Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/r5L0nRcogcaKcnNSMEpRyEEK5t4.roa
File: r5L0nRcogcaKcnNSMEpRyEEK5t4.roa (raw, json)
Hash identifier: 7pGHZdKiAj0H3CwOh/+9cKj2InVkM/hM7AuQeP4kmtg=
Subject key identifier: AF:92:F4:9D:17:28:81:C6:8A:72:73:52:30:4A:51:C8:41:0A:E6:DE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01881CF7EB94301350D41B7A73D07D013291
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/r5L0nRcogcaKcnNSMEpRyEEK5t4.roa
Signing time: Mon 15 May 2023 01:13:09 +0000
ROA not before: Mon 15 May 2023 01:13:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1c:f7:eb:94:30:13:50:d4:1b:7a:73:d0:7d:01:32:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 15 01:13:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af92f49d172881c68a727352304a51c8410ae6de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9b:ac:1d:7b:e9:2e:51:56:cb:8a:98:b5:0e:
b6:ee:54:2c:56:3e:8b:26:45:f8:9a:8d:63:9e:dc:
57:0e:05:4b:78:ac:79:dd:35:0e:78:72:e6:21:a8:
da:e7:7f:5d:e3:de:a7:8b:d5:24:05:86:95:8a:06:
b9:64:fd:ba:b7:da:0c:c5:53:1c:01:9f:d3:fe:2c:
a2:61:64:c0:61:b1:24:f8:49:84:36:88:6e:d2:5b:
3c:48:54:8e:94:72:e2:46:01:aa:76:05:a8:13:a6:
01:65:95:13:5b:a9:f7:37:a0:52:fd:be:33:24:98:
a0:28:50:a4:8a:1d:65:09:df:ee:4c:54:2a:ea:7d:
08:92:b6:3f:fb:ed:40:80:b2:50:78:e3:66:88:d0:
7b:20:8c:8e:07:67:ea:25:33:f3:9d:7b:84:77:0f:
2f:42:c2:53:0b:61:c7:84:e6:c7:5d:56:32:3b:cf:
36:02:09:8f:ec:21:b9:ff:54:ca:2a:d6:f0:2d:17:
81:e1:0a:e1:1a:3c:71:b1:de:96:b8:68:d4:d7:0e:
d9:dc:2f:05:05:6b:99:50:70:16:f6:11:d4:85:c6:
23:43:06:5b:3d:1a:8e:29:36:c9:83:1d:50:e2:05:
47:ae:85:46:3e:a1:cc:cb:4a:46:50:44:f6:e1:da:
6a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:92:F4:9D:17:28:81:C6:8A:72:73:52:30:4A:51:C8:41:0A:E6:DE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/r5L0nRcogcaKcnNSMEpRyEEK5t4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6d:7e:df:d2:89:fa:58:ee:14:76:86:95:2e:6d:c7:21:ec:06:
91:85:cd:be:5c:3b:70:53:c8:b6:b7:85:f1:4c:9d:37:81:47:
a1:5d:cc:8c:c0:5e:53:32:c0:6b:e2:e4:6d:1e:f4:bb:b8:dd:
58:74:3d:4e:66:10:ac:55:de:a8:81:39:07:a3:44:6b:e1:81:
13:ce:91:a2:04:50:26:00:5b:ba:36:5f:ce:4e:42:36:21:c9:
08:01:48:d5:9a:38:f0:da:58:e7:61:a2:1a:df:a0:e5:21:f1:
3a:8e:6c:8d:88:44:b8:28:a3:96:f9:53:9d:25:df:74:de:fa:
e9:1a:97:ee:fd:6e:6a:ba:44:9c:27:bf:74:dc:8f:0b:d2:bc:
bb:4a:fa:3b:da:31:b9:be:5a:68:d6:25:06:b7:78:32:88:b9:
c2:9b:3a:cc:87:eb:ac:9d:3d:7a:a5:8b:63:e1:b8:15:cd:0c:
d5:c8:9a:5a:9d:60:b2:50:c0:96:7c:0b:f4:c1:60:0d:57:ca:
38:c3:98:d0:b0:33:52:1f:0e:ba:1a:bf:87:b1:94:fd:e2:aa:
8f:fd:02:1b:8b:f6:58:88:59:4a:51:a6:83:fa:46:12:68:76:
72:e4:c4:9a:7d:99:e3:0c:4c:93:71:4a:35:a0:32:dd:37:de:
af:39:3c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:51:39 2025 by rpki-client