Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/v4Z8PHQ3tIT9jiVF3R9nTzCluzo.roa
File: v4Z8PHQ3tIT9jiVF3R9nTzCluzo.roa (raw, json)
Hash identifier: nufspl0p6vS6c0DxRpztzoiL9QxgWvVPOhW0X/J9Ru8=
Subject key identifier: BF:86:7C:3C:74:37:B4:84:FD:8E:25:45:DD:1F:67:4F:30:A5:BB:3A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185ACF83F6FC608F60A43ABDECC3ADAB805
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/v4Z8PHQ3tIT9jiVF3R9nTzCluzo.roa
Signing time: Fri 13 Jan 2023 21:10:28 +0000
ROA not before: Fri 13 Jan 2023 21:10:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ac:f8:3f:6f:c6:08:f6:0a:43:ab:de:cc:3a:da:b8:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 13 21:10:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf867c3c7437b484fd8e2545dd1f674f30a5bb3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:06:f3:ec:36:ea:bf:87:1c:38:4d:59:41:4e:
13:eb:8f:e3:46:0a:51:dd:bb:2c:a4:6e:f0:0f:c6:
3d:b9:f5:23:d6:24:5b:ca:10:cf:3f:f0:3e:5c:40:
f2:2b:78:43:b4:0a:59:96:dc:df:64:18:c2:ca:9e:
f2:f5:1e:19:57:b6:d2:88:d3:43:69:ca:5e:eb:c5:
f5:37:b4:c6:d5:ff:4a:b5:a9:32:22:8e:56:e2:7c:
e5:db:31:0e:fd:7b:81:3c:7a:5e:aa:03:aa:9f:07:
91:75:da:49:78:ac:c6:bc:a3:78:f7:5c:41:3c:38:
d8:63:2e:7f:6d:74:8a:ca:3d:a5:39:aa:e0:9e:cd:
f3:85:40:73:8e:3c:23:7c:d0:f8:77:fb:cc:f9:4f:
4d:cb:fb:ed:e0:09:a8:a0:d5:53:95:35:82:dd:99:
ec:d1:2e:5d:a8:65:cf:48:5b:57:84:86:1d:06:63:
ef:04:3e:cd:fd:a5:d1:5d:2a:9b:aa:12:e9:38:94:
96:61:17:76:35:bb:b9:74:b0:92:23:6d:0a:8e:2b:
ca:e1:3a:d6:72:ae:6b:e7:81:fb:04:2a:04:f9:ee:
cb:dd:dc:fb:ed:e9:19:36:ea:fb:b0:99:6f:61:fa:
4b:34:8b:1a:75:ca:3f:c0:0b:17:93:ea:24:3d:a2:
cc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:86:7C:3C:74:37:B4:84:FD:8E:25:45:DD:1F:67:4F:30:A5:BB:3A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/v4Z8PHQ3tIT9jiVF3R9nTzCluzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3c:97:1d:e5:95:0b:04:94:ff:68:6a:a4:6b:c0:7a:68:f8:dd:
5a:31:b6:51:da:3d:02:26:5d:55:c7:bc:20:09:73:a8:24:d7:
dc:fc:c8:f3:14:49:51:42:f9:53:f2:ed:f5:c0:b5:18:e9:97:
18:e0:0f:fc:22:6e:40:be:9e:ae:7a:14:f8:e5:e4:f2:cd:d2:
dd:97:8c:18:26:28:dd:81:6b:1b:37:23:c1:ca:03:db:ee:d9:
a5:64:68:56:65:cc:4f:bc:37:25:cc:a2:cd:4b:32:c2:10:2f:
d0:d6:b4:bb:4f:ec:56:a6:df:b5:9d:db:14:6a:80:f2:74:e8:
a5:50:f5:29:bf:25:b6:b1:ac:49:93:45:42:40:e1:a6:37:d5:
5f:01:19:80:b6:30:08:b7:7d:73:52:7c:03:f7:d4:cc:3f:dd:
7d:25:96:70:07:aa:c0:9a:74:4a:15:4a:8f:b5:a9:ff:3a:84:
ea:22:56:88:ae:b1:48:7a:a7:ba:22:dc:a4:2a:67:ba:63:ee:
8a:9f:5c:20:c1:04:de:37:2f:ea:ad:27:13:77:43:55:f8:c0:
17:31:fa:fe:f1:74:43:d8:f2:0f:2a:2a:03:be:0e:8b:f3:40:
e3:3d:15:6a:bc:66:52:05:73:7f:83:7b:41:3e:8a:91:1f:9e:
44:c8:3b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:24:31 2025 by rpki-client