Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sivMCi4jnf5pjQq3n9P_3Y36KzE.roa
File: sivMCi4jnf5pjQq3n9P_3Y36KzE.roa (raw, json)
Hash identifier: hlM3ZK5pRIVXIA/IhaeeWWc5KoiJzReNCOcRdhVBAYw=
Subject key identifier: B2:2B:CC:0A:2E:23:9D:FE:69:8D:0A:B7:9F:D3:FF:DD:8D:FA:2B:31
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01881495EC7366E10CFDC1C6ADFC7171E0FF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sivMCi4jnf5pjQq3n9P_3Y36KzE.roa
Signing time: Sat 13 May 2023 10:09:09 +0000
ROA not before: Sat 13 May 2023 10:09:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:14:95:ec:73:66:e1:0c:fd:c1:c6:ad:fc:71:71:e0:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 13 10:09:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b22bcc0a2e239dfe698d0ab79fd3ffdd8dfa2b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:aa:40:12:35:97:90:86:f3:3b:c5:9f:e8:e9:
9c:93:e6:e2:44:a7:a7:2b:00:80:26:c4:f7:2f:9f:
c3:91:aa:bc:20:79:d7:ca:73:b7:2a:fd:c3:3e:54:
33:5f:c6:c9:a7:86:49:c2:6d:b0:7c:05:0f:36:a9:
d3:44:38:d2:e5:ef:c1:8c:03:32:d9:c2:45:54:30:
6a:26:b8:e2:5e:5e:bc:eb:1d:26:23:d4:aa:0d:f8:
a0:db:ef:59:fe:2a:d3:3c:2a:07:d6:00:a5:e6:de:
d0:54:99:78:31:17:6f:a5:1e:dc:7b:c4:c5:73:e2:
85:7e:b3:61:79:28:ba:a1:a6:df:be:6e:69:42:5e:
fa:c0:4a:4b:0c:d5:fe:e2:27:ab:74:e6:8e:e7:b2:
3e:f1:0c:34:d3:e1:5c:81:1e:dc:35:8e:62:b5:2d:
36:ff:f9:66:6b:0c:44:c6:4b:4b:ec:24:11:38:00:
68:23:ae:fd:bb:5d:12:29:90:a9:93:6b:55:26:0b:
84:32:bf:fa:0a:13:64:25:f4:70:bf:c4:f2:30:76:
22:98:bd:8e:c0:20:60:fa:8c:00:8b:82:c0:0a:5d:
1f:23:1c:f1:e7:31:6e:f2:22:4a:e6:f6:a9:1d:cf:
fd:21:2a:48:52:3e:35:7a:cf:b7:94:3e:96:2d:d6:
45:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2B:CC:0A:2E:23:9D:FE:69:8D:0A:B7:9F:D3:FF:DD:8D:FA:2B:31
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sivMCi4jnf5pjQq3n9P_3Y36KzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b0:f8:f5:4b:b9:38:13:33:cb:06:d9:09:f0:06:b4:19:12:eb:
33:e4:70:be:f9:8c:72:c2:06:94:84:f6:d1:15:2e:72:67:eb:
61:8e:65:1c:8c:33:4d:71:c2:bb:e1:cb:a3:13:9b:fa:08:5a:
2b:51:7a:71:35:91:54:47:10:9c:bb:00:d1:8a:1d:55:a9:de:
07:87:21:27:91:05:0c:a8:32:70:68:7e:96:cd:d5:35:93:2a:
4a:1f:b7:0f:ae:c9:82:6b:a0:8e:9c:01:60:20:10:ac:1b:ef:
ca:cf:a3:ae:ff:e0:a8:3a:33:60:43:7c:3f:7f:a3:b9:e1:b2:
50:4c:75:cd:20:22:86:9e:18:fc:1c:f7:aa:fd:1c:f1:39:ee:
e5:24:6f:cd:9e:f2:3e:45:da:d6:dc:fe:b1:e7:3d:ac:f5:d8:
f2:9b:15:dd:56:ff:39:ff:f2:f7:44:a6:e5:26:4b:0a:7b:c7:
cd:4f:b3:55:d9:13:76:2c:4b:9d:fd:77:e7:c5:15:c5:6a:2d:
2c:5a:93:a2:79:45:43:89:68:5f:e2:b2:0d:21:d4:c9:9d:72:
36:ca:28:56:79:47:32:ce:37:06:21:78:61:e3:20:de:f9:4c:
0d:8f:ec:41:3e:97:79:bc:e3:93:e0:cf:d0:25:05:f1:2d:a7:
db:22:35:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 01:14:38 2025 by rpki-client