6d:fa:96:
01:50:b4:c4:9c:f7:3e:1b:8c:9c:c4:66:6c:01:f0:d7:a4:b7:
05:2c:8b:7f:7d:c9:bc:bf:1e:97:33:b2:2f:aa:ce:77:86:1d:
7b:40:00:c8:3f:69:44:45:c6:3d:07:ea:66:63:e6:6f:98:3a:
b1:00:8a:31:84:16:f3:50:9b:dd:cb:5b:10:06:91:d0:af:b8:
5c:c6:29:98:08:be:19:2a:f2:4a:07:c1:84:8d:ec:1b:60:16:
88:52:11:58:5c:39:53:b5:de:c3:6b:17:31:e3:1a:ee:ac:73:
ae:15:ee:0e:8e:dc:fd:c7:a9:49:6b:91:7f:f8:01:2a:a4:ab:
06:6b:ad:cf:b5:f6:f1:2c:c0:b3:a0:f0:40:8d:57:1d:d6:3a:
e4:90:18:f5:85:66:7f:f8:24:85:b8:63:62:e9:59:7b:8f:92:
56:9e:d8:77:2d:a8:dd:6a:93:4d:35:39:fb:9e:2c:14:99:99:
dd:72:d2:19:6f:e9:a2:d8:5c:f3:32:cb:7b:3d:4c:99:3b:6e:
c1:0f:2f:d2:ae:95:66:cf:f8:89:1f:57:fc:45:e0:04:e9:53:
28:7f:a9:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:36:53 2025 by rpki-client