Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/id5Jug-6Vu4mvRTdkM7yEgwwQOU.roa
File: id5Jug-6Vu4mvRTdkM7yEgwwQOU.roa (raw, json)
Hash identifier: 2YON/+4bxP7IsxQnshgvGTO4spcbRfReFTRymlTKZ24=
Subject key identifier: 89:DE:49:BA:0F:BA:56:EE:26:BD:14:DD:90:CE:F2:12:0C:30:40:E5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189E59732145B408A8918301A0664FF5AB0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/id5Jug-6Vu4mvRTdkM7yEgwwQOU.roa
Signing time: Fri 11 Aug 2023 17:13:58 +0000
ROA not before: Fri 11 Aug 2023 17:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e5:97:32:14:5b:40:8a:89:18:30:1a:06:64:ff:5a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 11 17:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89de49ba0fba56ee26bd14dd90cef2120c3040e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:76:4c:c7:01:c3:e6:11:96:40:60:43:b5:6b:
e0:b4:df:d9:40:79:9f:b2:16:fb:63:15:7c:22:48:
1a:3b:af:fb:1b:7f:75:8f:34:76:f8:73:9c:50:fb:
66:a7:99:dc:4a:21:76:d3:67:64:fb:67:fc:31:85:
03:2b:3b:a3:9d:fa:bb:11:85:1d:13:fd:e3:75:b4:
c5:7b:81:fb:69:b6:cc:7b:0c:f1:2f:b6:ed:90:73:
7d:56:a0:c1:aa:84:1a:b3:e8:d4:cc:69:70:83:53:
e2:88:9e:5c:9c:21:ae:54:ac:3a:0a:77:84:13:bc:
b4:eb:fb:79:d8:38:9d:b5:58:d5:f5:47:11:f6:8a:
6a:68:87:27:68:3b:70:31:7a:73:08:2d:0a:18:a6:
f8:ca:dd:00:11:9e:cc:d8:79:3c:16:23:c2:03:b5:
66:a5:b7:82:26:e5:de:72:a9:62:85:7f:ad:83:69:
cb:8a:e1:d3:98:17:42:cb:e4:3d:17:cc:ab:41:10:
f3:78:02:e2:4f:61:33:c2:a4:7f:6c:2d:37:b3:64:
61:b5:7a:c8:c8:34:1b:c3:d7:8c:32:20:17:bf:fa:
42:72:1f:ad:cc:b8:de:3c:a7:68:d8:44:fa:82:21:
50:bb:17:97:a2:c1:b4:0d:72:2f:84:7a:42:4f:ab:
a9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:DE:49:BA:0F:BA:56:EE:26:BD:14:DD:90:CE:F2:12:0C:30:40:E5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/id5Jug-6Vu4mvRTdkM7yEgwwQOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b0:54:92:11:d5:d8:86:4c:b9:9a:f9:2f:c5:b0:19:58:8f:0f:
79:0d:56:12:5c:45:2d:05:d0:e1:49:cb:4b:03:91:0e:67:9f:
c2:87:65:cb:d3:c7:9c:93:9a:2a:d5:3d:f3:26:c6:e6:3b:c9:
7c:c6:0b:1e:5b:d9:af:a2:1b:57:a5:ea:56:64:14:59:bb:78:
80:67:9e:7e:16:fe:1b:b0:c9:52:52:98:ac:d1:84:f9:97:39:
42:55:43:33:ea:5b:b1:3f:2d:03:34:12:f5:81:ff:b6:64:72:
e2:cf:ad:5f:40:ea:bf:dc:9c:24:bc:d3:ef:97:04:d6:ae:97:
07:2d:9a:dd:55:18:b4:95:5a:55:82:ac:29:bd:bb:98:e7:f5:
20:f0:40:bd:8c:1d:52:bd:76:e7:65:58:d6:72:31:3a:9d:02:
81:99:50:1c:9a:54:4e:4e:eb:da:90:48:84:e1:84:4d:c4:30:
19:44:05:1f:53:64:f1:df:97:09:d3:22:1c:f4:c1:24:0f:70:
79:a1:e7:46:1c:2c:f8:a1:e4:ae:74:b7:f7:45:44:23:98:86:
82:c5:82:4e:11:02:56:e1:7c:78:b1:59:3a:47:e2:b1:d3:2f:
d1:1a:5f:cd:9e:9a:60:58:41:95:fb:df:21:cd:15:f0:be:09:
73:a3:1a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:19:29 2025 by rpki-client