Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sJ7mjBX8nYPzqoBLpsLfyCe769o.roa
File: sJ7mjBX8nYPzqoBLpsLfyCe769o.roa (raw, json)
Hash identifier: pqyS4Cv5c4HjKUyRAVUdHDD+f7vaBcwHLYLEEZP294o=
Subject key identifier: B0:9E:E6:8C:15:FC:9D:83:F3:AA:80:4B:A6:C2:DF:C8:27:BB:EB:DA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188525ECFA73798AF0C5E875A083B8E9EDA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sJ7mjBX8nYPzqoBLpsLfyCe769o.roa
Signing time: Thu 25 May 2023 10:05:25 +0000
ROA not before: Thu 25 May 2023 10:05:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:188:525e:b68/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:52:5e:cf:a7:37:98:af:0c:5e:87:5a:08:3b:8e:9e:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 25 10:05:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b09ee68c15fc9d83f3aa804ba6c2dfc827bbebda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:84:1e:63:f1:56:ac:71:83:eb:68:f4:d1:35:
ec:6d:7f:26:df:ff:26:29:6b:d6:15:bc:f4:13:8d:
3a:b9:96:1e:df:c6:3f:24:e4:c5:5c:25:c7:fa:64:
83:b0:51:96:a1:f0:4e:43:d2:77:9c:98:4b:b5:50:
e0:b1:0e:57:a4:c4:66:10:7a:81:02:cc:3e:89:04:
78:fa:0b:a1:88:ba:12:18:12:34:6a:56:96:99:a4:
64:b3:51:fb:a7:6a:3c:43:e3:43:52:68:46:94:5e:
ca:4a:63:ac:2b:46:62:8c:b1:1c:b8:ce:f1:5a:2d:
17:86:1b:53:6b:ea:92:b9:3f:02:19:af:6d:ef:dc:
04:f6:66:f4:1e:2b:91:c6:e7:59:e6:83:5e:8a:dc:
ca:77:80:60:f8:2e:70:8c:13:80:fe:d8:79:ae:66:
b6:01:f0:e8:bc:12:96:d9:fc:a2:df:f6:c1:4c:fd:
34:7f:95:f6:2f:ac:6d:27:10:d3:4f:1a:72:f3:df:
49:d6:7d:95:ad:c4:c9:c0:00:70:e7:71:53:13:88:
33:0b:08:27:b1:e4:ac:7a:e3:c5:cb:0a:f8:e7:aa:
dc:93:98:b2:1f:a5:5c:67:d3:f1:c7:fe:e0:a0:c4:
08:8e:7a:c3:14:3a:09:42:34:60:3b:b3:62:5c:b5:
c2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:9E:E6:8C:15:FC:9D:83:F3:AA:80:4B:A6:C2:DF:C8:27:BB:EB:DA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sJ7mjBX8nYPzqoBLpsLfyCe769o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b4:5e:0f:14:1d:23:11:a5:cb:ac:51:e8:ea:4e:85:ef:56:ba:
1d:35:a9:76:1c:50:95:a3:1a:ce:7e:6e:31:61:63:77:56:f6:
3c:b2:34:3b:0d:ac:0f:78:68:30:1b:2e:50:94:3f:12:94:24:
33:dc:04:b7:34:23:b3:e7:65:f5:ef:b0:4d:38:e6:1b:35:0f:
85:29:2d:07:c8:df:45:c7:a5:dc:56:f0:b2:1f:91:0a:02:11:
40:1a:ed:1f:4d:14:11:56:70:d1:a6:73:d5:7a:48:31:70:12:
12:d7:86:54:05:38:48:13:93:0f:d9:9a:13:40:4e:4a:a7:50:
07:75:0c:a7:f2:d8:02:bd:4b:30:b1:ae:fc:57:dc:f8:e0:0b:
3e:f4:d0:c7:2e:74:b5:d6:34:c3:59:84:c7:51:97:70:44:77:
37:4c:a0:a4:93:84:e7:6c:90:54:8d:a8:e2:e1:61:b9:d3:64:
75:55:fa:ec:a3:13:47:0c:12:f8:b3:58:f3:39:31:95:17:48:
db:0c:8e:a6:95:df:00:9f:47:df:af:3b:4d:e5:72:4a:60:b5:
f5:17:b2:24:8c:99:79:49:da:33:ef:13:73:35:c1:55:51:41:
cd:aa:7f:5f:16:d3:18:55:bf:fb:cb:1b:09:13:ea:f9:12:0e:
d6:ae:77:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 22:48:37 2025 by rpki-client