Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/i0rAqiHQ70Zl5Hua6HR8Oi6RMSU.roa
File: i0rAqiHQ70Zl5Hua6HR8Oi6RMSU.roa (raw, json)
Hash identifier: qagGpkGVBnPV91Jjh2Fak+K4i5fyinwBxHN5YbB6qXQ=
Subject key identifier: 8B:4A:C0:AA:21:D0:EF:46:65:E4:7B:9A:E8:74:7C:3A:2E:91:31:25
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188BC2C5B3AD6AF7B3C2041B7AA4C48CC4B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/i0rAqiHQ70Zl5Hua6HR8Oi6RMSU.roa
Signing time: Wed 14 Jun 2023 23:10:03 +0000
ROA not before: Wed 14 Jun 2023 23:10:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bc:2c:5b:3a:d6:af:7b:3c:20:41:b7:aa:4c:48:cc:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 14 23:10:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b4ac0aa21d0ef4665e47b9ae8747c3a2e913125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:92:bb:be:b4:f7:e7:65:69:ed:72:d7:98:de:
cf:15:69:72:c2:f2:6f:c7:3e:fc:9a:59:fe:58:e7:
3f:77:db:a2:2f:5a:e3:c4:7b:f4:ec:3e:fc:29:5c:
55:e1:00:36:b2:21:ce:fa:85:1b:ab:18:73:b2:20:
0a:63:32:d5:03:86:ff:44:46:de:a3:13:63:51:43:
89:67:d3:d4:41:ef:a9:5f:7a:4c:e0:42:4e:91:65:
87:8b:d1:34:7f:7e:8c:10:de:30:bf:04:4b:0c:2d:
f5:41:4c:f3:60:ef:54:6f:03:32:ce:22:b0:bd:45:
22:35:93:ac:39:68:b4:1a:79:dc:71:9c:07:9e:f7:
3f:c7:96:ab:25:92:de:0e:b8:3f:5f:6a:93:75:90:
5e:31:e0:a6:48:41:ac:12:93:55:ec:c1:39:20:d5:
e3:a5:26:f8:4d:0a:f9:00:71:bd:86:1a:2a:3a:0f:
88:c5:a9:f2:76:5d:2d:12:4d:b5:d5:e6:90:d7:69:
80:24:99:2a:21:11:d0:62:2a:d9:e6:88:9f:c4:2c:
e8:ff:e6:95:89:f4:fb:de:cb:89:35:03:e0:5c:dc:
9d:fa:32:c5:37:20:4b:d9:81:7a:b9:c1:e6:c7:94:
81:b9:bb:70:4f:47:89:a7:e1:e1:5b:9d:7b:14:a1:
ba:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:4A:C0:AA:21:D0:EF:46:65:E4:7B:9A:E8:74:7C:3A:2E:91:31:25
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/i0rAqiHQ70Zl5Hua6HR8Oi6RMSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
26:8f:41:9a:a2:9f:b6:3b:0a:ca:2d:11:5d:09:d2:10:ce:9b:
19:ad:cc:9a:60:10:74:7f:83:c8:77:eb:23:f8:6d:2e:da:d8:
69:fa:65:55:dd:33:46:7a:60:ef:bb:a6:2c:7f:d8:6f:91:0d:
a1:76:76:ae:23:06:cb:df:26:3c:42:ed:27:f1:f2:7e:8c:60:
08:1b:49:58:25:1e:20:23:4e:ce:61:d7:4e:87:3b:66:56:13:
fd:f1:28:12:b2:dc:af:66:d9:ef:52:a8:4a:fe:09:ea:59:56:
e4:b4:94:39:bf:44:00:36:3f:75:28:3a:c2:7c:17:3c:cb:0d:
55:06:4d:83:17:27:77:eb:3a:ff:16:21:5e:e4:13:4d:5f:83:
1b:39:3f:81:dd:92:61:4b:cd:03:21:5c:80:2b:75:90:07:8e:
84:0b:51:3e:41:0c:dc:0c:75:12:e3:e0:68:cd:5a:94:37:dd:
3e:4b:8b:b7:56:dc:d2:11:2a:d0:a3:0f:c3:7c:2e:24:53:4e:
f4:83:00:5a:a6:1d:79:5e:f0:d6:14:54:d2:ae:13:30:ef:21:
49:b0:6c:b5:c7:02:a2:f6:bc:df:e9:f3:b7:17:d8:9d:a5:f8:
3d:78:e8:64:69:27:2f:19:e3:ac:26:72:b2:e2:38:c0:2b:ec:
2d:19:ea:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 10:53:30 2025 by rpki-client