Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tN_KF9U9zeiyiweslQJ2NWv1ejg.roa
File: tN_KF9U9zeiyiweslQJ2NWv1ejg.roa (raw, json)
Hash identifier: nvdZq6ETjV/wLpfE/6JwnqCbSPjn9US3FNmhhKXn+aY=
Subject key identifier: B4:DF:CA:17:D5:3D:CD:E8:B2:8B:07:AC:95:02:76:35:6B:F5:7A:38
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189BAE2E08BF8C0C2D46C1DEB1DB6D04D49
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tN_KF9U9zeiyiweslQJ2NWv1ejg.roa
Signing time: Thu 03 Aug 2023 10:12:58 +0000
ROA not before: Thu 03 Aug 2023 10:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ba:e2:e0:8b:f8:c0:c2:d4:6c:1d:eb:1d:b6:d0:4d:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 3 10:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b4dfca17d53dcde8b28b07ac950276356bf57a38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3c:cc:f7:ed:fc:01:fc:e5:e0:5f:83:b4:29:
51:20:7b:61:e8:2f:0a:b5:9e:b6:b0:21:b8:d6:9f:
8e:46:ca:3a:b9:11:ae:9b:f4:7d:46:bf:63:f6:2e:
1e:ef:cd:5a:cb:52:16:dc:3b:b5:a3:c3:19:0a:27:
fd:18:ad:88:4f:ed:5e:00:9d:06:c9:14:82:76:54:
74:6e:e9:8c:1c:53:30:84:42:b5:fe:c5:fc:8f:5b:
23:18:60:cc:7f:02:b7:c6:15:7e:08:03:2e:c9:0e:
a0:42:36:4f:39:b6:36:d9:40:a1:90:c2:56:98:07:
e2:68:a2:96:b9:0e:c5:bb:77:bc:12:c9:ca:07:17:
c0:f3:d0:51:99:58:9e:b9:76:cd:4c:3c:7e:ec:62:
a3:22:ac:49:ea:a5:e2:42:d8:a3:fb:42:56:07:9a:
fb:82:d5:d1:36:3c:45:e0:be:bd:bc:ef:b2:3a:e3:
ad:20:5c:35:02:08:19:91:aa:24:7a:2e:18:6e:f1:
95:0c:47:d9:3a:71:e1:d8:18:eb:39:ce:06:b3:6d:
e4:1d:45:a5:83:64:bb:fb:18:90:b3:77:dd:1b:6e:
2a:de:e9:55:6d:b6:6f:4a:f6:c7:b2:2d:d4:ba:0f:
81:83:b0:3d:09:46:fe:d1:30:5a:a7:63:46:b1:54:
eb:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:DF:CA:17:D5:3D:CD:E8:B2:8B:07:AC:95:02:76:35:6B:F5:7A:38
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tN_KF9U9zeiyiweslQJ2NWv1ejg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5f:4a:05:80:ed:4a:7d:8c:57:95:c4:78:37:97:0f:dd:fe:fc:
ec:a9:26:83:64:54:06:6d:ec:16:8f:1a:23:62:da:3c:bc:aa:
99:c4:e4:11:9b:0e:7e:dc:29:93:d8:fe:d9:43:91:6e:b1:50:
e3:2b:c4:bb:46:1c:e7:f9:cf:58:7b:eb:44:60:1f:8e:c5:a8:
01:53:eb:fc:3d:55:47:57:a7:bb:6d:22:65:d9:98:5b:f6:8a:
2d:17:d6:3c:b7:3c:b0:d9:5d:29:f6:5e:5b:c9:29:93:8f:2b:
0f:a6:a8:70:96:1f:70:09:c0:80:2a:05:cd:f3:8f:4b:f0:d2:
b5:e6:94:0f:dd:e1:56:ec:e8:75:22:03:f2:d4:44:59:2d:5b:
04:ba:a3:0d:58:b6:cc:eb:98:f1:32:70:e1:a7:a8:35:1b:9c:
b3:b3:35:c7:e8:b1:a3:ba:93:a0:88:d6:97:2b:b6:c1:fb:d4:
73:0a:cf:1c:cc:ad:ff:ff:14:49:ee:19:0e:b7:a6:5a:31:76:
39:47:e5:84:45:10:33:20:4b:ab:14:74:fd:d8:2a:14:e6:ba:
3b:fc:c3:c8:f9:1e:0b:e0:10:87:83:75:11:60:a6:b7:cb:b3:
ae:8f:cc:b7:ad:40:ad:54:84:67:e5:87:6d:72:27:1a:83:a6:
a2:ec:e2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:09:01 2025 by rpki-client