Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k7hoUzQ_EKSyDK7dM__8KjjF9zM.roa
File: k7hoUzQ_EKSyDK7dM__8KjjF9zM.roa (raw, json)
Hash identifier: 6RAoRnsyaYtI5AY45jmjsgBerKyQAnv3PBwdfQ0B03I=
Subject key identifier: 93:B8:68:53:34:3F:10:A4:B2:0C:AE:DD:33:FF:FC:2A:38:C5:F7:33
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189E6A9DAAF8461FD60C9F43F9859A82361
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k7hoUzQ_EKSyDK7dM__8KjjF9zM.roa
Signing time: Fri 11 Aug 2023 22:13:58 +0000
ROA not before: Fri 11 Aug 2023 22:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e6:a9:da:af:84:61:fd:60:c9:f4:3f:98:59:a8:23:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 11 22:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93b86853343f10a4b20caedd33fffc2a38c5f733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:dc:9b:8a:a8:fc:c6:68:da:9d:65:ec:ee:39:
2c:18:6d:3f:f1:42:f7:ba:12:21:e6:13:6e:e9:68:
37:d5:c3:8e:57:37:e9:4d:4f:c8:7e:a3:67:b4:45:
a7:c0:0a:1c:df:c6:1e:ff:6b:0b:7d:87:19:93:c1:
4b:db:c2:db:7e:19:7b:f7:26:a0:00:31:85:16:36:
04:3d:62:86:9e:33:2e:0e:a9:b2:2c:6f:12:02:39:
42:0a:cb:44:08:9b:44:e3:9b:61:cd:ec:a4:d9:a7:
b7:8e:60:59:4a:c2:24:64:4a:a0:02:05:1a:ea:c2:
60:2c:b4:17:09:71:ba:94:fe:ce:89:a8:f6:34:a0:
fc:70:e6:00:35:9b:8d:0c:ac:cb:2a:d0:60:f7:14:
ff:9e:7a:57:f9:b4:30:39:30:f0:67:36:56:a8:93:
14:92:11:31:a1:b5:b7:41:e2:9f:ba:77:f4:1f:de:
5c:01:b2:f5:67:be:16:6e:ef:0e:a8:3e:90:cd:31:
eb:8c:f5:a0:bb:90:1d:5c:22:ee:dc:9b:bd:17:79:
10:1f:c6:00:7f:37:fc:26:27:ea:73:6c:eb:c7:1d:
4d:0c:f1:33:69:83:58:6d:27:37:d5:67:55:7a:3b:
84:e5:f5:e7:4f:8f:a6:06:eb:39:8c:15:d2:1c:7a:
b9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B8:68:53:34:3F:10:A4:B2:0C:AE:DD:33:FF:FC:2A:38:C5:F7:33
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k7hoUzQ_EKSyDK7dM__8KjjF9zM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
82:a3:d0:a7:35:79:08:77:ee:57:32:98:54:97:76:eb:0b:da:
f7:3e:67:09:f2:4a:dd:49:1e:df:f0:88:03:ab:4d:3c:7f:c0:
e2:da:4b:1f:db:0f:75:0b:63:2d:6c:65:e7:45:6c:4a:06:5a:
d4:85:26:4b:2d:42:96:e0:13:75:0c:17:34:a3:c3:65:16:c5:
0d:a9:c3:5e:30:cb:18:66:1e:de:20:83:1d:0a:fa:a0:fd:f3:
f5:36:93:2d:7b:54:2e:80:8f:3e:8e:7f:07:cc:76:8d:d7:07:
76:5b:b6:2d:4c:ff:af:eb:59:8a:a1:99:a0:d6:bc:b9:c1:d7:
8a:0f:32:d8:3a:75:46:4e:2b:6c:f8:8a:e4:96:e3:bf:a3:a1:
1a:6c:f7:e1:2a:33:d1:30:ac:74:00:ba:42:7a:ed:b7:df:c1:
73:fa:2d:6e:b3:58:6e:4a:79:d8:2e:7f:a8:23:db:43:6c:6a:
2d:f5:f4:56:46:49:ec:95:c8:bf:2b:9a:ab:53:99:bf:4a:c8:
ac:8d:95:b8:8b:ef:cf:30:db:b1:e5:21:b8:9f:3d:fc:22:a8:
fc:5c:0a:31:6e:e7:4c:3b:22:26:6f:16:32:fc:ea:e6:04:ec:
09:20:29:9c:98:da:bb:5a:c3:cf:bb:cc:2d:b3:1c:20:2a:64:
9d:97:b9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 10:29:49 2025 by rpki-client