Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/r5cT4czuysl4LuZDoj0hG6jgcuQ.roa
File: r5cT4czuysl4LuZDoj0hG6jgcuQ.roa (raw, json)
Hash identifier: gJvtDrGcBHMC/ir+Af2vgrWOwk1bn0flqIqATdMHUL0=
Subject key identifier: AF:97:13:E1:CC:EE:CA:C9:78:2E:E6:43:A2:3D:21:1B:A8:E0:72:E4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A186FA7A2DF051A2D71BA2ADB5C5073D3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/r5cT4czuysl4LuZDoj0hG6jgcuQ.roa
Signing time: Mon 21 Aug 2023 14:11:25 +0000
ROA not before: Mon 21 Aug 2023 14:11:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:178d:7ed9/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:18:6f:a7:a2:df:05:1a:2d:71:ba:2a:db:5c:50:73:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 21 14:11:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af9713e1cceecac9782ee643a23d211ba8e072e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2d:97:a4:a8:99:46:af:09:57:73:da:ad:0f:
7a:06:26:94:09:3d:7a:97:d7:23:e4:40:9d:8f:04:
87:47:13:ff:f4:88:b3:da:29:55:a2:8c:98:44:ff:
3a:8b:2c:cc:3e:57:21:06:70:c3:11:a5:f2:01:56:
3d:0f:66:d1:58:39:14:a5:7e:78:90:b5:cf:1e:b3:
5e:5b:69:5e:45:5c:a3:9a:6a:9f:10:f0:73:b3:0c:
81:b2:fc:1b:6d:a8:67:d9:49:6d:0a:01:f3:61:28:
e8:e3:70:d8:b9:7e:14:dd:2d:32:53:72:26:09:b7:
19:97:17:85:87:aa:05:a7:35:f8:0d:22:b1:15:32:
bc:46:82:6a:b1:9d:bd:b4:9a:32:29:67:51:cf:84:
55:d9:59:a2:f3:80:cb:61:b1:00:ce:29:61:9f:4a:
72:14:03:6f:d7:61:96:3a:07:b4:1b:2a:e4:2b:0a:
94:e6:98:f0:c7:df:b8:67:cb:82:5c:7b:b1:4d:00:
98:a7:f5:9d:3f:69:d6:d0:6a:6d:59:70:7f:fa:0f:
4a:e8:f4:4e:83:7a:6a:01:19:bc:16:e2:9b:ad:ea:
ec:76:25:99:0d:9b:44:b2:ea:80:9a:b6:e1:1b:06:
9d:c7:a6:c3:23:ac:2d:8a:97:58:45:b7:fb:d0:a4:
65:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:97:13:E1:CC:EE:CA:C9:78:2E:E6:43:A2:3D:21:1B:A8:E0:72:E4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/r5cT4czuysl4LuZDoj0hG6jgcuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
97:e0:54:67:80:ac:87:9e:ac:75:55:2a:09:57:11:c8:a4:b3:
86:b6:c8:c9:51:cc:f0:66:64:22:55:db:61:c9:ab:8c:e8:20:
8a:0d:62:e3:02:ba:bb:b5:d4:4a:86:f9:d6:48:00:e5:f3:5c:
72:ab:9f:33:12:44:88:b1:2d:6b:fe:82:e4:aa:36:de:af:80:
1c:a2:66:07:05:e9:df:22:c6:10:3d:d1:82:a9:e6:65:2c:91:
f9:94:7b:ed:8d:1b:80:d5:77:fa:fb:32:3d:8e:a7:c0:df:3f:
3b:e7:81:a1:63:db:d6:86:e9:3e:61:41:63:8d:4c:b4:2a:8d:
4e:5a:3c:46:c7:33:15:6b:3e:56:ea:f2:0f:3b:fc:0e:d9:2e:
f4:36:6b:fb:cb:d2:5a:80:1e:6d:aa:57:f0:bb:ff:1c:d8:db:
55:ad:c1:62:5d:87:f0:8c:ca:7d:9f:56:e0:ff:fe:94:0a:82:
b1:70:65:b5:b8:39:e6:19:cc:2f:9a:08:a9:57:c5:db:08:ed:
fb:e8:df:f3:4c:cf:6c:c7:5d:10:50:b4:46:91:38:57:ca:b1:
c6:d1:b6:4a:39:2c:21:a5:76:cf:d0:af:be:e8:16:49:9d:81:
9c:95:3d:a3:20:7f:83:c5:b6:78:87:f4:96:ed:fb:1f:a5:06:
88:63:d8:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 17:08:48 2025 by rpki-client