Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iU9rRQZ9LLFpNMcKXyaVrcgAFhs.roa
File: iU9rRQZ9LLFpNMcKXyaVrcgAFhs.roa (raw, json)
Hash identifier: HKlLNRHdKVbLV5Uajy69nQguq/DANWLhZdELTEdgy5U=
Subject key identifier: 89:4F:6B:45:06:7D:2C:B1:69:34:C7:0A:5F:26:95:AD:C8:00:16:1B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018719FAEA2842A131B22EEB52E24F60D49B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iU9rRQZ9LLFpNMcKXyaVrcgAFhs.roa
Signing time: Sat 25 Mar 2023 18:14:46 +0000
ROA not before: Sat 25 Mar 2023 18:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:19:fa:ea:28:42:a1:31:b2:2e:eb:52:e2:4f:60:d4:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 25 18:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=894f6b45067d2cb16934c70a5f2695adc800161b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e0:eb:21:4e:fa:8c:ea:a8:45:ab:13:a8:22:
2d:91:e5:37:31:d1:cf:d7:a4:c3:ed:51:5a:9a:21:
b0:12:60:d7:11:95:9f:f2:e1:1f:2b:ac:53:84:94:
17:e8:1d:41:f5:01:f9:4a:7a:39:9e:05:f1:90:fa:
b5:06:64:bc:83:5f:b8:c3:64:93:7a:9c:4c:2a:c5:
05:fa:5a:6f:18:02:e8:46:0c:ea:ef:71:08:ba:89:
ec:0c:d3:47:95:ba:8e:63:67:63:b9:11:0e:4f:33:
4f:4c:f5:de:13:54:00:86:3a:2c:1f:58:5e:9e:f3:
e0:01:ab:14:51:ff:e1:eb:79:65:95:9c:49:e0:3d:
91:21:15:b4:b5:75:8b:0d:22:b6:ae:bf:aa:63:d7:
93:03:d9:97:19:01:9e:68:9f:13:44:0e:d4:9a:d3:
9b:ad:c8:d7:c8:cd:ac:72:71:56:d3:b3:34:58:9c:
f2:bd:1b:1f:a9:80:0d:b9:24:12:7b:03:ac:38:45:
7a:38:50:f2:ec:4c:b3:0c:de:aa:f6:43:73:19:c3:
1f:9e:99:66:e1:f2:86:37:0d:0e:07:02:f8:eb:01:
ad:26:6a:9d:2b:ab:12:41:9a:69:85:6a:13:57:82:
d5:b7:68:18:b9:46:dd:eb:00:11:98:3e:12:f6:e6:
99:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:4F:6B:45:06:7D:2C:B1:69:34:C7:0A:5F:26:95:AD:C8:00:16:1B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iU9rRQZ9LLFpNMcKXyaVrcgAFhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
28:dc:43:22:93:f4:7f:3f:ec:8b:81:5c:c2:8c:9a:67:7c:1f:
42:a2:ad:5a:30:51:2b:04:71:09:cd:10:90:f2:af:fe:17:86:
db:83:4a:95:e1:66:3e:3b:9f:99:1f:61:84:80:68:91:92:22:
41:4e:0a:e6:54:16:b7:51:86:cb:2f:4f:43:56:b8:6d:8c:83:
eb:6d:01:e1:6a:e9:e4:76:4d:e4:a7:af:bc:45:5c:3e:e1:bc:
b0:45:e3:53:ec:75:69:12:fd:b1:8b:29:0e:57:55:48:55:c3:
91:b5:f1:7f:8f:3f:ca:3d:49:ea:bd:2e:aa:16:e4:d5:59:2b:
90:58:4e:c4:3f:29:5e:b2:73:e7:31:03:8a:0a:b9:df:99:99:
28:06:ec:c1:4a:ee:73:c5:ff:30:88:ef:31:c6:cb:da:28:7c:
59:c8:6e:5f:c9:7e:3a:74:b4:65:9f:62:d5:4a:49:e0:c7:64:
c1:05:8d:ab:c6:d9:cf:db:37:fd:b2:b3:25:77:90:dd:60:64:
07:ff:3d:19:db:ec:df:06:ea:3a:12:9e:4e:fd:e7:7c:53:6f:
f7:f9:93:f2:12:f9:53:5e:60:16:20:b9:4d:19:dc:aa:03:3e:
b5:b7:f0:44:7c:6a:6a:05:60:ab:cb:8e:26:45:97:dd:3c:e5:
50:c8:6e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:56:03 2025 by rpki-client