Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u_sKffw2zM6u0yU4xDl_gK0E4-Y.roa
File: u_sKffw2zM6u0yU4xDl_gK0E4-Y.roa (raw, json)
Hash identifier: 3wiDLxKdGztG3ZbVvC7SfrU1kfFYzlpYzIf4C7WW2a8=
Subject key identifier: BB:FB:0A:7D:FC:36:CC:CE:AE:D3:25:38:C4:39:7F:80:AD:04:E3:E6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01897259AC7EE18AA1CF7616353FDA21BE9E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u_sKffw2zM6u0yU4xDl_gK0E4-Y.roa
Signing time: Thu 20 Jul 2023 08:10:26 +0000
ROA not before: Thu 20 Jul 2023 08:10:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:72:59:ac:7e:e1:8a:a1:cf:76:16:35:3f:da:21:be:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 20 08:10:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bbfb0a7dfc36ccceaed32538c4397f80ad04e3e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:60:8f:ec:9c:5b:1c:b7:67:30:02:4c:fa:d8:
1d:ab:4e:d8:6d:e6:9d:15:05:74:a0:d0:33:a5:99:
f5:01:0a:64:88:04:60:33:a6:e5:83:09:c0:0c:fa:
a1:7b:ed:49:35:aa:52:4a:3b:22:0f:83:ca:43:97:
fd:10:f9:cd:b1:10:d7:4f:60:d2:09:e9:d4:10:93:
0d:6a:cd:59:2e:b5:95:d5:82:d5:69:d9:d7:91:49:
a6:61:51:52:25:60:e9:b9:8e:42:c3:80:7c:55:34:
47:af:2b:f4:dd:04:a6:97:c0:50:14:0f:69:6c:7c:
a8:22:b5:b7:20:a7:73:41:48:de:1b:b4:6c:db:61:
2f:c2:b6:3d:b0:ae:ba:91:89:35:2c:85:d8:9d:f7:
0d:be:97:54:a6:b6:ae:b5:15:6a:10:a8:da:ae:cc:
98:70:2b:f9:80:06:3e:0e:3d:53:5b:1f:d5:32:3c:
54:ab:87:98:12:14:13:46:34:c9:3a:19:1c:ad:22:
f9:ac:a3:35:57:2d:7c:b8:88:4e:f7:bb:d1:3b:22:
c3:5a:24:45:3c:86:7a:8b:42:94:86:9a:4a:9d:a3:
2f:4a:4c:f9:79:a7:4b:f9:21:02:a9:16:bc:0b:36:
86:b2:6c:4b:5b:c4:25:8c:8b:87:b4:aa:76:c8:c0:
18:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:FB:0A:7D:FC:36:CC:CE:AE:D3:25:38:C4:39:7F:80:AD:04:E3:E6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u_sKffw2zM6u0yU4xDl_gK0E4-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
60:f4:08:bb:02:5c:6e:2f:4b:18:ee:ef:98:1c:c1:58:05:e8:
02:33:3a:29:83:0b:3f:40:88:7e:05:0c:a8:41:00:c2:21:b5:
db:e8:19:7d:55:f5:cb:7a:5d:b9:db:e1:f9:69:c1:e9:6b:21:
5a:52:29:33:d6:5d:47:42:33:e2:8c:ac:d9:49:c9:80:9f:7b:
9a:34:fa:48:92:63:ab:5e:07:f1:b8:b5:ae:7e:e2:f7:8b:ca:
ca:86:b5:0b:7f:eb:5c:94:28:56:33:43:ac:a8:0d:95:eb:47:
31:b9:dc:31:01:75:bc:52:e4:c4:b9:e0:30:1a:f0:ab:0c:2b:
6a:90:f7:35:6a:a2:10:82:c6:ef:9d:92:be:56:24:12:93:86:
8a:14:2a:ec:1f:b8:72:b6:ff:7e:f5:00:ff:78:ea:3f:cf:a5:
2b:2d:62:68:6d:12:c9:fe:d0:db:23:2b:0c:77:4b:0f:14:7e:
e0:90:ba:68:b8:16:c1:ae:81:50:66:4b:ab:b7:7d:6a:34:77:
d9:9e:c7:54:1a:ad:9b:3c:a4:04:59:b0:6a:9d:8b:7b:24:4c:
53:19:c3:9c:df:6d:8f:6b:7b:fa:39:5a:21:22:40:76:6a:90:
b2:cf:af:1c:0e:9d:75:d4:4e:12:77:f6:10:0a:69:88:9c:16:
ce:98:f8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:04:54 2025 by rpki-client