Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u78IyfZxlfacwiv44zv-ciNejGw.roa
File: u78IyfZxlfacwiv44zv-ciNejGw.roa (raw, json)
Hash identifier: sg7l/Od4VzUGNHg+d+irKTEHITs1RZhbbkNxu0IVzzA=
Subject key identifier: BB:BF:08:C9:F6:71:95:F6:9C:C2:2B:F8:E3:3B:FE:72:23:5E:8C:6C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186F5803C1D4AA4E5F831AB790976D5E7F5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u78IyfZxlfacwiv44zv-ciNejGw.roa
Signing time: Sat 18 Mar 2023 16:14:27 +0000
ROA not before: Sat 18 Mar 2023 16:14:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:f5:80:3c:1d:4a:a4:e5:f8:31:ab:79:09:76:d5:e7:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 18 16:14:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bbbf08c9f67195f69cc22bf8e33bfe72235e8c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:60:ec:cb:77:8e:df:19:30:3d:b0:49:3d:2e:
1e:41:40:ae:85:a1:91:85:4a:f7:f7:91:41:a1:ac:
06:52:9f:69:2d:35:50:4e:ff:1c:47:e1:cd:ff:d1:
d0:7a:86:4c:03:ac:4a:e9:da:32:9f:dc:0f:35:52:
70:08:ec:81:86:fe:70:1b:06:40:a4:7d:c3:c4:68:
b9:db:96:91:da:ba:43:e7:98:95:f9:09:73:b1:07:
b2:5d:b7:5c:f1:ed:e5:70:38:1e:65:72:a5:05:44:
f2:1b:30:b9:3b:24:52:cd:23:b7:13:f2:e6:da:52:
07:12:66:f3:aa:3f:6b:99:ec:66:23:1b:8e:87:2b:
0d:c9:8b:1f:f4:ed:91:59:9a:df:ee:5d:b4:99:ff:
f1:62:a3:80:7f:b7:80:50:f4:83:e3:d8:93:3f:d9:
94:e3:dd:c9:bc:d4:7b:01:3e:c5:9f:50:4b:35:ec:
99:4d:9b:ea:d3:f3:78:b8:25:82:d7:42:56:ba:f0:
eb:29:19:ed:36:1e:9b:99:85:22:60:fe:ea:90:80:
25:fb:37:71:9b:ea:d6:6a:ef:25:59:c0:1d:c2:7c:
be:04:b8:67:51:b1:53:3d:b6:b7:6f:60:92:af:f9:
20:75:83:c0:3a:60:29:5c:8c:c1:8c:67:34:d9:96:
3a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:BF:08:C9:F6:71:95:F6:9C:C2:2B:F8:E3:3B:FE:72:23:5E:8C:6C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u78IyfZxlfacwiv44zv-ciNejGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
26:35:ac:78:20:9c:8d:50:19:65:f7:97:57:d6:34:a5:21:91:
b8:2e:b1:28:7c:8e:5c:9f:97:9d:9d:22:93:f5:11:55:8b:7b:
7f:4d:ae:1a:d4:b3:5e:49:12:8a:11:e6:e5:43:b1:8a:5e:8b:
4a:a8:79:b4:7e:72:e4:4e:32:0c:00:79:97:21:a2:a0:e8:b8:
e1:d1:54:84:04:97:71:68:ec:81:65:d8:18:3c:03:be:e5:4b:
41:3a:aa:86:6b:37:96:cc:5a:8c:19:b6:aa:3f:97:a0:dd:5b:
97:a5:17:c1:c0:31:14:ae:64:3f:1e:4c:f8:15:49:a2:c7:a1:
9a:25:f1:b8:17:39:47:06:49:71:0d:9a:04:af:92:d4:e1:e0:
eb:a8:8d:1f:81:47:97:f4:93:58:7b:39:47:6a:1f:6f:66:b2:
5b:56:02:6b:90:73:93:a3:6a:e7:38:a3:c6:9b:27:eb:ef:c0:
0d:66:db:69:78:c7:5e:83:1b:38:49:e3:91:f8:b2:c2:dc:35:
f5:ed:60:9e:b8:f0:75:7c:89:f5:08:26:64:4d:40:95:bb:ca:
0c:ad:93:ff:bf:7e:55:9e:db:85:77:ef:55:75:83:e9:af:73:
9a:9d:e3:54:2f:05:2a:c6:fc:83:9a:8f:5a:60:9f:b4:88:1a:
b1:70:ad:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 19:06:11 2025 by rpki-client