Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/l-NszIKTIk1DheSNZxmxgF6Df5g.roa
File: l-NszIKTIk1DheSNZxmxgF6Df5g.roa (raw, json)
Hash identifier: R2wahHsBYz8TXj34sACTDH2IKPdIMvx6Rxa28d/gTx0=
Subject key identifier: 97:E3:6C:CC:82:93:22:4D:43:85:E4:8D:67:19:B1:80:5E:83:7F:98
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01880824CCED3BA3AE09D2B76E65E8B94F42
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/l-NszIKTIk1DheSNZxmxgF6Df5g.roa
Signing time: Thu 11 May 2023 00:10:09 +0000
ROA not before: Thu 11 May 2023 00:10:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:08:24:cc:ed:3b:a3:ae:09:d2:b7:6e:65:e8:b9:4f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 11 00:10:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97e36ccc8293224d4385e48d6719b1805e837f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0f:ee:ce:79:53:99:89:38:51:c2:51:10:c8:
45:eb:46:74:e4:1f:ae:38:30:8f:6f:ca:22:0a:60:
38:65:00:4a:b5:f5:56:5c:a6:f8:b9:f9:2d:e0:0f:
f2:44:3c:6a:f3:13:c9:df:7d:1d:99:99:72:7e:d4:
08:f2:a5:9b:f2:60:48:0e:94:f7:f2:c1:e9:a7:9a:
f0:d3:04:5d:d5:43:01:3d:cf:97:4c:27:82:0f:65:
61:0d:59:05:b7:f5:18:90:2e:3f:70:98:4f:db:18:
08:ab:ff:66:ff:b9:35:f3:b9:aa:d0:cf:4b:10:c4:
12:3c:6f:e4:6f:36:4c:f6:34:a0:4d:24:17:ef:eb:
92:39:ef:ca:df:54:8e:e9:cd:69:4c:92:92:f7:94:
c4:bf:1e:de:58:54:ae:0a:79:a5:7d:8c:89:cc:6c:
5b:dc:df:6b:48:e5:cb:47:14:90:5d:27:34:d6:77:
89:11:5d:3b:0d:cf:4c:93:85:81:5b:96:34:f0:ff:
ff:3e:bb:29:93:27:5c:1b:76:68:23:00:7a:5f:24:
ac:04:98:9c:ea:6e:1b:00:32:ae:58:24:d0:a5:1d:
23:60:f3:6b:7b:6c:f3:6f:72:e6:57:43:7d:64:b8:
1e:7e:37:46:6f:b4:63:0d:70:8e:3c:93:f6:ce:11:
b9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E3:6C:CC:82:93:22:4D:43:85:E4:8D:67:19:B1:80:5E:83:7F:98
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/l-NszIKTIk1DheSNZxmxgF6Df5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5e:7c:21:80:33:b5:5b:99:9d:a0:10:76:ae:e8:43:eb:22:a9:
08:f5:ea:33:84:a0:08:ca:74:30:ca:c6:87:38:69:4c:93:6e:
30:6c:37:aa:68:01:3b:8b:7b:4e:3c:35:26:ae:c7:ef:c5:85:
d1:16:43:d2:08:58:1e:9a:57:33:40:80:10:77:4e:49:0f:ad:
52:79:b7:ed:24:1e:69:aa:ce:d0:78:f7:3e:3e:29:ba:7c:0c:
f4:da:b8:23:b4:2f:e0:b8:4f:32:c4:9d:c8:b5:fa:6e:7d:38:
18:1e:ac:f8:39:9d:1a:cd:92:9b:d7:ec:0e:02:1f:7b:3c:e5:
15:8c:fc:cc:62:5b:b1:f8:0a:22:89:c3:91:37:52:70:95:e0:
10:28:99:bf:3a:ab:1e:20:84:69:25:77:86:ab:d4:0e:60:32:
65:71:71:78:4e:ba:b9:94:d4:a2:cb:16:14:63:0f:31:3c:fc:
4d:01:45:93:55:2c:3e:39:30:ec:0e:e9:2b:87:c5:46:26:8c:
3e:2d:ca:31:2d:33:74:70:2c:bc:b2:60:e4:a6:64:e6:ad:28:
b9:37:81:0b:fd:44:eb:68:40:20:e1:03:af:5d:08:25:e6:aa:
17:11:71:67:51:91:08:a1:6d:e4:2b:1c:0a:b5:90:5a:01:c7:
a2:7f:e3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:24:46 2025 by rpki-client