Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k9UgFfaJ02lCAsVUVUAEbo8OjLo.roa
File: k9UgFfaJ02lCAsVUVUAEbo8OjLo.roa (raw, json)
Hash identifier: FDscIT74BPO+zS9aISWrwecJTGul4Fqu5Ay8fGqD7dc=
Subject key identifier: 93:D5:20:15:F6:89:D3:69:42:02:C5:54:55:40:04:6E:8F:0E:8C:BA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01875CB5AB4D1927D07773C663ADE96D3245
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k9UgFfaJ02lCAsVUVUAEbo8OjLo.roa
Signing time: Fri 07 Apr 2023 17:13:42 +0000
ROA not before: Fri 07 Apr 2023 17:13:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5c:b5:ab:4d:19:27:d0:77:73:c6:63:ad:e9:6d:32:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 7 17:13:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93d52015f689d3694202c5545540046e8f0e8cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2d:59:7b:dd:66:bc:49:ed:bc:69:03:42:0a:
7c:3f:45:ce:9d:1b:ba:34:d5:c1:d6:24:2a:13:d1:
d3:ca:31:ee:28:b2:b5:ba:d5:7f:ab:10:55:a7:f4:
67:a6:bd:9d:84:11:72:96:39:df:fb:a5:1c:be:40:
4d:62:e1:b4:62:19:3f:9b:c9:14:6d:30:15:af:46:
6c:bb:ea:5f:e5:82:0a:eb:80:95:2b:da:1d:79:06:
fd:04:55:bd:76:2b:a8:4b:ac:a7:52:63:7a:29:79:
15:bb:b9:e5:e6:a9:31:22:7b:cf:31:4b:0a:b8:ad:
0b:9c:1d:cb:8a:4e:a3:6f:e2:08:7d:5a:64:17:49:
ff:4b:96:59:5c:38:a0:13:cc:c5:66:ff:5e:b7:c3:
bd:8f:db:5c:1f:b0:cf:cd:3b:4b:83:3d:ec:a7:b0:
1e:3c:bf:58:7c:10:10:a1:bf:ce:fa:93:7a:62:d8:
0e:31:bb:21:03:94:b8:81:0b:81:c4:2a:30:09:44:
40:c9:ae:36:25:55:62:aa:51:4e:e8:bc:4d:22:db:
12:c2:5d:b3:9b:dd:57:ea:c7:5e:d3:f7:22:61:eb:
f1:38:7c:ad:d4:26:6b:22:85:1d:f1:23:e3:1d:1f:
86:c9:da:17:fd:34:b2:5d:6e:d9:70:54:b0:d3:b1:
a6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D5:20:15:F6:89:D3:69:42:02:C5:54:55:40:04:6E:8F:0E:8C:BA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k9UgFfaJ02lCAsVUVUAEbo8OjLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3c:38:4e:3b:c9:f5:da:f1:39:e6:35:26:6e:4b:98:99:8d:a9:
8b:8b:9c:94:25:b2:a1:1a:92:25:e2:2d:bf:06:85:e3:db:55:
4c:19:3c:45:37:e9:e6:bb:a4:fe:bb:01:3c:0c:9e:bb:55:85:
60:61:bc:bf:65:65:93:a5:96:57:be:81:14:47:6b:50:8b:19:
24:e1:be:95:67:99:55:8e:f4:5b:19:15:4a:a5:35:91:f2:36:
ec:74:f6:0a:cd:cd:01:a5:bb:c2:0a:c3:24:4a:ba:9f:17:92:
f0:69:a7:83:aa:d6:31:98:16:20:bb:37:4a:64:20:a8:01:75:
5d:88:7f:0d:dc:13:7a:84:a8:7e:3d:5b:50:1c:78:8a:63:8f:
f4:f4:df:0b:0f:7c:ea:6c:b6:6e:da:46:90:01:cd:54:26:3b:
cf:4b:9f:21:39:bc:3f:d5:11:37:d8:43:10:22:37:99:62:75:
4a:2c:d1:87:e0:21:47:b5:80:44:07:ea:94:dd:c1:fc:61:a0:
0d:0f:e8:78:64:20:25:1b:b3:f9:6d:29:12:d9:0e:24:38:d3:
5e:f7:20:08:28:41:c8:02:5c:3a:77:99:76:c4:32:f9:b5:01:
62:3f:bc:88:cb:bf:98:9b:42:54:4e:58:b8:fb:61:5b:53:d7:
36:a2:f8:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:08:36 2025 by rpki-client