Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k4p6canvfQ0Ujy36yNEsVfxz7T4.roa
File: k4p6canvfQ0Ujy36yNEsVfxz7T4.roa (raw, json)
Hash identifier: EChRSvMGrzcWEGC1+m+Oxds52Oh/U+KWM+/Mv5UAYs4=
Subject key identifier: 93:8A:7A:71:A9:EF:7D:0D:14:8F:2D:FA:C8:D1:2C:55:FC:73:ED:3E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189996829E6B590C5A9858419F9BD4D0B20
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k4p6canvfQ0Ujy36yNEsVfxz7T4.roa
Signing time: Thu 27 Jul 2023 22:11:27 +0000
ROA not before: Thu 27 Jul 2023 22:11:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:99:68:29:e6:b5:90:c5:a9:85:84:19:f9:bd:4d:0b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 27 22:11:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=938a7a71a9ef7d0d148f2dfac8d12c55fc73ed3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3c:59:89:77:72:f2:45:fb:b3:83:94:bd:92:
8c:74:4d:4d:1e:5d:96:20:09:90:00:36:b7:8f:1d:
99:f1:c4:c8:c7:76:f9:6a:ee:d6:9a:26:88:4f:fe:
c3:dc:8f:6a:8c:cc:72:c2:26:7e:db:12:c9:06:1b:
dc:2b:db:97:20:06:9e:e3:bf:7c:d6:e2:2a:1b:76:
f6:e7:60:26:a2:81:f6:8a:2b:1e:44:b2:c9:d9:d4:
68:df:8e:f6:ee:9b:46:53:70:a5:7b:45:66:13:14:
42:24:b2:e7:80:54:39:06:a8:5c:e8:4f:0a:6f:dc:
a2:45:46:1f:3b:8c:41:bc:be:0b:c1:05:e8:f5:5a:
21:51:81:6f:c1:f4:f8:30:e1:d0:cd:75:29:54:ac:
1e:22:d9:bb:1d:25:d9:d4:5a:09:f8:d7:40:16:04:
56:5e:fc:e7:34:38:7d:ff:24:2b:bf:8d:77:57:86:
5c:30:6e:62:9e:79:6f:2e:0e:07:a9:2c:ba:d0:b9:
97:21:54:d3:37:2a:10:51:5d:e2:47:92:ef:d6:cc:
d6:f7:27:bc:c5:41:6a:e6:9e:7a:4a:d9:d6:f1:e5:
e6:77:8c:5e:57:36:c2:55:01:45:3c:00:36:44:21:
d7:f8:b0:0c:5c:e2:5d:af:26:2b:27:59:2c:0b:65:
cc:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:8A:7A:71:A9:EF:7D:0D:14:8F:2D:FA:C8:D1:2C:55:FC:73:ED:3E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k4p6canvfQ0Ujy36yNEsVfxz7T4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0b:65:2f:9e:6d:90:47:67:ea:f2:69:56:79:67:72:22:37:cd:
6a:14:22:a8:c5:97:5e:de:43:31:9a:c6:9f:df:a3:5d:03:f5:
36:f2:88:58:65:a7:1e:61:5b:d2:5a:17:55:df:89:61:28:79:
b1:6b:d2:e2:f8:5a:a1:dd:15:31:88:b1:df:cf:45:dc:4b:6a:
11:30:2a:4c:50:0a:ef:cc:eb:bc:e4:4c:7b:23:df:82:a6:6e:
56:10:23:ef:ea:67:7a:79:cb:8e:7c:28:48:f0:d9:ef:b9:74:
d9:d9:8b:cc:10:f5:2c:b4:89:f6:31:dc:ac:83:db:2b:a3:5d:
81:0d:2c:f5:b8:e3:f9:b3:43:08:b8:b7:90:a2:08:29:79:24:
ad:37:05:86:f0:b7:c5:68:f8:79:a4:95:b1:67:17:e6:5e:41:
94:b6:bb:b1:c6:e0:74:b2:63:f1:ab:d2:5e:d0:a1:4e:b4:51:
27:b1:8e:ed:ec:cf:26:bc:70:f8:db:96:a6:02:78:25:81:d0:
07:2f:6d:3a:09:3e:ee:80:5c:55:43:1f:d0:3e:b7:9e:4e:04:
a1:65:c4:65:0d:25:34:f9:44:34:71:eb:15:66:78:e6:85:97:
ad:2c:09:f4:88:70:83:5b:d4:77:92:ff:ae:cb:c6:2f:69:2a:
88:4c:b5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 17:04:44 2025 by rpki-client