Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/r87RcylCHnVqNWJvBHoSksto-Y0.roa
File: r87RcylCHnVqNWJvBHoSksto-Y0.roa (raw, json)
Hash identifier: vMWp2+H8Pz9ik3s5X+cVcFYcW3pux2+aBqgcwKMwWn8=
Subject key identifier: AF:CE:D1:73:29:42:1E:75:6A:35:62:6F:04:7A:12:92:CB:68:F9:8D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01866D3D93B77489FEAF2F1BB80A09186706
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/r87RcylCHnVqNWJvBHoSksto-Y0.roa
Signing time: Mon 20 Feb 2023 05:13:17 +0000
ROA not before: Mon 20 Feb 2023 05:13:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6d:3d:93:b7:74:89:fe:af:2f:1b:b8:0a:09:18:67:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 20 05:13:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=afced17329421e756a35626f047a1292cb68f98d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:99:ae:26:54:4a:0b:07:c6:1d:2d:5e:47:18:
4a:bb:28:ca:93:e4:cc:2a:28:4d:90:e5:03:b7:1e:
60:54:94:7f:f1:82:d5:83:45:34:42:ba:d2:c9:0f:
2c:37:84:57:ad:ce:20:09:fd:39:33:a6:da:a8:1c:
08:5d:f2:4c:32:79:29:fc:81:03:09:95:ef:d3:bb:
c0:ec:2c:7e:06:a7:b2:be:47:8d:a8:db:2c:22:2b:
fc:b1:ce:d5:65:91:62:6d:f0:e4:b0:ef:97:16:25:
4a:f7:6c:d7:ad:43:9f:a9:f5:32:e5:f5:6f:14:4b:
9f:08:13:bb:cc:72:a1:af:65:7f:31:28:d2:ad:d7:
09:a2:b8:64:a2:de:13:d6:bb:a3:43:05:10:60:b7:
90:67:0f:dc:7f:24:fb:4b:c2:52:5d:f9:c1:2b:03:
54:50:fa:e8:39:1e:b5:14:5f:cc:1f:9c:17:13:f2:
10:29:41:6b:85:10:7d:5c:41:59:fe:0d:b2:af:96:
80:d1:b5:5c:57:76:4a:4a:16:a0:d0:07:c7:a0:da:
76:6b:92:90:da:4a:bb:fd:17:9c:d2:a0:52:c7:f9:
8a:6c:ea:cc:45:da:be:31:72:75:44:1a:b5:95:b3:
dc:95:10:fe:dd:c7:fc:41:25:5b:65:31:a3:db:d6:
1a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:CE:D1:73:29:42:1E:75:6A:35:62:6F:04:7A:12:92:CB:68:F9:8D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/r87RcylCHnVqNWJvBHoSksto-Y0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7a:1b:ec:aa:5a:6a:ba:19:c6:c7:32:3d:97:88:73:82:7f:4d:
10:bb:bf:32:58:70:99:57:bd:1c:1d:13:f7:c2:47:b7:4b:00:
ce:89:50:f7:15:c3:d2:12:76:9b:47:c6:e6:ec:81:f0:72:92:
7d:83:1d:b6:0e:bc:22:d7:26:a0:80:58:88:96:7f:29:37:cd:
2e:36:5b:5e:4f:de:1f:1f:65:ee:0c:d2:de:ba:a0:2f:ae:be:
f2:63:e0:4f:29:dd:2e:78:6f:7d:a1:c3:21:bc:25:d4:be:83:
d7:e0:ee:d5:8d:df:3b:71:7f:ac:2b:00:98:c3:d8:4a:28:a4:
f9:7f:a3:40:1b:e4:90:3f:f2:17:af:f0:e3:de:67:2d:cb:3c:
b7:45:2c:00:55:0e:a3:6d:26:64:52:5d:16:2f:0c:39:91:e4:
ea:01:5a:0c:32:95:e2:74:f2:e6:15:8b:f4:42:b9:bc:20:9c:
e6:30:85:b3:96:ba:91:99:ed:41:bc:a0:7f:da:10:8a:b1:fe:
8e:36:47:bc:b2:45:3d:ac:14:93:2b:7f:3e:de:21:5c:91:04:
24:b9:2c:42:e7:9e:4b:66:3c:8d:4c:e5:d4:45:a7:f6:78:bb:
cf:91:30:29:d5:64:f2:97:ef:cb:55:d7:88:16:5d:b9:cc:d0:
47:af:5a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 15:42:19 2025 by rpki-client