Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sxhJlL5jMbHCO0ooUCw7EF8rwj4.roa
File: sxhJlL5jMbHCO0ooUCw7EF8rwj4.roa (raw, json)
Hash identifier: WRO2ZGYO0kErXiejLetMlr/EKlfQ+AmqPicvdb0uM8w=
Subject key identifier: B3:18:49:94:BE:63:31:B1:C2:3B:4A:28:50:2C:3B:10:5F:2B:C2:3E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01866733405A27A6629CC20047136D165CCC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sxhJlL5jMbHCO0ooUCw7EF8rwj4.roa
Signing time: Sun 19 Feb 2023 01:04:17 +0000
ROA not before: Sun 19 Feb 2023 01:04:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:6733:1d2d/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:67:33:40:5a:27:a6:62:9c:c2:00:47:13:6d:16:5c:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 19 01:04:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3184994be6331b1c23b4a28502c3b105f2bc23e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9f:ba:50:23:6f:6a:a1:d4:5d:8c:ed:c8:71:
c0:07:de:b0:ac:30:7f:48:f1:71:f1:93:8d:c4:a4:
57:49:63:f2:ec:8d:9a:41:a0:4c:3a:44:8b:81:4f:
63:c3:83:2f:d0:47:43:0a:4e:5e:07:8c:04:6e:89:
0f:cb:a6:33:ff:38:2f:ed:9b:5a:79:b7:b3:7c:71:
23:0b:cd:1a:03:0f:b4:61:8c:dd:59:87:64:90:cf:
06:6a:90:76:a5:43:b0:2b:60:b1:fe:51:88:5f:56:
34:7a:57:9d:a1:18:79:66:01:be:68:8f:e9:36:39:
b2:6c:a3:d0:3d:33:a5:71:ab:5d:ec:17:23:c6:10:
1b:85:72:48:79:6a:e2:26:c6:ea:ef:87:1c:7e:fb:
1e:db:85:71:28:c0:68:e3:07:3a:8a:3e:e4:69:d4:
08:b0:50:f6:42:ce:3a:e6:33:af:13:c5:37:18:1f:
25:86:a9:ab:50:ca:f8:99:2f:98:f5:f4:ec:62:08:
90:a3:76:76:12:1c:b6:67:da:e1:5b:94:5e:ed:ec:
b3:e2:68:7e:f8:a5:49:3d:e4:92:8e:e7:58:84:a9:
73:69:de:59:83:55:0f:2a:52:01:57:d2:f2:02:b7:
21:f6:06:21:62:ca:44:2d:2d:bb:06:ea:a2:df:35:
5a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:18:49:94:BE:63:31:B1:C2:3B:4A:28:50:2C:3B:10:5F:2B:C2:3E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sxhJlL5jMbHCO0ooUCw7EF8rwj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8a:04:24:94:37:98:36:55:2d:60:af:4b:c2:e0:f7:d7:9f:4f:
9d:2a:87:c6:d3:ce:4d:ed:83:8a:f2:02:fc:7f:7a:f5:ea:2b:
45:c0:ab:b9:9c:b1:0a:40:20:7b:a4:70:47:5f:f6:e0:ea:a9:
4a:f4:ff:ee:bc:81:2b:5a:65:83:9d:4d:06:9a:58:23:ff:18:
f2:ef:d2:5f:bd:03:71:19:55:02:99:6f:95:de:14:e7:bf:a0:
8d:02:02:49:75:60:b8:62:31:4a:ea:a3:60:6d:01:fe:a8:a1:
a6:78:d7:94:99:ce:25:4c:29:35:21:d1:87:2a:dd:20:db:b5:
db:15:fd:9d:05:82:18:bd:d8:7e:b1:2d:89:5e:43:6d:10:23:
69:4d:bf:17:12:c0:d9:43:ab:78:cc:6a:48:24:4c:1b:6c:2b:
c0:ef:09:e6:6e:a9:79:36:d0:f9:8f:06:a3:b6:8b:6e:e0:f8:
8d:48:3c:69:3e:ab:8b:34:88:86:a4:4e:a4:5f:a0:c9:9c:c5:
36:99:44:33:07:cf:60:b6:6f:da:1f:57:4e:34:1b:2f:b3:9c:
b3:22:92:f9:90:b0:76:5f:a8:22:4f:25:10:14:f0:55:d0:bc:
30:40:bf:e1:4d:50:42:bf:0e:0c:ce:7f:30:6f:47:d9:bf:ca:
2a:a7:67:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 11:51:23 2025 by rpki-client