Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/n31VOwVYrmg00jP6POP4uta6PPY.roa
File: n31VOwVYrmg00jP6POP4uta6PPY.roa (raw, json)
Hash identifier: UmIgbJFeSa5bSKuxHjl8ODU7WQ4jxC9/M/Sn1lu+oSk=
Subject key identifier: 9F:7D:55:3B:05:58:AE:68:34:D2:33:FA:3C:E3:F8:BA:D6:BA:3C:F6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018676445DB6982A1FEB31C1D124B5383D02
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/n31VOwVYrmg00jP6POP4uta6PPY.roa
Signing time: Tue 21 Feb 2023 23:17:17 +0000
ROA not before: Tue 21 Feb 2023 23:17:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:76:44:5d:b6:98:2a:1f:eb:31:c1:d1:24:b5:38:3d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 21 23:17:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f7d553b0558ae6834d233fa3ce3f8bad6ba3cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:0b:1e:3b:ac:d2:da:5f:75:f0:31:a4:2b:26:
07:ce:84:b9:6c:76:33:5b:c1:c3:af:3c:0a:0f:57:
5c:76:19:72:58:48:12:5a:7f:84:b5:2d:8c:45:0f:
10:0f:90:f1:69:aa:49:fa:30:09:b8:f6:72:f1:78:
b2:80:03:7b:a7:f0:67:ee:e8:21:ab:4c:b6:be:13:
12:55:a7:ce:0a:8c:de:3e:5f:f2:d8:f6:b5:f0:02:
62:ea:68:16:e9:f7:0e:32:ea:9d:c8:79:a7:a8:06:
f9:11:ea:31:99:71:a3:f7:14:d2:c9:0d:91:38:5f:
c9:f7:3b:df:35:38:96:73:e9:0d:4c:95:1b:c9:90:
b2:b9:2a:5f:f2:fb:10:90:e3:ed:10:5a:8d:08:83:
73:38:bf:a4:6b:91:05:67:b1:14:8d:b2:f2:15:9c:
56:6f:3f:b9:d9:f7:00:f6:90:06:89:3a:8a:fc:15:
19:b2:2d:78:4a:2f:8b:fe:99:8b:9c:dd:6b:54:7e:
19:8e:40:c7:76:9d:a2:d9:bf:37:f7:66:e5:e5:9d:
6e:70:5e:0b:6a:4b:68:87:2a:4c:57:a4:95:73:ab:
f9:fc:d0:86:6b:6c:a1:d5:8c:c3:2e:84:e2:c8:71:
bf:01:f1:5d:a2:76:8a:f9:68:77:bc:0c:dd:db:8a:
42:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:7D:55:3B:05:58:AE:68:34:D2:33:FA:3C:E3:F8:BA:D6:BA:3C:F6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/n31VOwVYrmg00jP6POP4uta6PPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1d:90:36:9c:5d:7a:19:00:00:10:c7:19:03:4e:e7:10:25:e6:
d7:72:04:c8:0a:12:30:68:ab:09:82:cf:64:1c:13:ae:ec:87:
70:c8:a4:32:82:ce:76:bb:9d:e8:90:d5:41:4b:82:13:2d:2d:
4d:82:5d:78:b1:63:f6:00:e5:d1:bd:73:06:65:99:c9:aa:8a:
34:a6:fe:e2:9d:f3:6a:7b:94:c5:0a:35:b9:0a:47:2c:94:11:
f9:96:27:31:36:d9:5e:ab:48:d2:bb:96:37:b6:74:41:ad:2f:
d8:7b:55:7e:53:47:b3:d9:5f:a0:56:f0:cf:3a:31:24:54:bb:
c2:e7:0c:b2:bf:cb:db:6d:6d:b4:68:6d:3d:94:d6:8c:c3:30:
e8:cb:a5:f1:26:63:a1:b3:b9:5a:9d:42:ba:82:6a:56:13:65:
90:8d:b4:55:25:cc:76:9a:c9:fe:bd:e2:a6:39:ab:0a:e0:a4:
95:9c:ec:68:69:3b:4d:c7:8a:12:3c:1c:38:b3:2b:85:27:e0:
ab:01:53:25:e9:64:38:cb:15:b5:c7:d3:2f:a8:24:a0:a0:e3:
73:82:38:0a:89:e7:de:62:73:01:3e:d3:32:7b:b3:79:be:c1:
32:7c:c5:1c:48:84:61:47:bc:db:ad:40:d0:5d:32:75:6f:48:
fe:a4:72:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 05:58:10 2025 by rpki-client