Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jlvZ840N2lsCD_TcKvmOP5VuXGQ.roa
File: jlvZ840N2lsCD_TcKvmOP5VuXGQ.roa (raw, json)
Hash identifier: PMHey6tbywfDI4Q5Y3Y/+Z9kDyLb23L4mx/zkTXCJes=
Subject key identifier: 8E:5B:D9:F3:8D:0D:DA:5B:02:0F:F4:DC:2A:F9:8E:3F:95:6E:5C:64
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018989BD3B2DAFE9181A9548946A953B789B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jlvZ840N2lsCD_TcKvmOP5VuXGQ.roa
Signing time: Mon 24 Jul 2023 21:10:27 +0000
ROA not before: Mon 24 Jul 2023 21:10:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:89:bd:3b:2d:af:e9:18:1a:95:48:94:6a:95:3b:78:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 24 21:10:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e5bd9f38d0dda5b020ff4dc2af98e3f956e5c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:72:26:f1:64:78:18:7e:01:9f:fc:a9:c3:a0:
42:c0:61:cd:3f:fc:42:4b:60:16:7b:6c:45:6b:3d:
13:cb:81:76:eb:57:cb:f4:33:a9:6d:68:fc:63:63:
8e:c6:1d:df:a1:12:c6:e7:b9:d7:3f:f4:72:5e:fe:
65:08:b9:33:29:b0:03:48:a1:95:60:ca:12:b5:93:
7f:16:2e:0a:68:a4:72:bb:5c:d5:77:25:18:29:75:
93:0f:63:f9:4a:bd:ed:ca:56:ac:26:a0:2f:5e:d2:
3e:a5:fd:0b:09:32:ed:2d:19:d9:ef:a7:76:b2:cd:
d3:90:69:af:b8:e7:9d:84:30:02:08:e4:9c:b7:9a:
45:d1:2a:b9:70:42:41:dc:24:d9:94:fe:08:2f:25:
68:25:c2:94:34:8e:74:71:2b:77:4d:a8:68:ae:74:
3b:7a:a4:62:6f:33:aa:3c:bd:02:ee:5e:ae:6c:38:
c8:65:f9:02:ee:1c:9c:dc:da:4e:5b:de:a4:fd:8f:
0e:23:94:ef:03:f4:b6:f3:5a:91:29:6e:0a:0f:75:
ab:d0:55:85:37:1b:7d:4d:8d:9d:51:e7:54:a1:ac:
2e:21:97:e0:50:cf:d4:f6:86:ba:85:ff:5d:83:9d:
05:e7:a5:95:23:67:87:9a:02:8d:1f:0b:43:59:f3:
d3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:5B:D9:F3:8D:0D:DA:5B:02:0F:F4:DC:2A:F9:8E:3F:95:6E:5C:64
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jlvZ840N2lsCD_TcKvmOP5VuXGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
76:8b:4b:83:b1:15:2c:9f:34:7d:48:d9:cd:bd:58:5e:6d:97:
a3:39:29:70:0b:57:4e:ea:6b:82:a8:76:1d:0f:78:95:b6:62:
a6:7d:9e:34:f1:a6:e5:dd:9f:47:74:d6:e0:26:a6:b7:92:56:
dd:a3:15:10:a8:40:17:14:e6:ec:63:57:0f:6a:be:4d:60:2e:
57:d2:82:d4:4b:5b:31:fb:b4:d8:aa:b0:82:b0:29:5f:be:9c:
4c:bc:2b:ea:64:cd:8b:e4:8f:7e:b8:87:c0:ba:0b:75:71:64:
e0:d2:7e:d3:e9:28:0a:dd:25:6c:20:2a:f1:d7:86:e2:0d:fb:
47:e6:48:02:b9:01:8a:50:90:ef:fa:96:b1:9d:60:64:d7:8e:
6a:18:55:b1:37:88:53:73:79:be:cf:78:74:74:ea:09:8b:a5:
5e:5a:20:ba:24:65:34:7e:ac:09:51:fd:d5:e5:91:c3:dd:8f:
d4:3c:33:9b:cb:40:c0:54:99:6d:52:5f:b7:ee:ec:c5:e2:99:
a7:d1:ca:fd:04:50:f9:37:28:e9:93:f4:1f:cf:32:20:f0:e1:
0e:e7:3e:38:d7:c3:be:29:b7:ee:d4:1e:b0:f8:81:a3:12:a8:
5e:03:61:fa:c1:65:73:17:77:f7:03:7f:c8:a0:7e:04:03:08:
63:4e:75:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 17:15:57 2025 by rpki-client