Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k_jDyT4aR36LBWsHrFAuO8HbBqg.roa
File: k_jDyT4aR36LBWsHrFAuO8HbBqg.roa (raw, json)
Hash identifier: 7zHkdcLt0dy6skzhtgiq57LgkXyX4n+FK/B0YzHTrv0=
Subject key identifier: 93:F8:C3:C9:3E:1A:47:7E:8B:05:6B:07:AC:50:2E:3B:C1:DB:06:A8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188C489C99EF109885E7FB5DC0444618E94
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k_jDyT4aR36LBWsHrFAuO8HbBqg.roa
Signing time: Fri 16 Jun 2023 14:09:04 +0000
ROA not before: Fri 16 Jun 2023 14:09:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c4:89:c9:9e:f1:09:88:5e:7f:b5:dc:04:44:61:8e:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 16 14:09:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93f8c3c93e1a477e8b056b07ac502e3bc1db06a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ea:e0:52:fd:08:f2:b2:5d:46:40:7a:e2:81:
a9:2d:9b:f8:46:87:05:82:a5:06:d8:2e:47:19:c2:
65:b9:85:98:f7:f3:1b:f9:e3:39:82:55:86:3a:99:
d5:0b:c0:60:2f:ce:a8:57:6f:0f:2d:7f:8c:82:ba:
e8:4b:51:54:de:7b:fa:a8:4d:6c:d3:c9:1f:3d:07:
cc:69:8a:cf:09:52:cd:72:58:0b:c9:a6:a2:60:9f:
5c:fd:64:a5:b1:7b:83:c2:3a:41:ec:f0:64:41:59:
d9:8d:02:d8:2b:41:8a:59:1e:ac:08:e0:ac:1d:1e:
1c:6e:14:7e:56:cb:50:f7:89:4d:15:af:af:22:fb:
9e:93:b2:98:57:df:8e:cf:6d:c0:28:f9:35:8b:30:
f1:bc:88:1f:51:1f:11:f8:fc:b5:61:52:cd:33:35:
a5:b5:90:dd:5e:1a:cb:8f:e9:fa:ff:a7:33:45:0f:
91:bc:b4:bc:a9:9e:96:a8:a7:0c:ea:b2:c2:bd:7b:
be:4e:24:56:e3:51:42:e9:38:14:c4:1c:fa:16:cb:
81:36:d2:9e:e1:85:b9:9c:3e:d0:21:e5:4b:49:59:
cc:bf:11:b8:a1:07:0c:1e:56:7c:bc:13:20:d7:69:
44:8d:a5:2a:db:1a:8b:f3:88:98:9b:31:8e:aa:4a:
f6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F8:C3:C9:3E:1A:47:7E:8B:05:6B:07:AC:50:2E:3B:C1:DB:06:A8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k_jDyT4aR36LBWsHrFAuO8HbBqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3f:9d:a3:49:f2:aa:d0:2d:e1:d5:2c:76:6a:d7:08:b8:41:f8:
a6:15:46:b5:86:6c:0e:3f:c9:3c:1a:65:21:40:42:d0:59:30:
6f:db:cd:d2:12:f4:f6:bf:a8:91:a8:0c:44:78:bf:8a:a6:b4:
1d:26:84:b5:7c:fc:e4:21:22:25:8a:e0:de:49:af:cd:62:69:
f0:8c:c7:6c:a3:b9:ef:88:cd:e5:bd:47:de:79:fa:93:e2:21:
d1:f5:0b:e9:84:4d:5b:d8:7d:77:a6:c8:63:9b:cc:f4:7e:fa:
ea:66:c1:f8:30:49:ea:3e:26:1f:72:52:87:42:23:bf:50:a0:
98:6c:91:3a:bf:cb:98:b5:ab:60:76:e8:85:2b:e9:d0:cb:8b:
b2:b2:dd:c9:33:8e:a0:68:6c:d6:04:97:1b:eb:35:af:5c:6a:
a2:26:39:3e:76:1c:f6:02:01:ed:31:4e:c6:a7:b5:93:4c:91:
19:50:20:76:cb:0c:cb:da:76:13:10:d0:32:1e:bf:c9:b9:12:
91:f2:43:7c:c1:69:75:02:eb:b1:5c:2a:7f:98:03:e4:d4:61:
cd:0e:15:b1:46:e0:13:c3:1b:f3:1b:52:de:67:38:a5:6d:57:
9c:08:bf:81:82:61:22:26:26:04:27:e9:0c:30:93:9c:74:c9:
b6:a0:ce:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 02:21:14 2025 by rpki-client