Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ok7k9ShNNwO2g4JgDFY6vSx3Oo0.roa
File: ok7k9ShNNwO2g4JgDFY6vSx3Oo0.roa (raw, json)
Hash identifier: Cx5Lq+NYO/mRI0IuqRRt2qfgIo8hhtUVGO9hYC7ztfQ=
Subject key identifier: A2:4E:E4:F5:28:4D:37:03:B6:83:82:60:0C:56:3A:BD:2C:77:3A:8D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189A56D81E0241D0071642A517593EC158B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ok7k9ShNNwO2g4JgDFY6vSx3Oo0.roa
Signing time: Sun 30 Jul 2023 06:12:44 +0000
ROA not before: Sun 30 Jul 2023 06:12:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:a5:6d:81:e0:24:1d:00:71:64:2a:51:75:93:ec:15:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 30 06:12:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a24ee4f5284d3703b68382600c563abd2c773a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bc:22:d3:5c:8a:72:75:17:83:b1:5f:a5:af:
15:9f:1e:65:7b:7d:97:46:fd:09:bb:e8:74:f9:f5:
19:7e:38:01:b5:42:98:f4:8b:f8:dc:63:42:12:b2:
04:75:9b:6f:4b:53:a6:62:14:67:ec:9e:25:3a:69:
70:52:da:67:2e:e3:5c:e7:7d:82:2d:6d:f6:60:53:
73:d0:04:07:56:e5:bd:41:2c:db:97:51:e5:40:c7:
97:31:5d:66:4d:48:0f:49:8e:86:3b:5a:e9:8a:3a:
10:37:f7:cc:2f:28:e5:ab:5a:97:bc:7e:d6:94:34:
5c:34:20:52:d2:5f:fb:e2:27:e9:1a:be:0f:ec:a6:
6b:20:5e:81:42:c7:10:24:a1:e4:3f:59:6d:01:a1:
8a:e0:0e:cd:40:c9:aa:7f:b7:8f:db:a6:d2:5f:72:
88:e4:86:29:8d:c6:38:4c:3c:d6:a1:58:d7:30:7f:
70:5b:b8:b8:5a:5d:25:2c:e9:ba:98:70:e8:ec:a6:
f2:44:23:50:4e:71:f6:83:ec:0e:e8:6e:94:2c:d1:
84:3e:80:14:05:a9:30:fd:fb:db:79:66:98:ae:3a:
33:b4:6e:1d:1d:10:3f:10:c8:c0:13:74:e6:d3:d0:
db:60:28:84:b0:17:cf:af:18:88:3c:10:23:30:8e:
54:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:4E:E4:F5:28:4D:37:03:B6:83:82:60:0C:56:3A:BD:2C:77:3A:8D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ok7k9ShNNwO2g4JgDFY6vSx3Oo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
55:9a:66:3d:6f:ac:74:ca:9c:b5:f6:7b:97:06:52:8b:cf:05:
36:37:ce:ce:54:f2:3a:94:e3:8b:7e:0c:45:60:b1:66:82:9b:
c1:34:a8:fd:47:c7:c1:80:68:0e:2d:26:9f:bf:39:a7:4f:63:
a5:53:bf:c2:07:1a:0d:04:5b:0a:ea:4c:e0:10:bd:01:91:30:
84:05:a6:53:ba:a1:d6:c3:37:0e:fc:96:d6:db:23:26:f0:c2:
95:34:f8:d4:4d:e3:70:28:82:5b:fd:3e:1e:55:45:b6:9c:23:
ae:57:60:e8:bf:11:4a:8c:67:31:90:83:af:cd:c4:b3:75:8d:
bf:b3:4c:9c:a4:b1:cc:64:b1:2a:d5:53:7f:dc:47:23:7f:22:
be:b7:e5:78:2e:09:1a:bc:56:79:19:16:85:d6:d2:25:f7:ff:
21:86:4a:be:f0:72:d4:e4:af:14:3f:f3:34:54:ce:f8:e7:d1:
90:86:a6:85:0a:0e:15:63:be:26:f8:c2:3c:43:07:8b:4b:21:
e3:f3:79:54:4b:57:57:12:f6:15:af:d5:49:6a:cd:79:6e:c7:
88:a1:ff:ef:31:99:9e:72:bc:e1:50:86:8b:9d:20:ee:fd:ff:
5a:5c:3a:4e:c4:c8:ab:3b:81:b1:29:e0:9c:a4:f8:49:61:39:
16:c6:43:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:25:18 2025 by rpki-client