Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/urZgQNYWsyMz6rsorHoxaziWm44.roa
File: urZgQNYWsyMz6rsorHoxaziWm44.roa (raw, json)
Hash identifier: nVMjf0FrD76zb1bP2TxgfwzOjpCCKR5+nuFxr8M75bE=
Subject key identifier: BA:B6:60:40:D6:16:B3:23:33:EA:BB:28:AC:7A:31:6B:38:96:9B:8E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187BDE8C6A5188318779CCE6C3EB6182B44
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/urZgQNYWsyMz6rsorHoxaziWm44.roa
Signing time: Wed 26 Apr 2023 14:12:41 +0000
ROA not before: Wed 26 Apr 2023 14:12:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:bd:e8:c6:a5:18:83:18:77:9c:ce:6c:3e:b6:18:2b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 26 14:12:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bab66040d616b32333eabb28ac7a316b38969b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2f:14:8c:89:89:83:58:39:eb:56:f5:2c:7f:
99:9b:12:52:99:d1:c2:19:be:41:e6:5c:4a:dc:36:
d1:c2:00:48:53:1e:30:27:bd:e8:a3:1a:e2:f8:8d:
4e:62:eb:0d:23:0e:c0:c8:ea:a1:7a:b9:b1:64:e9:
17:86:7b:7f:b1:1a:8f:f1:39:74:ed:de:8b:c1:ce:
68:59:af:cc:d4:da:00:6c:11:fa:10:43:8b:52:73:
30:1e:ec:ec:87:f8:d2:05:f2:6a:6f:f8:6e:fd:0f:
cb:a2:ac:7d:f5:11:70:fb:82:d3:59:a2:ac:5c:49:
1c:18:0c:6d:82:32:46:25:1b:56:e4:b7:79:fc:ff:
8a:2d:12:b2:9b:2a:7d:42:c5:3d:61:15:60:ae:c8:
17:ab:fb:63:73:73:b9:9d:cd:ee:83:4a:2a:c8:28:
a5:1b:dc:2a:c1:bb:8e:32:d1:83:82:5f:d6:36:62:
44:ea:59:55:51:9d:e9:24:bf:87:4e:3d:45:2e:be:
db:11:f2:fd:7b:88:e5:15:24:1f:84:0a:f4:d4:83:
93:27:2f:59:bb:3a:27:d5:df:35:31:1c:b6:23:ff:
5c:3c:19:6f:fe:cd:49:5e:39:a2:e9:9c:ad:5f:09:
8c:7c:c9:eb:2d:5e:a1:a6:79:8e:94:eb:15:b0:06:
7a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B6:60:40:D6:16:B3:23:33:EA:BB:28:AC:7A:31:6B:38:96:9B:8E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/urZgQNYWsyMz6rsorHoxaziWm44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9d:14:1b:4e:20:d1:36:5a:8e:10:d2:71:12:f7:92:bb:69:19:
98:9f:3c:f9:25:b7:f2:8c:2b:6c:64:99:8a:95:b8:4e:44:8d:
e8:99:6d:2a:5d:51:a0:43:7a:af:e1:f6:31:5d:6c:5d:1b:ef:
61:87:fe:6d:78:62:64:86:56:aa:dd:99:5c:ed:9b:df:8c:d4:
98:40:2b:7d:69:d5:11:fc:33:23:37:7a:46:67:73:55:6c:83:
f3:96:71:59:7b:f1:2b:f2:b6:2f:59:ee:7c:7d:11:09:a6:20:
92:9d:5c:ef:c3:86:cc:04:76:02:15:44:67:17:fb:76:d5:65:
4b:20:5a:11:2b:5c:d5:66:43:b0:c2:11:ba:4d:6f:2e:cf:08:
5e:19:75:5c:d5:f0:3f:d3:fb:ca:09:45:59:ea:37:fb:9f:ff:
22:84:2d:d1:61:58:ad:d5:23:40:d4:c5:6b:6e:24:be:1f:db:
6a:c2:82:a4:0c:39:e3:07:0f:f4:cc:af:74:16:d9:df:20:0f:
70:e2:3b:0e:1a:a9:4f:f8:3a:42:43:75:40:b3:3b:b9:44:1e:
4f:68:2b:e8:4b:20:97:93:5c:c8:68:85:67:85:75:36:cd:05:
5e:8a:59:c5:87:78:d3:f5:c3:a9:60:b2:90:2f:9d:18:48:06:
89:00:6b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 05:36:53 2025 by rpki-client