Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/i-sbrSIoQLf0u9IJicxCT5sszTE.roa
File: i-sbrSIoQLf0u9IJicxCT5sszTE.roa (raw, json)
Hash identifier: fX4CDlajHHzarW7nseafoQ41ZU3pGyLqlpkOBjTPC6M=
Subject key identifier: 8B:EB:1B:AD:22:28:40:B7:F4:BB:D2:09:89:CC:42:4F:9B:2C:CD:31
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188C8D5541CFE53D81F2A1FA316A3E8274B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/i-sbrSIoQLf0u9IJicxCT5sszTE.roa
Signing time: Sat 17 Jun 2023 10:10:03 +0000
ROA not before: Sat 17 Jun 2023 10:10:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c8:d5:54:1c:fe:53:d8:1f:2a:1f:a3:16:a3:e8:27:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 17 10:10:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8beb1bad222840b7f4bbd20989cc424f9b2ccd31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:0f:14:94:3a:ec:bc:32:57:96:cc:c8:ae:d2:
ca:15:06:3a:36:c8:e6:58:68:97:71:ce:20:4e:35:
49:af:af:c8:df:7f:4e:58:3e:05:92:44:45:cd:9a:
3c:84:35:d5:7f:58:5b:80:74:e6:61:1f:52:3f:fd:
f5:79:47:9f:50:f6:e2:0b:01:2c:da:00:c9:ab:0a:
31:33:35:89:91:bb:02:e4:10:93:e3:b7:83:b6:87:
d0:49:c0:5d:12:54:20:d7:eb:6f:c0:08:49:78:93:
ec:95:c4:41:fe:7e:48:c9:6d:96:8c:fe:74:94:c0:
aa:6d:df:2a:91:5f:40:96:07:cb:a2:31:4e:23:01:
53:59:6c:ba:36:5a:b4:0b:c1:a8:0c:d4:4b:d8:d8:
87:59:99:93:8f:bb:6f:ba:ff:05:bf:c2:62:6b:96:
88:9d:fd:c2:eb:7f:56:4f:59:4f:63:34:fd:27:9a:
c6:ce:91:7b:f5:ed:81:6c:da:62:20:64:1c:04:20:
fa:a6:a6:d1:0b:16:d7:38:5f:d2:ee:a5:3e:7b:d9:
9b:f2:c4:13:11:38:65:91:6a:c7:a1:2f:d2:0a:dd:
f7:54:1a:37:80:d1:3c:e2:f6:ef:41:b4:dc:e0:f9:
3c:63:bc:cb:f6:e2:ec:6b:7e:f0:c1:26:d0:c9:85:
26:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:EB:1B:AD:22:28:40:B7:F4:BB:D2:09:89:CC:42:4F:9B:2C:CD:31
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/i-sbrSIoQLf0u9IJicxCT5sszTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7d:ac:06:54:ca:76:9e:3f:70:1a:16:e1:9d:cb:ed:8f:f4:bb:
bd:78:d8:05:8f:7d:6c:c2:ed:32:af:ae:93:0c:5f:f9:78:57:
c7:c4:ee:e4:bd:86:94:97:6f:8c:db:9c:66:54:44:c1:6b:ed:
33:5a:f9:f8:48:79:85:ee:ff:cb:63:41:65:70:b1:12:ae:20:
e5:39:84:17:60:7c:a3:7b:63:2f:48:5b:a0:04:cf:3c:2c:84:
b3:84:3e:16:fb:cb:1c:92:63:5d:53:ce:9e:ca:08:e2:d5:1b:
bb:48:b5:73:49:d7:74:40:32:0f:26:e5:ca:7b:b1:b1:f0:49:
39:39:77:5a:86:23:f9:7a:9d:b8:27:50:f8:2f:0f:d5:c5:2d:
93:2b:75:26:3b:75:63:3b:75:3a:fe:ba:05:9e:58:12:b9:0f:
be:bc:4e:0a:e8:87:85:7e:46:a2:99:9c:1e:58:2c:c8:83:04:
fa:13:53:e8:08:f8:51:47:c3:cd:12:5e:97:ca:ae:bf:19:1a:
45:04:9a:ef:ae:8c:10:82:67:11:e4:da:07:e5:f1:6d:89:df:
74:60:dc:4d:c5:24:93:74:56:33:e9:d3:3f:6a:30:8f:5b:4b:
fe:5f:c9:66:e1:28:25:35:9f:81:e0:77:85:80:0a:fd:eb:2d:
f5:c7:a7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:11:20 2025 by rpki-client