Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/spOS7aghR46mcHL-3VI8NKjIEs8.roa
File: spOS7aghR46mcHL-3VI8NKjIEs8.roa (raw, json)
Hash identifier: kKA9K7XkO6fPVNIU73DEw2uhaqVvFBBIKYsQsnc/F+c=
Subject key identifier: B2:93:92:ED:A8:21:47:8E:A6:70:72:FE:DD:52:3C:34:A8:C8:12:CF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188DE823C8F184F2AB8D9F5C112B5AFCE4D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/spOS7aghR46mcHL-3VI8NKjIEs8.roa
Signing time: Wed 21 Jun 2023 15:10:57 +0000
ROA not before: Wed 21 Jun 2023 15:10:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:de:82:3c:8f:18:4f:2a:b8:d9:f5:c1:12:b5:af:ce:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 21 15:10:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b29392eda821478ea67072fedd523c34a8c812cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:79:5d:34:26:c3:12:28:79:1a:74:99:aa:0c:
6d:5a:0a:e8:db:b8:12:13:86:81:f9:89:f1:8b:6a:
e8:8f:41:92:fd:59:37:ef:9f:cd:d0:13:30:f6:10:
a3:23:76:5a:21:9a:d4:02:b8:08:e7:1f:6e:bc:b5:
0a:3b:86:ac:c3:08:b0:2f:4a:58:f8:8a:bd:3f:b2:
47:c5:dd:0f:25:0e:db:bf:09:ad:61:52:ad:b8:98:
2e:8b:00:95:85:75:4a:e4:05:3d:c1:ed:e2:b9:7f:
27:32:fc:80:5c:2f:70:ad:4b:ef:6d:e5:fc:4a:b1:
1e:24:3e:90:17:9e:3b:23:0a:06:f2:73:ae:7e:c8:
e8:be:e0:78:cc:3b:08:8a:78:1b:f1:e8:ad:76:8a:
74:f8:99:6f:61:7f:f4:d9:b3:c6:4c:17:d4:2e:29:
84:9c:be:fc:b0:ae:c7:46:cb:0e:fc:ca:9b:8d:6e:
ff:07:b1:14:97:ca:ce:71:f0:99:eb:5a:03:48:f5:
4b:ab:2b:bf:be:6a:49:29:bb:5f:3c:cb:0f:19:b1:
65:22:4c:95:38:a5:b4:fe:2d:2f:f1:56:47:e3:9d:
1e:25:27:93:8c:06:7a:34:f0:70:cf:56:4b:8a:c1:
78:d8:e6:1c:16:de:35:65:b9:ee:fd:dd:f0:f1:40:
77:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:93:92:ED:A8:21:47:8E:A6:70:72:FE:DD:52:3C:34:A8:C8:12:CF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/spOS7aghR46mcHL-3VI8NKjIEs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
06:8f:e6:fa:ae:c7:43:b7:49:d8:37:ff:6d:97:7b:fb:51:51:
b6:eb:b2:c6:f2:47:ee:0e:91:0a:e2:06:4b:85:ed:14:e1:29:
58:26:10:2c:b0:1b:70:33:56:b5:77:c3:ba:d8:4e:54:f2:da:
98:68:11:84:dc:10:84:59:d1:2f:56:2d:b0:08:5f:35:b5:d0:
c5:75:b1:0f:a4:34:36:42:27:ec:92:82:81:e6:af:01:9b:99:
58:b2:df:5f:c6:22:be:6d:06:03:ca:a0:0f:f8:f1:4c:9e:51:
4a:3c:00:b9:55:9e:ee:e3:47:1e:11:3c:17:ef:a4:ed:68:82:
c2:d4:a6:08:79:ed:97:72:7e:13:6e:fb:fc:a8:01:fe:da:ff:
e0:80:9e:94:91:65:cf:b9:3a:b7:c5:f7:6e:ef:63:89:17:de:
ed:b6:03:36:7c:96:1b:69:c9:0b:53:2a:41:92:4f:1c:2f:2e:
10:e6:c9:3a:25:06:d0:88:da:ee:80:f9:97:5b:d3:33:2f:7f:
45:7f:1f:25:b4:52:e3:05:65:f1:f7:53:c0:b0:d0:52:1d:7f:
ce:d8:96:c5:c1:b8:22:23:26:d5:f8:92:f6:a7:87:66:43:bf:
d0:31:d4:57:fc:5f:b5:ec:78:bb:7c:af:e6:53:a7:dc:fa:22:
b5:02:ac:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:58 2025 by rpki-client