Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x87QVJtWhXUcuJgMMWvwAd7XJWM.roa
File: x87QVJtWhXUcuJgMMWvwAd7XJWM.roa (raw, json)
Hash identifier: 1dvGIiVAlotQggzf+HJj8oXR5ewDm8n2aGok+Rfld+8=
Subject key identifier: C7:CE:D0:54:9B:56:85:75:1C:B8:98:0C:31:6B:F0:01:DE:D7:25:63
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01872CD37A71882589A1D9BA083A05C6EF5C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x87QVJtWhXUcuJgMMWvwAd7XJWM.roa
Signing time: Wed 29 Mar 2023 10:04:29 +0000
ROA not before: Wed 29 Mar 2023 10:04:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:187:2cd3:6aac/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2c:d3:7a:71:88:25:89:a1:d9:ba:08:3a:05:c6:ef:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 29 10:04:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7ced0549b5685751cb8980c316bf001ded72563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1f:b2:81:e2:25:10:62:ed:7e:9a:d1:a9:67:
72:14:2c:6a:0b:a7:3b:c7:e5:0a:f4:89:c9:f8:6b:
8d:d3:46:87:f3:e8:b8:e5:35:7c:fa:b7:4c:31:c9:
87:11:c5:f7:f9:ab:a0:f3:7d:ad:44:0b:1c:e0:d3:
13:6f:89:2e:67:95:24:90:3a:e3:2b:5f:e5:8c:14:
7e:ef:b1:a7:11:5d:ec:86:5c:7a:5e:ea:f2:15:04:
ca:2e:08:a3:4d:9f:59:c8:b0:2a:c7:7c:64:3d:7a:
e2:0c:39:d9:1e:e8:31:1c:1f:ef:1f:f7:e4:44:16:
f7:1e:62:15:b0:24:5b:f2:1f:28:e8:37:9b:f7:e7:
99:68:b5:b4:62:cc:be:39:e1:23:01:fb:34:43:0e:
83:61:33:1a:12:de:d2:44:2d:d5:6b:60:62:9c:da:
ea:23:7b:c2:2a:93:ed:a0:01:28:79:43:1b:2b:0e:
fc:5f:04:d2:af:2a:aa:d0:76:4e:ac:9e:ad:48:7e:
c3:34:fd:cb:57:dd:bf:8d:7f:af:ec:a4:7f:f5:65:
76:8a:c2:d1:60:65:3a:64:68:5e:1d:63:b1:d5:fc:
91:60:cd:a2:cc:c2:32:c0:4f:7d:8b:7b:72:75:ac:
6b:94:18:df:f6:2e:dc:ec:08:f0:c4:df:3a:4b:34:
44:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:CE:D0:54:9B:56:85:75:1C:B8:98:0C:31:6B:F0:01:DE:D7:25:63
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x87QVJtWhXUcuJgMMWvwAd7XJWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
28:bc:8e:07:9b:bd:f4:49:c5:ad:01:ec:1a:e7:ae:55:16:cc:
b1:00:13:d0:2b:12:96:d2:6e:c8:4e:1d:25:14:96:93:3e:94:
52:c9:f9:c4:d2:48:76:4c:1c:43:89:c8:29:9d:15:09:8e:de:
97:cc:ba:ec:89:7e:0e:e5:e7:c5:98:e0:6a:eb:4c:c9:be:25:
2d:51:0d:01:ea:07:3a:6b:88:04:d6:9a:81:f3:f3:e0:4c:75:
21:cf:85:c7:f7:9f:04:26:c6:5b:e7:3c:39:29:c7:3e:51:dc:
9f:d9:16:a3:5d:66:14:be:92:c9:70:94:b6:59:d5:20:91:87:
b6:95:bd:c7:b3:c9:bd:05:75:18:43:86:8d:3b:c4:37:12:e1:
83:96:33:ba:b1:ed:45:87:7e:aa:38:3c:df:fa:07:8c:7c:b2:
40:3f:86:ad:b6:d6:f0:a2:72:34:e9:ea:d3:2b:13:62:4e:d6:
62:0f:e3:fb:ab:62:e3:0c:ea:b5:79:27:bc:37:df:10:48:b5:
02:22:fc:49:75:48:84:a2:7f:cf:cf:7d:e5:61:90:78:30:52:
c6:f5:c7:36:27:60:8e:69:44:02:24:50:92:30:4b:69:e5:3b:
77:f5:58:51:f1:c4:34:49:c0:01:da:d6:a3:f0:fb:e8:42:07:
46:e8:01:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:15:53 2025 by rpki-client