Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/v1X-d0ymIrcKsGvT_mHasp1wsdQ.roa
File: v1X-d0ymIrcKsGvT_mHasp1wsdQ.roa (raw, json)
Hash identifier: EFbxQzNmRTPpyUeXQocz1wmxd3McWj7isyeBM5Grb6o=
Subject key identifier: BF:55:FE:77:4C:A6:22:B7:0A:B0:6B:D3:FE:61:DA:B2:9D:70:B1:D4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189C3404AE881652E0878AA638847CED112
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/v1X-d0ymIrcKsGvT_mHasp1wsdQ.roa
Signing time: Sat 05 Aug 2023 01:11:57 +0000
ROA not before: Sat 05 Aug 2023 01:11:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c3:40:4a:e8:81:65:2e:08:78:aa:63:88:47:ce:d1:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 5 01:11:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf55fe774ca622b70ab06bd3fe61dab29d70b1d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d9:d8:e0:06:3f:bd:14:7f:76:6a:1f:94:34:
18:df:11:a4:cf:ca:15:67:10:fb:03:1e:63:33:70:
ff:e4:96:4a:bf:35:9e:fe:8d:f2:e5:e1:16:3e:8e:
c1:63:17:1b:68:92:ea:18:34:3a:a6:14:2d:af:fe:
d1:d9:20:d2:ef:99:7b:1a:84:3f:bb:56:ed:d2:6a:
4c:9d:f6:26:73:e4:9c:28:98:ef:46:da:a1:36:d6:
43:84:d0:78:e6:d6:3b:47:b3:9d:14:95:f7:e2:db:
b8:4a:d3:d8:21:5b:47:ac:09:24:69:5c:10:17:c2:
c6:10:4a:b2:26:78:84:0c:2f:10:42:b7:6d:04:a6:
5b:af:04:ba:d0:73:71:21:9d:e7:76:ee:7f:24:0c:
e3:69:57:89:33:7c:9f:64:7f:0e:3f:1b:17:d8:cd:
5e:0a:03:a4:73:77:a9:7c:75:1d:0e:92:0c:cf:39:
62:85:0e:81:8b:0c:32:35:29:41:8d:16:7b:0b:c6:
b4:f5:b9:3d:4a:ab:8c:2b:d6:fb:65:21:5b:52:f9:
a0:21:7d:c3:a7:2a:9b:b0:a9:fc:3c:d2:6b:78:89:
79:93:58:02:fd:54:a3:88:47:db:1a:46:b7:42:ff:
74:b4:66:4d:e6:34:6a:fd:ab:fd:5d:9c:1e:2e:3f:
a5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:55:FE:77:4C:A6:22:B7:0A:B0:6B:D3:FE:61:DA:B2:9D:70:B1:D4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/v1X-d0ymIrcKsGvT_mHasp1wsdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
05:7b:73:87:78:c7:d5:03:46:6c:02:df:25:9d:18:fc:c8:53:
21:83:da:5f:18:25:a8:c0:b2:94:c7:52:2c:c8:16:ba:d2:4e:
5d:87:47:6c:21:5a:e6:6b:65:3a:78:b4:18:c3:bd:41:63:09:
6b:69:9d:d5:93:0e:93:6f:83:0e:80:26:40:e4:2e:2b:04:48:
90:db:c5:33:a6:0c:44:8c:26:6e:fd:b6:85:bd:5d:66:ea:7b:
ab:ef:d8:fa:b2:a4:7f:e3:d7:d2:34:20:6e:45:1c:89:e5:a3:
59:b3:d0:b9:90:4e:8a:21:50:6f:71:81:da:74:2d:09:35:5f:
93:ae:b5:37:2e:b4:cf:a6:34:22:c3:7f:27:5c:ac:ed:0d:67:
3b:1c:06:47:2b:59:80:df:b5:60:a5:ee:eb:3a:64:5a:0c:12:
f4:54:19:9d:1e:9f:d0:27:7f:a9:23:85:89:6f:71:3d:4d:d0:
ac:08:bc:b0:d6:5f:71:95:e7:19:b3:0a:9d:59:8f:6d:9c:2f:
43:34:f3:e1:93:24:90:33:ac:66:ef:6e:09:67:f0:63:7e:87:
24:ce:c2:7f:36:e1:12:1e:30:e9:66:1a:ba:34:15:ad:d8:5f:
2b:4c:8b:40:76:18:19:f9:1e:77:e6:3d:1d:d0:c0:2f:9d:0b:
db:45:cb:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:53:20 2025 by rpki-client