Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k9Y7M4-u8dGZSukrLn18WnSvv2U.roa
File: k9Y7M4-u8dGZSukrLn18WnSvv2U.roa (raw, json)
Hash identifier: truhgsnVZT7TaGEj95Us6eIh+HfvPOEt+N4fjGzD/gA=
Subject key identifier: 93:D6:3B:33:8F:AE:F1:D1:99:4A:E9:2B:2E:7D:7C:5A:74:AF:BF:65
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189D700C38403998D6B496EF4D92100BF1C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k9Y7M4-u8dGZSukrLn18WnSvv2U.roa
Signing time: Tue 08 Aug 2023 21:14:58 +0000
ROA not before: Tue 08 Aug 2023 21:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d7:00:c3:84:03:99:8d:6b:49:6e:f4:d9:21:00:bf:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 8 21:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93d63b338faef1d1994ae92b2e7d7c5a74afbf65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:92:30:84:7d:57:43:56:3e:cc:96:4a:f2:96:
e6:89:a4:63:40:9d:fd:02:e2:ef:47:56:4a:6b:03:
5e:ab:80:11:20:08:75:0b:16:71:90:ce:15:8d:a9:
89:f2:e9:15:e1:6e:f8:de:1a:5c:f2:90:a2:58:49:
28:c7:ea:e7:e5:eb:5d:2b:4d:9f:63:1a:3d:4c:f4:
27:c5:de:9b:2b:56:4a:81:46:2b:2b:82:a6:b1:cc:
77:09:d1:d2:61:80:8e:11:47:53:61:cd:0a:a9:6e:
95:a0:8e:63:7b:f1:ad:a3:67:cd:ed:74:aa:78:6c:
06:83:dd:cf:b9:1c:bb:af:0d:28:1a:33:1c:6b:a6:
e9:4b:aa:ed:dc:bf:ba:09:ce:47:b3:06:70:4f:86:
b0:b5:9f:71:83:50:9c:3b:db:96:53:56:39:89:03:
9d:30:8b:30:fa:a6:dd:46:42:59:9e:46:e0:60:36:
52:04:12:75:e2:1e:9e:02:40:5b:65:3b:3e:71:2e:
34:95:29:00:f7:a2:78:9d:f5:ca:4e:8c:e0:9f:81:
02:d9:e9:2b:e0:52:0e:4f:78:c8:33:26:4c:e2:95:
df:20:aa:97:fe:e9:16:05:42:63:c9:6a:4a:b6:3d:
e6:31:98:a3:8f:0b:15:1c:fb:1c:99:58:9c:0c:61:
d6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D6:3B:33:8F:AE:F1:D1:99:4A:E9:2B:2E:7D:7C:5A:74:AF:BF:65
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k9Y7M4-u8dGZSukrLn18WnSvv2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9a:20:a3:08:be:b9:51:56:84:16:92:42:14:fa:85:82:ca:41:
6f:c3:a9:bd:fa:df:61:9a:3b:00:3e:77:6e:0a:ee:54:2c:f9:
c1:9b:7a:0e:2a:bd:da:79:01:c3:30:e1:6b:8b:e1:11:f5:9a:
3b:70:d1:5b:43:97:44:28:3d:86:a6:28:da:fd:33:87:8d:98:
0a:c2:94:1e:e6:b9:0c:f7:64:09:0f:de:73:3b:aa:f2:7b:0b:
b7:12:63:3c:19:c0:3a:c6:5a:b4:7a:52:8e:a5:d6:a5:34:b4:
a6:54:20:a5:4e:90:b6:a2:43:cf:ee:d3:44:97:4c:e7:57:9e:
ba:d8:a0:89:4e:c7:fb:1e:18:57:da:31:c6:12:a7:73:1b:3e:
63:ee:88:fe:d1:89:43:d1:70:11:b2:1e:73:59:1d:13:c5:77:
cf:4d:6a:2a:0b:72:d7:56:4a:3a:3b:b5:bb:58:72:83:4f:5e:
b8:76:49:2e:3e:32:2a:ad:dd:d7:41:71:0e:83:8b:b8:67:27:
f3:bd:6d:29:81:5b:16:7d:03:15:1c:b1:55:79:25:66:9d:5c:
26:73:86:06:52:f8:71:78:09:ed:c0:5d:33:bb:cd:55:60:b5:
2e:04:77:11:45:ae:57:5a:02:78:0c:5b:9c:d0:e0:a0:d4:d6:
ba:e9:cc:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:29:42 2025 by rpki-client