Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pSK4aQ8Xu7n9i9yyRBKCbw5cjBQ.roa
File: pSK4aQ8Xu7n9i9yyRBKCbw5cjBQ.roa (raw, json)
Hash identifier: z23rwDbmtNn+x97oThuYmQrtka0o+cIPbjSvkkUkPvA=
Subject key identifier: A5:22:B8:69:0F:17:BB:B9:FD:8B:DC:B2:44:12:82:6F:0E:5C:8C:14
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01867526B9DA146455EFAED5653ADB81588F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pSK4aQ8Xu7n9i9yyRBKCbw5cjBQ.roa
Signing time: Tue 21 Feb 2023 18:05:17 +0000
ROA not before: Tue 21 Feb 2023 18:05:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:7525:dfb4/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:75:26:b9:da:14:64:55:ef:ae:d5:65:3a:db:81:58:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 21 18:05:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a522b8690f17bbb9fd8bdcb24412826f0e5c8c14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e5:03:e2:70:a5:01:c6:74:c2:f2:c2:54:17:
40:5c:9f:38:8b:11:6a:87:0b:df:62:0a:c4:51:98:
79:97:51:8b:49:5b:4c:37:6c:ff:54:ad:0e:dd:a9:
80:3f:68:09:d6:09:bf:71:e0:e8:01:59:0a:1d:f6:
2b:e1:78:55:93:32:66:3e:9a:f0:9e:a3:41:f3:7d:
f8:b1:61:0b:69:34:6c:2e:34:e8:5c:c7:e4:87:08:
06:95:1d:aa:2c:8d:46:2d:88:7b:41:b3:b3:5f:40:
9d:a1:c0:77:62:bd:0e:72:0a:36:49:00:18:8f:c1:
c3:a0:91:ee:4e:ab:e3:20:1f:ad:5c:a9:4e:a8:10:
f6:ac:18:f6:d8:7d:1c:b3:8a:02:96:90:db:7d:f4:
c6:5f:7e:2f:a0:bc:1a:8c:3b:fe:85:2d:76:fc:e2:
3b:39:46:96:6b:67:e5:f6:8a:7c:26:4c:6f:e4:5a:
0e:2b:f3:1d:5e:41:a8:25:68:f3:18:e1:b5:83:03:
c8:e2:be:7f:b0:79:46:e3:da:79:2d:3e:c8:f7:ff:
64:21:3a:57:78:86:1e:8d:08:8b:a2:3e:f5:86:b9:
ff:b5:dc:8c:8a:01:ef:4e:c5:ad:6a:b6:b1:66:56:
f6:f9:b2:6e:d2:28:4e:9c:9c:42:9a:81:27:bc:9c:
83:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:22:B8:69:0F:17:BB:B9:FD:8B:DC:B2:44:12:82:6F:0E:5C:8C:14
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pSK4aQ8Xu7n9i9yyRBKCbw5cjBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
62:f1:ae:81:73:aa:30:a5:d7:44:69:7e:f0:88:8b:81:f2:43:
72:13:81:1f:8f:37:d8:9f:4b:93:2e:66:3c:a5:37:87:67:2d:
2d:3b:71:9b:96:d6:56:39:46:7b:e6:93:ae:8d:9e:d0:ab:9f:
39:82:d3:55:ac:dc:8a:84:e4:a0:0d:93:45:c7:7f:ce:65:88:
80:3b:ba:d0:1e:fe:0a:2a:44:18:21:51:b9:c4:3f:26:5a:21:
87:5a:d8:20:ee:9e:fe:ab:fe:cb:3e:bc:a9:f7:6b:7a:ce:f7:
f8:94:10:3f:2a:c3:ef:b9:dc:cc:81:55:6b:a8:89:e0:ba:35:
f6:c9:06:7e:30:56:f4:69:c1:d3:31:5e:05:c8:c6:6d:b0:f9:
c4:25:3c:cf:fa:fd:86:5c:c4:91:fc:fd:73:17:c5:88:3c:6d:
a5:a8:e3:a9:cc:cd:2e:05:d8:7b:2b:76:1e:21:ba:bb:a5:dd:
0c:51:0e:a1:4e:00:cc:6e:9e:14:ac:9b:84:9c:3b:b4:64:35:
2a:90:df:d2:0b:47:55:bb:fd:9a:3d:8f:0d:05:01:76:0a:57:
8a:48:3b:27:49:36:f0:dd:1f:57:ea:e9:12:5d:bd:fb:24:6c:
9e:95:b9:41:9e:6c:1d:0d:d9:7e:32:95:3a:bf:c5:5d:9e:83:
47:67:be:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 00:15:00 2025 by rpki-client