Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t2NUcRkyEyRbShqtY1NISBG_KoQ.roa
File: t2NUcRkyEyRbShqtY1NISBG_KoQ.roa (raw, json)
Hash identifier: tcq6Zgeh97DVzXQeAdiMRoJV1YokabzTVZBgwX5VFSo=
Subject key identifier: B7:63:54:71:19:32:13:24:5B:4A:1A:AD:63:53:48:48:11:BF:2A:84
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189FEB0C38A039667EFF7B07FBF71DEA7DE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t2NUcRkyEyRbShqtY1NISBG_KoQ.roa
Signing time: Wed 16 Aug 2023 14:12:24 +0000
ROA not before: Wed 16 Aug 2023 14:12:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:fe:b0:c3:8a:03:96:67:ef:f7:b0:7f:bf:71:de:a7:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 16 14:12:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7635471193213245b4a1aad6353484811bf2a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a3:8e:11:32:37:38:8a:ec:0b:e0:5e:92:11:
b3:c7:0f:64:6e:9c:ef:77:b2:e1:5b:ef:b9:8d:69:
53:40:19:0c:6c:ce:98:4a:9d:bf:6e:ce:96:3d:9b:
20:84:d8:02:38:21:e5:1d:c0:95:56:2c:c4:1f:8e:
a7:39:4f:86:68:5e:f0:e3:b7:de:49:bb:86:11:4c:
a8:10:ef:e0:de:1f:7b:c4:a6:d7:14:b7:ab:3b:88:
8c:67:6f:37:6a:59:f8:a1:98:3d:e2:2d:e3:b7:6b:
b3:9e:c2:b6:60:84:63:6b:b6:12:e9:53:20:c8:0c:
4a:b4:b5:1d:5a:c7:1d:67:d0:3d:fa:b5:39:f4:89:
74:22:e2:b7:2a:53:a7:b5:f1:28:cd:09:10:0f:98:
d5:56:27:f8:67:04:5e:11:b2:fa:c9:b5:e9:94:f8:
5a:9b:18:07:73:c6:33:34:6e:54:95:3f:6f:be:f1:
e8:e4:fb:d3:16:26:fb:d2:25:37:fd:3f:75:b1:9c:
cb:3d:68:02:bf:9e:58:e2:fc:fe:01:21:9c:a5:15:
72:ce:83:3f:f2:cf:a1:dc:bb:31:e3:f2:f0:4c:17:
d8:bc:07:50:6e:7d:ae:51:82:0d:7d:73:59:eb:f1:
ea:0b:75:7a:bc:48:72:39:7a:3d:3b:20:33:0e:a8:
80:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:63:54:71:19:32:13:24:5B:4A:1A:AD:63:53:48:48:11:BF:2A:84
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t2NUcRkyEyRbShqtY1NISBG_KoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6e:9f:21:09:50:8b:09:0c:53:c0:e1:15:a8:76:ca:7b:83:07:
27:83:fb:0a:c7:10:cd:a1:3d:a6:81:ff:ff:b3:fb:b2:17:28:
53:d8:38:3c:8b:1e:f7:32:45:5e:28:bb:00:dd:b7:23:b9:27:
a1:ba:c6:14:ad:1b:e9:48:5d:17:81:1b:8c:72:e1:07:94:ea:
e5:30:28:8c:6b:09:5c:3f:bf:12:f9:19:1c:8a:55:5a:a6:be:
eb:fa:93:2d:ab:c7:46:d5:70:69:8c:45:50:8a:8d:0b:70:5b:
83:69:ae:98:c9:77:92:c7:70:53:2e:af:64:8d:dc:a0:86:6b:
41:2b:a9:c9:41:f3:0c:23:fa:b3:a1:fb:14:38:26:17:52:cc:
59:de:9e:68:16:eb:25:39:56:97:50:bf:ad:5f:1d:27:2b:64:
46:bb:a8:5d:75:96:25:40:bc:32:6d:8b:94:74:ec:13:fa:d1:
c8:e0:e3:6b:c7:de:94:a2:b4:c4:7c:5d:8d:ce:82:ac:c4:33:
ac:07:60:85:19:45:ce:b3:72:6c:b7:bd:44:35:1b:e7:6b:05:
5d:6e:6d:b1:42:79:87:a2:d5:b2:f8:70:aa:91:a1:4e:06:e6:
fd:16:0a:e0:f4:0b:6e:e3:5d:22:dc:b6:cf:64:b0:35:a6:0c:
a5:2b:2a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:01:31 2025 by rpki-client