Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x9rJ9WJGSX8kvzDOwQsUXqPHS48.roa
File: x9rJ9WJGSX8kvzDOwQsUXqPHS48.roa (raw, json)
Hash identifier: RRiOfc4EhQghvnVrtEXrKy4w81PLbqaLRrcyt9xNk5A=
Subject key identifier: C7:DA:C9:F5:62:46:49:7F:24:BF:30:CE:C1:0B:14:5E:A3:C7:4B:8F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189B1718FE2B1D22923D30A40960392ADAE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x9rJ9WJGSX8kvzDOwQsUXqPHS48.roa
Signing time: Tue 01 Aug 2023 14:12:36 +0000
ROA not before: Tue 01 Aug 2023 14:12:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b1:71:8f:e2:b1:d2:29:23:d3:0a:40:96:03:92:ad:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 1 14:12:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7dac9f56246497f24bf30cec10b145ea3c74b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:80:32:09:14:f6:40:71:5c:bf:fc:b4:e5:42:
bd:8d:37:32:78:65:99:c8:56:e5:ce:62:b5:16:9a:
f0:b5:76:9c:0b:37:5a:28:9e:1c:a4:6b:a6:b6:46:
2e:28:3d:94:95:45:55:a4:29:57:48:ad:4f:7a:08:
3f:43:04:ac:a9:aa:37:cf:e6:26:de:b8:8d:23:61:
2a:8e:94:05:4d:c9:86:9f:e1:68:41:72:b9:38:9b:
a4:50:ea:47:07:04:f9:5c:d9:73:3a:0c:77:d1:b1:
fb:86:50:d7:d2:40:dd:99:09:f2:14:9e:59:82:e4:
47:ee:ef:03:16:13:df:ff:b7:11:ef:1e:db:11:d7:
63:aa:d7:71:24:ea:f5:45:ab:79:98:fa:e6:a6:d0:
06:63:33:01:b5:5d:bd:e6:e1:5b:cb:0f:56:91:6c:
72:2c:67:a9:de:fa:87:38:68:ed:ac:14:cf:3f:fc:
c7:5a:c1:f7:67:71:51:32:c8:ee:f9:07:5c:41:35:
6c:96:63:8c:9e:a4:1e:09:44:f2:da:3a:a7:c6:97:
8b:2c:c4:a5:4e:c3:7b:1e:b2:2e:12:b0:1c:fc:0a:
6f:22:f5:42:25:b8:e8:4c:26:65:18:46:b3:b6:49:
85:a6:b3:55:1a:c6:0c:d6:df:7e:37:0b:9b:60:6c:
58:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:DA:C9:F5:62:46:49:7F:24:BF:30:CE:C1:0B:14:5E:A3:C7:4B:8F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x9rJ9WJGSX8kvzDOwQsUXqPHS48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1d:83:3f:80:2a:f0:4a:55:c3:de:3c:c7:85:54:81:c9:27:b2:
17:65:c4:a9:7f:98:4b:47:a3:35:3b:80:ec:ae:79:af:cc:df:
02:ce:47:01:bf:e6:ec:dc:97:05:f3:b3:9d:41:2b:c7:cd:f5:
32:3c:d4:c7:53:4f:a7:6c:16:c8:dc:ed:9e:a4:94:4d:58:25:
5e:3f:66:19:9a:84:ab:e9:39:24:e2:e5:80:89:c2:b3:50:f6:
1d:6d:dc:50:bc:99:15:99:9c:33:6f:a0:b9:16:26:0c:15:3a:
fc:ec:ca:dd:7c:2f:63:5f:b6:10:6e:e8:be:f3:96:36:f3:fd:
db:a4:b3:fc:f9:bf:c3:6e:9e:d6:b9:fc:76:6e:cf:ad:06:9d:
f5:2c:d1:99:93:e3:e1:6c:c4:ff:fb:b2:1c:88:06:d7:f0:4a:
dc:5f:b4:c2:32:cc:98:26:98:ab:da:5e:32:5d:0b:da:3a:a4:
c3:7d:46:4f:33:ea:46:15:9f:f1:43:0b:47:4e:24:f2:89:34:
a5:6a:f6:11:47:ac:2a:7a:45:1e:22:04:aa:18:75:65:74:73:
be:1b:19:a1:69:ad:b0:e8:57:e1:f5:e1:b2:db:c3:14:5b:32:
50:d1:48:de:e9:61:41:e1:93:6d:2e:92:da:19:73:37:c9:a9:
6e:79:4b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:49:55 2025 by rpki-client