Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u4iWvAlpk3oOg3zJMLT0-da7sN0.roa
File: u4iWvAlpk3oOg3zJMLT0-da7sN0.roa (raw, json)
Hash identifier: 40l2s5hMjjLSO9/51lZ5N700SXYDr4Zbrwbw3AWPOAg=
Subject key identifier: BB:88:96:BC:09:69:93:7A:0E:83:7C:C9:30:B4:F4:F9:D6:BB:B0:DD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018660C8CBABBEF2D4A04C04B5FEF03868E9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u4iWvAlpk3oOg3zJMLT0-da7sN0.roa
Signing time: Fri 17 Feb 2023 19:10:17 +0000
ROA not before: Fri 17 Feb 2023 19:10:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:60:c8:cb:ab:be:f2:d4:a0:4c:04:b5:fe:f0:38:68:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 17 19:10:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb8896bc0969937a0e837cc930b4f4f9d6bbb0dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1c:e0:23:9e:c2:1f:39:15:6b:11:73:61:77:
14:40:0f:e4:11:2a:9f:ed:5a:38:17:d2:31:f2:25:
71:c1:57:dd:99:1e:46:bc:0b:d8:f6:1a:bf:d1:7c:
3a:b3:11:38:d6:53:1b:f6:01:3a:44:42:0d:b9:93:
a0:71:c5:63:65:dc:30:a4:33:5d:2e:88:a8:f4:d3:
c9:6f:c8:7a:90:12:87:e7:43:e7:29:01:eb:4f:b8:
eb:9b:f6:13:82:2c:94:90:f4:76:d4:23:3f:2f:a2:
06:08:05:c1:3b:fc:e3:7b:1e:ae:32:db:fa:8b:30:
57:8b:ff:1c:0b:96:12:e8:75:0d:88:be:c4:89:f8:
e6:4d:6f:56:d5:e2:7e:11:72:4d:85:b0:ea:fa:21:
c1:f9:90:13:ff:f7:b8:6a:bc:d8:d0:1c:14:51:fa:
45:58:35:9a:98:96:79:ee:1d:30:a1:7a:83:33:22:
29:b9:6b:5d:cf:c9:fe:4d:40:b9:92:b7:50:90:50:
7e:ca:f2:cf:d5:9b:38:bb:8f:26:5a:88:e2:20:9a:
7c:3f:08:4d:c3:af:21:88:8f:8f:fc:b8:0c:ce:d7:
0b:a3:c3:1c:9b:70:f0:9e:1e:00:0e:03:18:b4:2c:
52:e4:e9:7e:db:c1:99:04:b8:c5:5a:c9:69:a3:98:
43:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:88:96:BC:09:69:93:7A:0E:83:7C:C9:30:B4:F4:F9:D6:BB:B0:DD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u4iWvAlpk3oOg3zJMLT0-da7sN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a2:33:84:12:98:93:36:b6:ff:e2:1c:d6:4d:ed:e7:25:08:0c:
ca:1d:82:ff:08:17:80:bf:f8:6a:c5:ae:c2:52:f5:4e:e5:95:
2d:5f:df:79:a5:53:59:ce:68:12:50:0a:66:4c:db:fb:ee:f8:
5f:b8:4e:6c:f6:3b:a9:32:6e:56:cd:08:d8:9b:4e:b0:ae:8f:
7c:95:0e:51:2a:7a:4f:fa:a1:7e:b2:7b:2d:61:77:73:d5:2b:
c8:13:4b:79:8b:8a:9c:f8:07:25:9c:08:78:43:5a:fb:3f:a4:
10:de:e8:72:1a:75:51:bf:e4:76:f1:66:83:9b:dc:87:ac:6b:
3a:d7:c1:de:e8:d3:bf:9a:a7:03:e1:0b:6a:b8:3f:5b:9b:cd:
b1:3f:a3:cd:ad:8b:16:e9:88:17:2d:f3:23:66:69:8e:9c:51:
c1:b3:b6:47:1e:60:f9:1e:55:9e:d2:88:38:34:bb:4a:9a:86:
4c:55:8d:a3:78:af:58:03:fb:45:15:c0:ac:08:47:7f:23:13:
4d:67:00:b4:ab:51:f9:1d:5f:d0:36:f8:87:c6:d3:ff:42:9b:
c5:ba:5c:56:45:04:7a:f8:dc:9d:9a:79:90:f2:7a:47:7a:15:
0b:f7:2b:8a:8f:57:cd:aa:6c:6d:02:bc:65:64:e6:00:e3:98:
01:aa:8e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 22:44:12 2025 by rpki-client