Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u4X_sIEVLkgN-eH2CoZ3L6G6JRU.roa
File: u4X_sIEVLkgN-eH2CoZ3L6G6JRU.roa (raw, json)
Hash identifier: qWRzZg36iFzK+25gXTg0ywoQD54+YgInwKZxheo9poI=
Subject key identifier: BB:85:FF:B0:81:15:2E:48:0D:F9:E1:F6:0A:86:77:2F:A1:BA:25:15
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188608DCA0FCAD5605D78837834193195EE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u4X_sIEVLkgN-eH2CoZ3L6G6JRU.roa
Signing time: Sun 28 May 2023 04:11:24 +0000
ROA not before: Sun 28 May 2023 04:11:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:60:8d:ca:0f:ca:d5:60:5d:78:83:78:34:19:31:95:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 28 04:11:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb85ffb081152e480df9e1f60a86772fa1ba2515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f7:c7:94:5c:fb:63:9f:65:82:3d:c0:3b:3b:
40:f7:8c:77:ac:7d:00:dc:23:c2:e8:1c:1c:c6:29:
49:81:2e:42:5a:a5:af:da:6f:3e:a4:67:95:fb:cb:
8f:1d:6a:c1:f3:67:2e:fd:96:28:51:1d:76:f1:33:
14:44:d0:db:1a:cc:4f:0a:3c:cc:c5:68:fc:01:5c:
58:43:d4:da:a0:5f:78:1a:b8:b8:20:a3:4e:59:e7:
58:df:7d:13:b1:d6:4c:07:b2:35:76:09:45:e8:4c:
6c:35:b4:fc:88:22:47:0b:66:9d:5b:4b:e6:e6:d4:
97:b2:c1:3b:01:a0:98:f0:ad:87:de:28:46:f6:27:
82:1c:4d:38:5b:96:45:1c:67:92:b7:26:1f:eb:4d:
fb:02:49:36:1c:7d:1c:dd:f9:b6:89:fb:0a:9d:7d:
72:3a:02:29:e3:37:37:b2:4d:59:f5:a1:58:f0:fa:
38:55:8d:13:bb:f2:dc:db:3c:c0:59:63:40:cb:de:
42:9e:ad:df:ae:cc:a7:5c:3c:79:ef:a1:ac:f9:ff:
ae:39:d1:e3:50:49:7b:71:ba:5d:fc:1b:71:08:b1:
41:60:ff:55:f8:b7:1a:c4:3b:30:9e:a6:31:a7:14:
61:98:a8:fb:60:9b:e5:b7:1c:c7:e0:14:9b:bf:c9:
a7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:85:FF:B0:81:15:2E:48:0D:F9:E1:F6:0A:86:77:2F:A1:BA:25:15
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u4X_sIEVLkgN-eH2CoZ3L6G6JRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
60:14:39:4d:90:f5:4a:1d:5e:34:9f:2e:d5:13:29:83:0e:2c:
6c:53:3d:bb:a7:9d:3a:c5:ee:d9:89:1d:c9:f4:bb:8e:9d:d8:
33:0d:1b:8b:73:3c:56:a0:4d:d7:ec:af:78:92:4f:13:29:10:
af:90:dd:01:91:fa:54:aa:01:04:ad:d2:81:56:ee:32:be:ef:
f2:2d:7f:03:1e:16:b3:64:58:c9:94:4c:3b:4f:69:8c:50:8c:
0e:91:16:5b:9b:4f:e0:d7:51:a1:35:e2:30:bc:bc:dc:f4:d7:
a1:40:d3:18:af:7c:de:e2:b2:bb:59:3e:54:58:d1:33:3e:50:
10:13:22:76:cb:0f:6b:e9:d6:47:fc:05:23:44:3c:3f:7a:cb:
da:e1:7d:ad:b9:b1:bf:03:46:93:2f:4b:a7:81:ba:98:20:d2:
09:97:96:7d:9d:29:74:8a:4e:5d:0a:7f:16:50:2a:ec:43:c8:
41:0c:43:fe:5a:a7:7b:58:4e:b5:2c:21:fb:36:cf:dc:22:d9:
54:55:fa:4f:42:77:61:a7:23:9d:fc:3f:8d:2b:b1:55:2a:58:
96:85:44:90:4b:f8:8b:f2:66:76:0a:04:51:1d:ef:44:5f:03:
42:66:d9:a1:e5:6e:8c:d3:84:e3:8e:2e:f4:f7:3e:16:2f:43:
13:d4:6d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:36:34 2025 by rpki-client