Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t98Ax3Y83bEVl4S_Ygk_wvTQARk.roa
File: t98Ax3Y83bEVl4S_Ygk_wvTQARk.roa (raw, json)
Hash identifier: dbOEb3N95rucF1+IcyunIZXCMET2zDgx9Dl4zl+RqSM=
Subject key identifier: B7:DF:00:C7:76:3C:DD:B1:15:97:84:BF:62:09:3F:C2:F4:D0:01:19
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01868548A0EF77567EA01B4BFBC639C7D5FB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t98Ax3Y83bEVl4S_Ygk_wvTQARk.roa
Signing time: Fri 24 Feb 2023 21:16:14 +0000
ROA not before: Fri 24 Feb 2023 21:16:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:85:48:a0:ef:77:56:7e:a0:1b:4b:fb:c6:39:c7:d5:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 24 21:16:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7df00c7763cddb1159784bf62093fc2f4d00119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:25:5c:5f:04:8d:13:48:29:11:7b:9e:f9:45:
58:16:0f:50:62:07:90:e1:03:91:c0:7b:3d:37:6d:
e8:2c:29:ac:fe:4b:7e:43:2e:e4:f2:33:71:df:7f:
06:8e:94:0e:54:ea:c6:24:71:3f:5a:2f:43:13:87:
ab:95:5e:d8:94:5f:4f:97:c6:e0:9d:46:f9:e5:d2:
be:06:f8:ec:5f:85:7a:1d:fe:79:7b:13:a3:dd:1b:
7b:3c:89:f5:1f:dc:41:39:77:ff:08:b1:58:ae:8c:
bb:44:94:24:98:71:b6:26:d7:cf:6d:4f:74:dd:c3:
92:1b:97:15:d7:3b:01:e0:a6:ca:ae:bc:91:38:6b:
64:de:a6:89:a4:32:70:b0:a4:db:18:55:56:f7:64:
ba:f2:d3:1c:89:4d:1d:7e:f1:50:86:4d:7f:c8:02:
4a:00:a4:ad:30:63:f7:93:08:8e:a5:22:87:df:e0:
12:3e:55:9a:00:35:1e:a2:5a:9a:e4:59:99:46:de:
77:ec:cd:f5:6b:df:e5:8f:0a:71:41:f3:1a:a6:ef:
67:c7:06:cc:c7:f0:14:93:76:ba:69:5b:b4:69:8d:
7d:05:ee:df:0a:5a:29:31:20:68:c6:88:e2:14:b5:
59:ca:b3:b6:c4:d2:9a:0c:08:97:d2:ea:f2:68:0a:
11:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:DF:00:C7:76:3C:DD:B1:15:97:84:BF:62:09:3F:C2:F4:D0:01:19
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t98Ax3Y83bEVl4S_Ygk_wvTQARk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8d:1d:e2:9e:ee:a1:69:e7:9f:bb:c2:86:f0:a7:ec:f8:08:a1:
7a:f9:f5:23:b0:b6:ef:7c:17:3d:1f:e8:22:69:3e:45:98:11:
1a:e1:5c:72:8e:0e:55:ce:aa:2f:09:0e:11:38:19:f4:79:4d:
9f:df:c9:a6:e9:0b:11:39:c8:b7:e5:e4:e0:80:18:96:58:88:
eb:d7:be:ab:6d:f5:d5:7b:f1:6f:9b:14:01:14:3d:cc:39:59:
45:a1:10:33:ea:cd:a6:f4:b7:ca:5e:e8:09:09:f7:4f:20:83:
81:da:ab:09:7b:90:64:6a:94:8f:d8:dc:55:1c:69:0b:20:83:
0a:d4:2b:6b:ed:52:bc:32:6f:58:2e:55:a6:97:a0:a3:dd:77:
1f:ce:67:ee:18:d7:7c:f5:48:9a:36:8c:5f:67:4c:ea:95:05:
6a:8b:7f:ae:c0:97:55:ce:5f:be:91:41:e2:c8:7d:5e:21:4e:
41:63:24:57:b5:d0:88:9d:b6:63:bc:c6:c4:fc:2f:96:ab:1c:
cb:7f:f7:1c:61:11:be:67:60:19:d4:b6:66:00:0c:4b:73:0f:
4d:12:5f:b0:69:c1:91:07:8a:1a:89:8e:b0:10:38:58:61:ff:
ca:22:15:2a:a6:99:7c:d3:d6:88:f2:f3:9b:15:08:3e:c0:e1:
0e:d1:20:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:15:02 2025 by rpki-client