Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sFhf6SW5uJUYJfZ3U1bzl5G8plU.roa
File: sFhf6SW5uJUYJfZ3U1bzl5G8plU.roa (raw, json)
Hash identifier: rKvxy11yPYFRQbhHIYNioVYUwqmKRquKxQXy1aY+3c8=
Subject key identifier: B0:58:5F:E9:25:B9:B8:95:18:25:F6:77:53:56:F3:97:91:BC:A6:55
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01898E3EFA9408F788DACEA88DA4B369C247
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sFhf6SW5uJUYJfZ3U1bzl5G8plU.roa
Signing time: Tue 25 Jul 2023 18:10:39 +0000
ROA not before: Tue 25 Jul 2023 18:10:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:8e:3e:fa:94:08:f7:88:da:ce:a8:8d:a4:b3:69:c2:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 25 18:10:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b0585fe925b9b8951825f6775356f39791bca655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4a:3d:19:b1:b9:32:84:94:0b:67:be:20:18:
45:e4:22:99:c1:dc:61:33:a3:32:2f:4c:ad:c9:f6:
2e:ec:9a:50:80:4d:d4:40:68:3f:6f:b8:18:a0:60:
6a:ee:69:38:8a:1f:db:0a:56:a2:01:36:9c:4e:a0:
95:76:a1:fd:3f:7a:05:59:5c:d0:71:d7:78:b5:42:
79:d4:a5:7a:ba:dd:a9:46:3a:f4:d8:ce:2e:23:e3:
a4:10:8c:e1:90:73:3f:64:2a:f6:41:ee:8b:ce:ff:
77:cf:3f:16:49:8b:8c:49:f7:9b:f9:f7:69:6a:2e:
66:d0:08:dd:30:d9:12:1c:44:ff:52:92:c8:65:a2:
cc:25:33:c2:fa:3d:08:b6:3a:c9:c9:ee:2a:62:3c:
e0:9a:aa:d3:ea:ca:3e:46:a3:05:bf:db:80:08:d7:
c2:6d:c6:6c:b7:1e:dd:39:fc:6f:8e:09:fa:ae:ad:
8d:b9:0a:13:e4:f9:8b:66:73:46:42:36:4e:bf:1c:
72:a8:74:0f:23:33:b8:b2:b0:44:34:41:50:01:a6:
c4:5c:78:f8:96:e8:d7:7e:d8:1c:c7:3b:b8:2b:dc:
c8:9c:9c:fe:73:5d:d6:70:69:18:02:de:77:87:e4:
ae:4d:89:9c:6a:e0:8f:a3:cb:75:78:e2:52:56:03:
fc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:58:5F:E9:25:B9:B8:95:18:25:F6:77:53:56:F3:97:91:BC:A6:55
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sFhf6SW5uJUYJfZ3U1bzl5G8plU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4d:67:db:bd:66:5c:75:28:22:c0:5f:3c:a2:0b:c4:5c:37:e1:
5c:ea:69:32:6e:83:78:bc:cf:4b:7e:6e:e6:e7:00:17:38:d6:
9e:f2:90:14:11:98:d9:d8:8b:2a:a5:d0:a3:42:26:b4:cf:41:
6d:3b:a5:50:d9:9e:07:16:0f:f7:e8:fc:e2:b0:79:70:ba:95:
76:f6:df:ff:cb:48:b5:bc:97:3e:e9:e4:0c:1a:92:f9:15:e2:
a7:82:4d:a7:ff:c4:2a:39:91:0e:b3:d2:29:77:ec:24:c8:61:
db:36:40:c6:98:71:48:e9:a6:d0:65:92:94:53:d9:dc:71:14:
2f:e9:5f:55:48:62:ce:22:bd:93:67:32:fd:bf:81:10:ef:8a:
3a:4a:87:62:fa:a2:0a:b0:19:aa:f1:bd:6e:98:e5:ae:18:ed:
a2:03:4b:26:c6:95:36:8d:c7:a0:64:f0:e9:85:2d:34:5b:64:
ae:fc:45:c5:08:4a:bd:89:08:3a:27:37:4d:53:e2:ca:92:ce:
5c:7b:6c:d5:6e:a6:00:b8:cf:66:ed:dd:de:e4:5f:ba:f9:83:
f6:95:54:ab:93:a6:f3:76:35:af:6b:3f:5e:8b:b5:cc:09:48:
34:18:4c:07:d7:25:d9:3d:01:6a:c6:8e:3a:f6:cc:cb:93:30:
31:53:5a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:35:23 2025 by rpki-client