Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t4NGS1xSxiQhDvQjnj2tHhKcutI.roa
File: t4NGS1xSxiQhDvQjnj2tHhKcutI.roa (raw, json)
Hash identifier: 9JNbQd0HkhCMBV2oHexxOnUQFSWkrWghfXoN3kuBe0w=
Subject key identifier: B7:83:46:4B:5C:52:C6:24:21:0E:F4:23:9E:3D:AD:1E:12:9C:BA:D2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01886922249840DA521FD9D0F002E305B19E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t4NGS1xSxiQhDvQjnj2tHhKcutI.roa
Signing time: Mon 29 May 2023 20:10:25 +0000
ROA not before: Mon 29 May 2023 20:10:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:69:22:24:98:40:da:52:1f:d9:d0:f0:02:e3:05:b1:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 29 20:10:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b783464b5c52c624210ef4239e3dad1e129cbad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:99:5c:ca:11:84:a7:7b:6e:5e:5f:cd:7a:39:
87:b0:76:65:51:f0:0b:8b:60:49:86:76:9a:53:d9:
fe:1d:db:36:64:18:1c:b1:68:ed:8a:cd:7f:0a:45:
89:16:3e:89:36:ed:b4:41:27:fd:03:c7:3a:21:eb:
96:77:b0:2e:3f:46:91:36:82:96:d1:93:41:26:8b:
29:e9:85:99:0f:89:81:ba:ae:59:ab:b4:61:77:09:
f2:c4:49:73:f8:7f:ea:1d:a2:48:c7:07:77:1a:15:
ef:ac:36:0e:24:00:76:e2:01:ea:18:9c:40:f5:72:
4f:a3:27:3d:db:cb:cd:2d:8d:99:bf:80:50:62:38:
f3:3a:4e:1a:b7:43:d5:fc:4f:e5:10:aa:8e:50:4e:
71:c2:54:5a:5e:12:79:46:63:93:d8:4b:fe:14:ac:
4e:28:37:ad:43:20:4c:57:e8:93:3a:6f:ec:db:fd:
ed:30:5a:91:b3:cc:7f:bc:cd:26:2b:8a:42:98:68:
64:f8:1a:6a:6e:df:c8:f7:7f:42:ba:d2:14:70:4d:
53:fd:88:ac:7b:53:2b:6b:27:6c:e1:53:28:8b:06:
d6:16:5e:30:1e:38:7e:3b:14:60:05:d2:db:21:df:
e3:f3:23:22:19:6b:43:b3:24:20:27:13:2f:7a:f6:
17:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:83:46:4B:5C:52:C6:24:21:0E:F4:23:9E:3D:AD:1E:12:9C:BA:D2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t4NGS1xSxiQhDvQjnj2tHhKcutI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
04:02:46:af:8b:55:01:40:e1:88:cd:07:5e:95:42:ed:31:91:
51:d9:a8:85:b6:c7:9c:5a:62:b3:55:85:89:94:0d:dc:1d:98:
f1:fc:e3:51:5d:2d:95:14:ab:73:f9:88:56:bb:98:8c:2a:fe:
74:9d:a5:45:52:f2:b4:76:a8:8a:c8:fa:99:1d:32:c0:e7:62:
57:55:e7:e0:f7:e2:07:fb:fb:3b:f8:92:2b:62:96:b3:d7:76:
59:d5:11:e1:5d:dd:f3:e0:fc:d1:53:3e:40:b7:4d:b0:af:38:
36:34:fc:5a:1c:59:69:0b:14:bc:b6:81:21:7c:60:cd:76:90:
a6:05:4c:bc:af:c6:66:e8:c4:d5:fb:83:27:89:76:56:b8:0a:
42:72:40:18:bc:5e:90:14:ee:80:11:b2:2e:15:8d:00:76:49:
a0:64:02:5e:c0:2f:a8:26:bf:37:2e:7c:64:38:d6:21:41:81:
79:92:50:c7:28:98:77:31:0c:58:1c:39:f8:81:eb:b1:d4:d5:
99:60:a6:fe:5f:e6:00:d3:e8:ca:bd:6a:ce:a3:c5:38:6f:08:
bc:ee:82:ed:6f:9e:9d:24:22:b4:dd:39:c0:ec:70:10:dc:9a:
71:ab:3d:1a:4b:f3:0c:7b:d9:36:b9:bd:d1:50:a6:90:ac:e1:
92:0b:b5:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:46:56 2025 by rpki-client