Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xBR0uT4sT6osMST9-v7fF0ygvDo.roa
File: xBR0uT4sT6osMST9-v7fF0ygvDo.roa (raw, json)
Hash identifier: PLwoD4Dg4mg+3BXhxmBw+c0+h7IlQMXfGopOVmWM+6g=
Subject key identifier: C4:14:74:B9:3E:2C:4F:AA:2C:31:24:FD:FA:FE:DF:17:4C:A0:BC:3A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189C67846C3EFF11D2E1C14EE638CA09BBB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xBR0uT4sT6osMST9-v7fF0ygvDo.roa
Signing time: Sat 05 Aug 2023 16:11:58 +0000
ROA not before: Sat 05 Aug 2023 16:11:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c6:78:46:c3:ef:f1:1d:2e:1c:14:ee:63:8c:a0:9b:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 5 16:11:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c41474b93e2c4faa2c3124fdfafedf174ca0bc3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:32:96:2f:54:96:2b:12:e6:66:4a:44:5a:d7:
ee:6f:60:7e:f6:2b:f8:51:52:da:44:80:8a:78:0b:
17:36:a7:f1:3c:fe:83:a6:c8:31:1a:89:b8:97:c0:
6d:0f:17:ee:ff:05:11:ea:03:1e:5e:30:51:3a:0b:
2e:e1:8a:43:a1:87:48:34:e6:10:ff:3a:df:a5:73:
55:9a:db:ec:27:4b:e4:9e:71:d6:b2:52:bc:35:e0:
87:a4:5d:cc:6e:4b:80:12:ba:af:c7:6f:26:f1:0d:
6e:ad:d5:87:26:ad:6d:dc:47:da:f4:6f:6d:49:56:
b5:65:5a:ea:b6:15:ab:3a:88:fc:02:ec:51:ef:65:
01:ee:c0:c2:d6:47:2e:5c:09:c9:6a:a0:f4:e1:32:
1d:19:67:d5:dc:56:03:65:04:91:e4:79:8a:23:ca:
fb:6b:26:72:98:e8:ef:7f:d0:1d:a9:14:34:ac:d8:
a3:e1:61:76:d2:9e:65:db:ac:de:54:11:1a:89:e2:
39:d7:c1:5b:74:2c:f7:f4:d2:20:24:45:ff:22:52:
a4:8e:64:ec:3a:99:14:34:2a:2d:42:29:6b:28:cb:
7c:e7:15:9a:c5:d0:aa:b2:cb:f7:6e:46:09:15:9a:
99:30:29:12:ea:1a:b1:17:39:41:e3:19:a3:e4:05:
a1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:14:74:B9:3E:2C:4F:AA:2C:31:24:FD:FA:FE:DF:17:4C:A0:BC:3A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xBR0uT4sT6osMST9-v7fF0ygvDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
13:e4:45:a2:c8:87:a6:17:1b:75:f1:30:03:a4:16:59:ba:71:
5b:2b:da:e8:da:bd:90:94:b0:f7:2a:d1:61:22:43:d1:b3:5a:
48:49:f4:e3:fd:08:6c:80:d2:e5:ac:de:d0:4b:28:a5:c0:cb:
0d:69:e3:45:71:a9:b8:ae:87:8c:d3:63:18:e6:33:5d:f2:1d:
ad:fd:cb:b6:6c:87:8c:40:00:97:83:ce:94:86:a9:b7:84:d0:
bd:a8:b3:2e:6b:05:c9:ce:84:ad:6d:98:36:7f:f6:d5:86:9d:
b2:1d:6b:8e:62:82:81:05:d8:e0:9e:80:c4:3a:93:58:b3:2e:
c1:fb:3b:f1:d2:5c:dd:a1:ea:3a:76:f1:ef:7a:2a:57:f6:45:
3f:e7:d5:35:9a:e7:13:36:54:b7:b3:36:2b:02:80:30:e5:ff:
29:e7:77:67:95:84:a7:c4:92:61:f0:19:e7:79:ac:06:c1:0f:
16:f4:18:a3:4a:16:17:65:dc:dc:0f:78:e5:61:a4:96:63:64:
07:0d:a2:9a:ee:aa:b9:95:28:58:3c:12:ab:0d:d6:33:d5:09:
e9:0d:ea:c8:c3:1b:4d:71:f0:a1:9b:5a:5b:d7:1c:3e:50:84:
3e:60:3c:0a:08:d8:b0:33:a5:bc:0a:9d:2c:5e:ec:39:18:92:
8b:48:13:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 05:01:32 2025 by rpki-client