Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/p2Y_N9b6Sa9ZvvgfuvlT0Ip_ZrM.roa
File: p2Y_N9b6Sa9ZvvgfuvlT0Ip_ZrM.roa (raw, json)
Hash identifier: JLIy6/0Cj/hiV/tA5RxqjyV2s+0ppHYQs7MAKnZUluE=
Subject key identifier: A7:66:3F:37:D6:FA:49:AF:59:BE:F8:1F:BA:F9:53:D0:8A:7F:66:B3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018954C1264088B6EA110235308A229CA157
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/p2Y_N9b6Sa9ZvvgfuvlT0Ip_ZrM.roa
Signing time: Fri 14 Jul 2023 14:14:51 +0000
ROA not before: Fri 14 Jul 2023 14:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:54:c1:26:40:88:b6:ea:11:02:35:30:8a:22:9c:a1:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 14 14:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7663f37d6fa49af59bef81fbaf953d08a7f66b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:8e:87:27:b3:80:ea:9d:ba:d2:20:77:60:e7:
6a:55:3f:70:25:82:19:a7:01:fe:fe:c5:cd:46:b1:
ff:e7:7e:6c:a7:bc:c8:b2:9a:de:9f:cf:a3:fd:4a:
5b:4a:4f:86:da:8c:d7:b2:10:d6:95:78:55:ce:8b:
76:66:64:0d:3d:9e:20:cf:47:ad:1d:fe:61:c7:5f:
31:52:23:40:4c:e6:d8:dc:0a:39:10:76:8b:8f:65:
ee:4a:eb:a3:38:c4:f1:7b:98:42:3f:73:60:79:1b:
5b:de:66:ac:d2:d6:69:0f:92:60:6d:ba:d5:3a:48:
1b:89:bc:c6:b2:c3:ed:ff:e1:a4:a2:04:d9:9c:35:
8f:a7:7b:b2:bc:c8:f2:d3:d1:ae:4f:8e:b9:df:cd:
db:8d:55:7b:fe:5b:08:91:96:85:cb:f6:a9:d9:3f:
5c:18:2d:16:03:9e:9a:97:7e:14:ff:61:0a:24:69:
c3:ef:36:12:be:44:ab:7d:f2:f2:0e:d3:61:5b:2e:
df:61:08:e1:44:ee:0c:61:e1:7c:3d:da:98:ab:40:
5b:8f:d8:d5:5d:0c:94:8f:ed:6f:f8:be:1d:74:8d:
d3:87:1b:e8:88:c8:6e:4c:b2:3f:98:c1:b7:81:f1:
9a:af:f8:3d:a2:4e:93:e7:6b:73:f6:b7:f9:3f:d6:
05:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:66:3F:37:D6:FA:49:AF:59:BE:F8:1F:BA:F9:53:D0:8A:7F:66:B3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/p2Y_N9b6Sa9ZvvgfuvlT0Ip_ZrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2d:0d:89:1e:63:3c:d8:f5:18:9e:f5:91:c0:de:9b:1e:80:60:
c0:c9:21:9c:b1:dc:ee:ff:94:82:7a:f2:84:b6:a4:48:0b:93:
ee:35:77:f9:78:94:ff:81:6c:07:6f:4d:17:62:38:55:70:c3:
10:00:f0:5d:fc:98:07:73:56:ca:f0:6f:4b:b5:50:ca:cd:f6:
00:2a:49:70:aa:39:ce:10:d8:04:ef:9c:7c:fa:b3:d2:c1:1a:
47:25:3f:ef:7f:10:2d:e7:0b:21:05:b4:7e:e7:f0:ae:90:08:
e1:ba:08:3d:b2:e8:76:d5:9a:54:23:3e:27:bf:e8:96:07:77:
1b:0e:d8:74:a9:aa:4e:2b:cf:7b:d7:68:6f:04:ea:77:81:be:
6a:7b:f0:6a:cb:b7:2f:7a:56:91:ec:9a:a1:b7:23:04:da:5d:
e4:75:50:2f:f4:52:ea:b8:73:b6:3a:c5:b9:6d:07:d2:77:98:
60:b8:6b:f6:bf:a4:04:e8:53:3d:3c:cc:0d:47:37:91:18:88:
94:bd:5b:bb:b9:95:66:c1:cb:98:9d:4d:23:bc:08:55:f6:9c:
c5:7f:e8:ac:bd:e7:54:38:c7:bc:ab:e5:6a:56:bc:d3:e5:1e:
5c:20:d9:c1:ef:9f:1b:25:6e:35:e2:8b:9b:70:87:a6:e4:a8:
7f:01:08:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 00:23:25 2025 by rpki-client