Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/m0AvPrdylmJ-iPDc0aDSF-8GRRY.roa
File: m0AvPrdylmJ-iPDc0aDSF-8GRRY.roa (raw, json)
Hash identifier: 1q46JiFArq2noASqC2RWFGFRJr8Wm8X3QO5RwOIRU9I=
Subject key identifier: 9B:40:2F:3E:B7:72:96:62:7E:88:F0:DC:D1:A0:D2:17:EF:06:45:16
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A379B43799F30BFFCAB8FADA3E7913A88
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/m0AvPrdylmJ-iPDc0aDSF-8GRRY.roa
Signing time: Sun 27 Aug 2023 15:27:16 +0000
ROA not before: Sun 27 Aug 2023 15:27:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:37:9b:43:79:9f:30:bf:fc:ab:8f:ad:a3:e7:91:3a:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 27 15:27:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b402f3eb77296627e88f0dcd1a0d217ef064516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:74:19:55:97:a0:6f:ec:b9:8d:ac:34:c8:16:
ba:98:63:0d:64:6c:8a:9a:2f:cb:c8:3b:b6:72:f8:
1f:5d:42:c2:fd:a7:6b:ee:19:ce:ce:aa:7f:33:4b:
d3:ff:14:cd:b6:3b:55:c6:d2:81:f8:57:3c:c4:a5:
fd:9e:c8:8e:53:0f:5a:89:bf:17:a1:cd:10:08:6e:
2b:2a:dc:a9:7d:ff:d5:e4:29:8a:7a:d0:6d:80:41:
ea:a2:8d:a7:48:63:9f:87:ff:af:81:86:54:1d:e5:
d3:b8:87:45:9b:e2:c0:d3:4c:7a:ba:10:8f:ee:15:
04:5e:d8:65:fe:53:35:4a:f9:0f:09:6c:68:42:86:
9b:bb:16:60:27:b8:30:0b:71:cb:98:e6:3b:7f:1d:
d8:bc:05:47:82:70:1a:50:03:f8:36:b4:99:d7:eb:
7c:8b:44:cc:33:b9:d7:0e:d1:b4:57:13:18:51:64:
83:c5:94:cf:d1:de:b2:ee:97:df:20:7b:0c:11:e8:
9a:db:36:4e:b0:b3:e9:69:73:9f:17:4b:50:d6:d9:
71:d4:35:e4:71:6a:71:9d:83:29:46:7a:17:9c:df:
e6:80:51:0b:14:a8:c1:96:6d:a2:b4:da:4b:60:3e:
5e:9a:ad:c7:d2:c4:1d:74:46:27:cd:6a:9c:23:b6:
aa:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:40:2F:3E:B7:72:96:62:7E:88:F0:DC:D1:A0:D2:17:EF:06:45:16
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/m0AvPrdylmJ-iPDc0aDSF-8GRRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
61:21:5b:af:32:6c:29:08:12:16:53:69:0e:3a:4b:9a:88:38:
5e:f5:7e:e5:3d:9f:c8:00:64:eb:d9:4e:e6:28:57:30:b3:44:
b0:ca:2c:36:12:da:85:3b:b8:60:0a:8e:62:56:71:8f:13:cb:
9f:9a:72:d4:3b:46:f9:8b:4f:dc:a1:96:a6:7a:b2:d0:39:44:
50:8f:9e:dc:8c:d2:fa:05:4d:fd:26:cb:de:c2:1a:e1:79:2e:
22:05:fe:dc:3f:94:e4:bb:72:05:57:78:a2:3f:22:35:60:db:
79:4d:31:96:2b:77:c5:4b:1b:21:cd:5e:85:ab:3c:73:03:b4:
19:38:91:0d:ee:1b:94:4d:33:cc:ec:39:f4:a3:f5:15:43:26:
c7:b2:e7:e3:19:c3:39:19:95:29:8f:66:c4:b6:03:64:a5:dc:
5c:9f:72:36:bd:3f:e1:c1:54:19:3f:96:b7:ad:c8:b0:6a:ba:
17:c2:4d:22:ca:d7:07:5e:5e:65:a0:b7:10:4c:d6:6f:8d:30:
ba:19:6c:ba:bb:db:4e:1f:ff:f2:99:f9:24:8c:c7:24:6e:26:
ec:5b:32:96:67:68:15:dc:79:0a:ed:93:48:58:5a:9c:03:63:
d9:46:d7:71:b7:28:5f:9d:61:d9:f0:d3:63:b9:9c:ee:6a:30:
a7:19:4e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:07:29 2025 by rpki-client