Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/txH5IDUq3BFZjB9qQ25rZfohdhI.roa
File: txH5IDUq3BFZjB9qQ25rZfohdhI.roa (raw, json)
Hash identifier: aLa1OVAoEQYr4SkiVlnZKsZQEkJinGJTg/gHUoIualo=
Subject key identifier: B7:11:F9:20:35:2A:DC:11:59:8C:1F:6A:43:6E:6B:65:FA:21:76:12
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01884991B0AB1126CE78FA0B0EFCBAF95F76
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/txH5IDUq3BFZjB9qQ25rZfohdhI.roa
Signing time: Tue 23 May 2023 17:04:24 +0000
ROA not before: Tue 23 May 2023 17:04:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:4991:a405/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:49:91:b0:ab:11:26:ce:78:fa:0b:0e:fc:ba:f9:5f:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 23 17:04:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b711f920352adc11598c1f6a436e6b65fa217612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:3d:1b:69:60:22:f9:c4:f4:f6:ed:4e:56:b1:
34:cc:9c:73:52:21:be:5c:56:93:94:88:44:a4:ba:
c6:d1:0e:c5:a8:a8:ff:af:fd:30:37:de:4a:9d:a3:
0d:36:10:09:57:86:56:e6:47:e6:e4:b2:6b:7b:dd:
2b:ba:ca:45:1b:7f:59:4b:e7:56:eb:9e:ea:53:7d:
a0:21:f7:d5:a4:86:2d:19:0b:01:41:b7:ac:17:c3:
b3:ae:7f:75:82:ac:5e:f8:0a:72:e8:b1:4f:a4:55:
cf:5f:17:7d:54:95:c5:f9:4c:1b:fd:94:31:17:5d:
97:de:03:87:8c:ea:6b:60:27:32:b2:17:f4:1c:51:
20:db:16:98:ef:70:99:66:fc:12:53:f2:41:83:2e:
9c:d0:f1:68:20:02:1e:bd:a9:74:95:22:8e:79:72:
45:17:d7:04:ad:a2:40:8b:df:71:3d:f7:09:77:3a:
e4:65:b5:0d:83:6f:94:79:64:9e:7d:67:14:31:8f:
bd:17:01:87:e5:7e:94:f0:2a:22:d1:0c:38:7e:e5:
ed:c3:cd:4a:9b:60:bd:26:d5:52:44:c8:6f:a0:06:
3d:99:a2:f4:9a:44:89:9f:90:ee:65:83:80:83:f2:
79:e0:e1:21:26:a0:62:42:78:1d:38:87:d8:e3:37:
42:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:11:F9:20:35:2A:DC:11:59:8C:1F:6A:43:6E:6B:65:FA:21:76:12
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/txH5IDUq3BFZjB9qQ25rZfohdhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
12:26:ca:33:38:0d:54:46:93:4b:e9:3a:c0:a9:6c:44:4e:5b:
bd:c3:49:46:40:48:32:84:4e:b9:a2:39:58:22:ce:02:93:67:
6b:0e:87:c4:2a:8d:b1:b6:a2:ea:24:1d:5e:b7:24:ca:c5:8a:
60:ac:ac:bc:c3:6c:a6:eb:00:32:8d:bf:32:95:11:c7:a3:d0:
14:47:d3:ef:32:39:ad:89:ec:c0:20:21:f3:76:a6:1b:e5:78:
2d:f5:68:a9:5c:08:70:a5:f7:5f:8b:30:ca:46:85:1e:fd:a5:
85:d2:58:7b:72:32:ae:e9:7f:d9:0d:f8:20:5d:82:b6:0d:65:
3f:d2:6c:b1:58:33:71:94:2d:5a:c4:75:b7:7d:7e:56:61:42:
c8:e7:a0:e8:66:a6:9d:42:17:62:8d:5f:2f:27:22:79:59:6a:
5b:cb:cf:0b:22:fd:13:a2:42:a4:42:b8:0f:fe:8e:04:0c:56:
bf:49:4e:3e:46:0b:1f:18:ce:2f:e1:ff:15:88:16:59:c9:4b:
f6:85:54:dc:02:fb:0d:cc:e2:8a:38:e1:ae:41:a8:d7:87:c5:
ad:69:f1:da:9e:61:e0:d6:65:67:10:20:8f:0c:ec:30:6b:06:
b8:76:87:55:5b:9e:5d:b9:91:02:83:fa:e3:66:e6:f8:09:17:
c6:c6:f1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 08:39:03 2025 by rpki-client