Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/s1Snn4dh4RUSWByPz67VmsY3ZQM.roa
File: s1Snn4dh4RUSWByPz67VmsY3ZQM.roa (raw, json)
Hash identifier: 8zsCOvYZMBX/nXaFR2wR2CkZGL3SsXUed43pSXa/f8A=
Subject key identifier: B3:54:A7:9F:87:61:E1:15:12:58:1C:8F:CF:AE:D5:9A:C6:37:65:03
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187FC20A18CA02D42FCE0D8FEA1BBEC469E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/s1Snn4dh4RUSWByPz67VmsY3ZQM.roa
Signing time: Mon 08 May 2023 16:10:09 +0000
ROA not before: Mon 08 May 2023 16:10:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:fc:20:a1:8c:a0:2d:42:fc:e0:d8:fe:a1:bb:ec:46:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 8 16:10:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b354a79f8761e11512581c8fcfaed59ac6376503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:4b:1f:c0:cd:f0:20:5c:ee:0b:31:99:45:de:
86:1e:c0:8b:66:b6:26:a1:86:88:5e:e7:6f:0e:46:
40:83:8c:94:a3:73:1e:c1:3c:ed:72:22:0e:af:da:
07:86:b8:ec:12:30:e0:9b:f9:22:2b:a2:05:c6:b4:
83:22:00:e5:63:e0:86:b6:04:3c:61:73:29:f0:5a:
f5:43:bf:14:b5:d3:00:df:be:d3:9a:45:6d:25:ff:
ff:50:df:81:dd:09:a7:f7:2f:57:d6:19:a5:ca:95:
b6:a0:a2:1d:3e:00:7a:95:a0:c5:e7:40:8c:f0:7b:
a4:bf:4f:ca:a2:a5:b6:ca:27:81:41:c2:a7:58:7b:
f6:09:b5:dc:6b:ac:d7:0a:e2:b4:47:b0:ff:6d:15:
2b:eb:aa:56:fe:36:27:18:68:75:7d:8f:9f:d3:b8:
cf:7a:87:69:26:ee:88:fe:32:97:26:d0:d1:a3:de:
5d:95:39:8b:90:4c:76:b3:58:90:4e:cc:5a:e1:8a:
ee:c6:77:0a:f3:28:4c:ae:76:b8:b4:bd:91:30:49:
c7:38:47:7a:03:b1:d5:01:61:13:9b:2f:f6:b6:67:
00:68:ca:b7:8e:c2:25:ab:2a:42:7d:f6:e4:9f:63:
3d:70:99:bc:bd:9a:ed:1a:92:2d:36:a7:1d:a5:53:
3d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:54:A7:9F:87:61:E1:15:12:58:1C:8F:CF:AE:D5:9A:C6:37:65:03
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/s1Snn4dh4RUSWByPz67VmsY3ZQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
73:52:ce:bf:47:ad:be:7c:cc:d5:cb:e5:90:3c:63:c6:5c:64:
b3:01:db:e9:97:d3:ed:a3:48:a6:42:98:67:05:3e:1c:7a:e0:
b4:17:6b:71:0a:80:3c:c3:49:b7:24:86:4c:51:19:35:30:19:
f5:5b:8a:9c:4d:f8:9c:f3:77:b1:28:ca:50:0e:d1:c7:d7:07:
62:f2:0d:28:f1:5e:12:26:2a:6c:d6:32:5f:43:a5:2b:c3:56:
d3:a1:be:ad:f5:2b:b2:db:e3:e0:77:de:22:14:13:0b:d3:f4:
cd:70:49:56:0a:a4:43:7f:2f:0c:0a:5b:45:69:ed:50:da:47:
b3:9e:1a:80:cd:9b:bf:c7:b9:21:02:e6:a8:38:f9:70:8f:81:
9c:07:80:34:1e:60:89:28:ac:46:aa:2c:50:42:d1:02:e8:87:
7d:ec:d2:31:f2:b7:85:df:85:e6:d3:46:be:5a:a1:a0:a5:d9:
e6:b6:9c:bc:f5:32:3a:40:c4:d9:c6:f8:2f:a4:15:fc:31:d7:
22:fe:4e:9e:2d:9b:6a:69:f9:6c:94:f5:9e:7d:3c:b9:c2:55:
a5:5a:91:c8:ab:e7:70:27:db:82:01:ce:86:bc:86:fe:a9:61:
64:97:c8:a1:d9:b6:e8:cc:4a:89:6e:6a:b4:53:65:8f:0b:66:
03:74:dd:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:20:33 2025 by rpki-client