Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lr3aCjt3wrQHDTF5r1kPQGIO2cE.roa
File: lr3aCjt3wrQHDTF5r1kPQGIO2cE.roa (raw, json)
Hash identifier: cMHcRgIq9refAt3pQcpNoltsXLV8GFJx43YhbtxkxcQ=
Subject key identifier: 96:BD:DA:0A:3B:77:C2:B4:07:0D:31:79:AF:59:0F:40:62:0E:D9:C1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018800DA0AF891741B9A459FD0EB36982E40
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lr3aCjt3wrQHDTF5r1kPQGIO2cE.roa
Signing time: Tue 09 May 2023 14:11:09 +0000
ROA not before: Tue 09 May 2023 14:11:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:00:da:0a:f8:91:74:1b:9a:45:9f:d0:eb:36:98:2e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 9 14:11:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=96bdda0a3b77c2b4070d3179af590f40620ed9c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:7d:8e:e2:46:ef:69:00:d9:ad:7e:47:d3:df:
0a:13:a6:b2:9c:9a:fd:d6:1e:62:8f:c8:60:26:9a:
ff:6d:43:a7:0e:68:c2:9e:97:f8:18:85:4e:60:bd:
78:1f:96:56:6a:69:b0:73:b4:f0:55:fe:ad:08:9c:
d9:37:15:cd:28:fe:b9:2e:df:34:b9:d8:ae:7a:59:
4b:cc:58:7f:47:3a:fd:76:d4:95:32:fb:c8:88:ba:
72:3f:77:0e:8b:10:a9:89:c0:e5:29:79:90:a3:26:
2a:11:a5:95:ae:cf:95:c5:26:89:b3:7d:a0:ba:9f:
bf:8c:c2:25:65:cc:4a:ed:1b:29:ee:a0:a8:bb:58:
58:61:5a:0e:8c:5a:a3:b8:1b:35:f9:89:ad:37:7e:
f7:68:6b:fb:4c:75:f4:3a:56:d4:90:77:f2:a7:33:
13:fe:e9:b1:2e:ce:8f:51:dd:7b:09:8e:92:98:de:
ab:5d:37:8f:f1:99:07:e5:a8:34:89:3b:d9:d3:78:
f5:0a:f6:fb:30:26:05:c6:5d:40:61:9b:4b:77:3a:
9d:19:c8:6e:5e:18:11:af:73:9e:5e:cc:8a:91:1b:
f1:df:24:7e:b1:54:c7:c3:b7:c9:7d:79:1e:f7:fc:
e4:49:50:bc:73:26:9e:ec:a1:88:31:ad:71:62:ff:
e0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:BD:DA:0A:3B:77:C2:B4:07:0D:31:79:AF:59:0F:40:62:0E:D9:C1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lr3aCjt3wrQHDTF5r1kPQGIO2cE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
26:5d:1e:11:85:ad:63:3f:e7:89:c2:18:01:3e:01:40:44:6f:
60:e1:b9:97:13:0d:47:e4:b6:99:c6:2e:ee:cd:57:9e:83:15:
e0:90:40:57:bc:d6:19:5d:93:b8:55:2f:0d:f6:d6:a0:8c:9e:
10:16:e2:e4:59:d8:bd:7e:d7:05:f3:a1:b4:8a:6d:d6:0e:2c:
52:f7:c5:06:a2:2b:c5:3b:ab:ba:42:f1:75:15:06:86:75:cf:
00:b5:97:a1:eb:c5:fe:31:88:a1:f6:8a:35:9d:32:82:69:ea:
90:24:4f:f6:36:42:ff:36:65:15:dc:f7:29:2c:dd:b0:43:2e:
9f:68:e2:6d:85:6a:c2:82:6c:0f:46:13:31:be:13:1d:02:47:
8d:f2:70:d3:22:b9:96:e2:e7:d1:34:76:f4:da:9d:3f:9f:ea:
5b:a2:5e:72:b8:c5:42:87:cb:d5:f5:9b:55:e0:09:5b:aa:19:
e2:f9:7b:09:5f:df:ef:91:e2:37:f0:83:0f:26:00:5f:d9:88:
04:ec:3d:30:d5:cd:46:24:0f:9a:e8:fa:bd:7f:d1:37:df:6d:
17:0d:68:fa:cf:e5:02:2b:bf:4f:40:83:30:8c:26:a0:18:66:
69:e3:4f:b4:b8:68:73:3b:44:cb:b6:4c:3c:15:ca:ae:0c:55:
20:48:06:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:46:44 2025 by rpki-client