Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/raLy5SU0pgDofjWOEAjcSQvmuUI.roa
File: raLy5SU0pgDofjWOEAjcSQvmuUI.roa (raw, json)
Hash identifier: 8lSlB4VyFe6kDm4KyRRcLlkr8coGe7/bRRJD8+/ACf4=
Subject key identifier: AD:A2:F2:E5:25:34:A6:00:E8:7E:35:8E:10:08:DC:49:0B:E6:B9:42
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189620FD4EE7E039CC6ECCFFE714C058C13
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/raLy5SU0pgDofjWOEAjcSQvmuUI.roa
Signing time: Mon 17 Jul 2023 04:15:51 +0000
ROA not before: Mon 17 Jul 2023 04:15:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:62:0f:d4:ee:7e:03:9c:c6:ec:cf:fe:71:4c:05:8c:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 17 04:15:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ada2f2e52534a600e87e358e1008dc490be6b942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fc:54:9f:b6:cb:69:61:d4:00:a7:27:65:1f:
44:59:03:69:00:50:fe:73:06:24:91:d3:0d:48:39:
8c:05:4e:74:8a:cf:c6:52:e0:9b:d5:b8:9c:d7:3e:
3e:22:f6:45:c1:28:60:fc:dc:f6:16:d3:01:0d:cf:
80:c7:e4:4a:b5:06:12:cd:16:4a:c3:01:77:9e:0a:
e9:2e:4d:50:74:cd:2f:73:b5:61:7d:e5:bc:e3:9b:
22:c5:78:27:c5:d3:0e:50:f2:35:e2:6e:c2:29:f3:
26:ea:e1:65:b0:45:9f:0d:78:86:09:95:eb:97:da:
d9:d7:4c:e7:d9:0c:78:15:ae:c4:a5:be:08:77:b4:
ed:e6:7d:15:d3:7a:4d:c3:d6:3b:61:4d:57:67:63:
bf:c1:44:8c:d8:60:d6:53:bf:97:a3:dd:1b:2e:bd:
71:82:21:b0:d0:06:af:4c:b0:df:2a:14:4d:31:c7:
e6:56:f0:2b:55:25:e4:c9:22:19:26:c5:ff:fa:5d:
87:f5:f1:8b:45:98:f1:b1:78:89:c2:02:c9:b2:75:
ab:2a:0f:e4:8f:b8:47:05:b0:ed:3b:59:bc:b0:d9:
0c:42:c5:7e:6b:ae:2e:6a:74:53:d4:8c:bc:11:ec:
5d:51:04:d0:25:c6:b1:6b:a7:cf:78:a6:7c:63:2a:
af:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A2:F2:E5:25:34:A6:00:E8:7E:35:8E:10:08:DC:49:0B:E6:B9:42
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/raLy5SU0pgDofjWOEAjcSQvmuUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
99:d8:af:b9:d8:88:4b:b7:6a:33:a3:9a:f8:31:82:57:79:93:
d7:ec:f4:5f:82:4a:2b:93:23:8f:d2:7d:3b:dd:dc:80:d7:71:
36:ed:47:1a:6b:c1:e5:3b:2d:7e:d7:f3:8f:b8:5d:dd:a2:e3:
d1:a4:fe:53:1c:39:f3:a9:a6:39:9d:7d:35:9f:db:bc:82:2a:
9b:f6:4c:db:db:8e:db:ce:c1:a0:64:53:7d:79:81:1c:fd:54:
c2:de:4f:64:5d:68:61:29:64:c7:4e:c6:9d:69:e4:d6:8e:bc:
c0:40:13:67:f2:68:1f:24:56:17:89:07:c2:a0:cd:8c:a5:1f:
79:5b:c9:ce:c5:5f:d7:c7:e6:22:e5:81:c1:d7:7a:da:47:85:
ef:a0:7d:cc:e9:b0:7c:eb:fd:13:05:c4:50:23:f6:55:ba:73:
59:12:5f:1a:be:bc:83:64:b7:7e:a5:b3:99:4c:fc:24:b6:3e:
de:5f:16:2b:92:2d:02:7d:f5:e9:3c:cb:bd:ea:1e:d8:df:a3:
ef:dd:11:63:72:27:d0:86:32:e4:d1:3c:f8:32:45:84:3e:66:
3b:b0:34:db:3f:af:62:77:e8:12:b0:91:68:92:b7:4e:0d:2e:
2e:7e:56:6c:fe:b7:cd:5e:05:e8:e5:bd:75:cf:9f:94:7a:07:
28:a0:1f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:59:39 2025 by rpki-client