Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/y7Qikr7vdVi3to1wXlQiXDiRX-E.roa
File: y7Qikr7vdVi3to1wXlQiXDiRX-E.roa (raw, json)
Hash identifier: jHBl+kM9QfrBWkbJ4apqUVgbo5mvVn9EtFe+QWI0qTE=
Subject key identifier: CB:B4:22:92:BE:EF:75:58:B7:B6:8D:70:5E:54:22:5C:38:91:5F:E1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018867A0B25957A419EE75A4F7FF3556BFE4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/y7Qikr7vdVi3to1wXlQiXDiRX-E.roa
Signing time: Mon 29 May 2023 13:09:24 +0000
ROA not before: Mon 29 May 2023 13:09:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:67:a0:b2:59:57:a4:19:ee:75:a4:f7:ff:35:56:bf:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 29 13:09:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cbb42292beef7558b7b68d705e54225c38915fe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:76:b1:07:0f:bd:45:55:b3:b5:01:b0:18:3f:
83:85:f4:db:82:ba:58:45:0f:11:fb:db:f4:f9:26:
cf:2a:f6:6e:e0:eb:b5:06:55:b6:5b:b7:2c:92:25:
c0:74:ca:8d:26:48:0d:28:e8:ec:e6:35:70:20:8a:
00:ff:0c:30:30:60:ba:d0:e8:74:11:f3:16:a0:4c:
9f:9d:6c:6c:ac:47:1a:4d:45:9a:54:53:2d:1d:ce:
06:a4:e0:ff:c4:95:d8:c7:93:f1:92:8c:20:c4:56:
02:53:ea:8a:6a:82:d5:a9:3b:cb:76:a8:4b:f0:2b:
d0:04:fa:d0:7d:d6:dc:7a:b4:7e:11:84:f1:b0:fa:
81:02:b9:44:41:c5:a8:df:21:56:72:8c:74:ef:bf:
aa:eb:05:9c:29:4b:e8:35:4b:64:cc:94:d7:37:be:
af:b2:d6:94:1a:c9:dc:10:b1:6f:41:86:6e:65:ec:
14:38:77:a8:94:80:ce:05:df:a4:40:59:fa:cb:84:
ba:b0:0a:e8:21:ff:da:80:ed:47:86:56:4a:1d:b0:
5b:cc:ea:28:c4:bd:af:68:da:24:c7:c7:8d:52:ae:
c1:16:38:54:e5:6a:62:ad:17:de:12:9c:2b:52:3d:
9e:41:4d:d9:f9:df:2b:37:32:7f:d3:c7:8f:ac:6b:
6e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B4:22:92:BE:EF:75:58:B7:B6:8D:70:5E:54:22:5C:38:91:5F:E1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/y7Qikr7vdVi3to1wXlQiXDiRX-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
84:fb:4d:93:7e:86:5d:7c:3b:83:76:5b:70:d0:5a:d7:1d:8d:
4d:7d:83:54:c2:0a:6e:2f:e1:15:7b:e4:1c:c2:a1:e1:ef:b3:
33:14:e2:9e:70:2c:28:a3:b1:43:33:a5:54:fa:0c:33:f5:82:
23:ca:87:b9:cc:94:28:83:01:36:3a:d1:5f:68:22:61:50:de:
f2:f1:9d:68:26:6f:1a:d2:1e:41:d5:a0:d8:52:02:cc:bc:dc:
8a:35:5a:89:44:61:dd:cc:fb:75:82:f7:e6:9b:ff:ab:76:9c:
5f:97:0e:c0:1f:f7:7e:51:ee:fe:b8:c9:17:f0:b5:ba:8a:e7:
47:94:68:f4:9b:15:7c:03:de:37:24:56:9f:8a:2e:95:43:9c:
c8:ad:bb:28:fa:5b:1c:c5:6b:6c:50:50:f4:59:54:ab:70:3b:
ab:94:3e:88:ee:31:af:47:51:f0:4f:ad:bb:46:bc:f9:c5:3e:
56:8d:ad:df:66:9f:ed:90:51:07:17:b9:e4:da:ef:87:f6:57:
b4:82:dc:31:f4:38:79:0d:43:dd:ee:c4:57:66:29:2d:e2:3e:
90:f9:a2:39:12:51:63:ef:53:ca:bb:a3:b7:cf:ba:19:53:00:
2d:d3:1b:e2:16:47:fd:67:78:e2:8b:d2:a0:ff:9a:8f:ec:ea:
92:36:26:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:49:41 2025 by rpki-client