Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/l1mCC5DuISrThokAun8mxKGFjcM.roa
File: l1mCC5DuISrThokAun8mxKGFjcM.roa (raw, json)
Hash identifier: FY6g/y8jkMUsUICd0oWWBcX43nzHlKvvzaJCUJZc/Cc=
Subject key identifier: 97:59:82:0B:90:EE:21:2A:D3:86:89:00:BA:7F:26:C4:A1:85:8D:C3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186EB30C65CC61BBAFB275E1CAF06DD24F2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/l1mCC5DuISrThokAun8mxKGFjcM.roa
Signing time: Thu 16 Mar 2023 16:11:27 +0000
ROA not before: Thu 16 Mar 2023 16:11:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:eb:30:c6:5c:c6:1b:ba:fb:27:5e:1c:af:06:dd:24:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 16 16:11:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9759820b90ee212ad3868900ba7f26c4a1858dc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:45:89:02:88:ec:7a:1e:df:6f:9c:e5:83:fb:
40:80:c9:92:91:1d:54:eb:a4:1b:83:2f:4e:09:e2:
28:a9:41:04:5b:54:1e:c0:3b:b4:ec:19:71:b5:32:
c0:ce:6c:0a:74:14:93:21:c0:e0:75:72:89:a3:7c:
6a:9e:95:1f:0f:24:a1:ad:cd:ee:1c:20:45:6c:22:
cb:7e:0f:e9:f0:01:20:b6:19:07:ba:d9:95:01:2f:
ac:b5:44:d1:2d:a5:17:6b:92:c8:18:9f:75:b2:22:
4c:25:2e:bf:f9:ff:0b:0a:c4:ed:93:88:3e:1b:19:
d8:bc:ef:b7:ed:7b:79:d1:20:fa:f9:9c:8e:c3:c5:
d0:9f:cb:35:d3:48:7d:4b:b6:b8:af:c9:3f:51:a7:
a8:81:46:38:c1:20:b1:30:94:37:9b:9e:67:80:ba:
67:64:7a:56:cc:e6:ad:68:6c:38:cd:3e:13:3c:40:
73:8b:b8:40:4d:2c:4c:00:a7:75:1f:63:b1:c6:42:
40:4e:99:fa:57:69:c1:35:26:d8:27:86:b5:d9:79:
f2:93:2f:37:25:3c:99:06:d2:cb:ee:db:70:45:64:
68:03:49:1f:b8:24:f1:d3:a9:f4:28:57:3c:3d:88:
df:03:20:42:bf:92:6e:8b:06:08:3a:5d:05:44:8b:
49:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:59:82:0B:90:EE:21:2A:D3:86:89:00:BA:7F:26:C4:A1:85:8D:C3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/l1mCC5DuISrThokAun8mxKGFjcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
70:15:eb:38:b3:27:24:ea:05:18:9e:64:ff:58:f4:e4:3f:a1:
32:6a:ab:56:50:4f:05:76:ee:c2:2c:ac:fb:2f:27:09:c1:9b:
6f:e6:09:cd:17:6b:80:95:c5:f9:7b:5b:d0:cf:a1:c4:55:dc:
4b:be:28:b5:42:0e:14:14:53:5b:d7:74:86:21:35:8b:e7:67:
82:a7:c1:b2:96:02:bc:66:c1:13:3f:c8:0e:8b:38:f8:af:f9:
72:c6:e2:67:d3:88:2f:a4:0a:b8:13:80:11:1a:83:e7:d0:2e:
48:e7:8e:56:e9:a6:c6:67:15:86:49:cb:fa:93:73:c4:ff:28:
cd:3a:a1:68:1d:f9:4c:24:ad:8a:ee:85:04:71:38:c1:ef:a0:
ff:dc:bc:ef:65:4a:93:db:3b:57:25:29:33:a4:78:01:ef:68:
de:d0:33:45:69:2f:41:86:17:bc:d8:63:96:cc:dd:fe:36:76:
71:6b:c1:28:e6:ab:fb:ce:b9:f1:44:9b:e8:60:00:d0:ae:a8:
b5:53:6c:48:0c:c4:98:9b:c4:a1:3d:a4:19:db:43:0e:6d:bf:
e6:6a:8d:d9:05:31:da:c0:93:de:1e:d9:7d:6d:f4:b0:0c:07:
b3:cd:5b:46:a8:2b:45:e4:64:75:f8:55:44:e5:9f:28:96:02:
07:e3:a5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:52:53 2025 by rpki-client