Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/z2O6SlJW9r8WOL7OyePBAi5SdH8.roa
File: z2O6SlJW9r8WOL7OyePBAi5SdH8.roa (raw, json)
Hash identifier: 6MoYj3EPhh2m/likASTc+IfE8fUIbJ21gCSNTgoHU90=
Subject key identifier: CF:63:BA:4A:52:56:F6:BF:16:38:BE:CE:C9:E3:C1:02:2E:52:74:7F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01898ACFE30B98E5866578D0627C7FC7B1C4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/z2O6SlJW9r8WOL7OyePBAi5SdH8.roa
Signing time: Tue 25 Jul 2023 02:10:27 +0000
ROA not before: Tue 25 Jul 2023 02:10:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:8a:cf:e3:0b:98:e5:86:65:78:d0:62:7c:7f:c7:b1:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 25 02:10:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf63ba4a5256f6bf1638becec9e3c1022e52747f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:7d:9d:1d:b4:87:c1:4e:90:82:86:24:82:9b:
ea:2f:64:47:73:67:b9:a1:83:63:c3:0b:0a:b2:83:
c7:3c:f9:72:ce:02:db:ff:9a:96:14:08:2f:65:96:
04:34:16:d2:c4:f9:ac:29:84:94:3e:00:5e:34:9b:
a2:ae:1a:a1:c5:2e:8b:75:17:ca:b5:31:11:ab:65:
0f:83:bc:64:77:67:fe:81:f2:60:90:92:14:e3:77:
db:2b:90:a4:48:57:9f:58:50:62:ea:e9:6b:6e:c0:
1d:07:3b:7f:34:63:a8:b1:23:2d:55:13:42:f6:15:
14:c4:99:fd:d6:7f:74:76:f8:d3:84:8b:3b:4a:03:
7c:63:a2:01:a4:30:e7:74:07:c0:9d:a0:a3:2b:80:
14:a5:90:c8:fb:ad:84:47:b8:7f:94:0a:b3:cf:d8:
86:5b:1b:08:62:95:6e:6c:27:54:b7:1e:b8:1d:11:
73:9d:6c:ff:7e:d3:29:c1:eb:64:14:bd:86:0a:9d:
01:ae:55:0b:24:fe:24:0c:fe:00:d1:ab:b7:48:60:
6e:0a:55:68:59:80:51:76:a3:3d:3b:ab:09:65:2e:
b5:96:15:3a:6c:f7:90:1e:97:69:7a:0f:e2:d3:21:
29:8a:98:dc:65:27:cc:96:4b:16:90:7a:ec:f6:25:
64:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:63:BA:4A:52:56:F6:BF:16:38:BE:CE:C9:E3:C1:02:2E:52:74:7F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/z2O6SlJW9r8WOL7OyePBAi5SdH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
34:f2:66:e9:b7:2a:ca:2c:5f:38:05:fb:18:c4:15:92:c0:28:
4a:21:d1:b7:e1:a1:e9:8a:86:b6:e7:b1:16:26:db:64:9e:b6:
84:35:4d:ad:3e:6e:91:ac:65:77:e8:87:ec:3f:27:0a:db:9f:
84:b0:49:26:46:81:f7:e2:64:b1:06:e1:05:09:a8:60:f6:0c:
40:9a:e8:c0:6f:5e:b6:b2:9e:07:2a:d8:4e:73:ae:77:f0:ac:
21:5e:3d:68:2e:22:d5:37:28:c3:2f:48:7e:77:06:de:38:4d:
b6:16:df:6c:87:7b:f2:82:c2:fb:58:4a:df:ae:98:d9:d3:f5:
42:38:20:75:95:64:b4:09:5a:2c:b4:d8:85:0f:8c:dc:51:0b:
a0:1b:18:b6:72:a9:5c:91:0a:6c:bf:d9:1c:1a:a3:72:1e:40:
5d:74:f2:5d:13:56:5d:9f:da:21:29:0b:70:55:91:28:54:b6:
b0:e4:c7:f3:19:7e:3b:19:30:5a:f2:f1:2f:42:75:76:74:f5:
ff:89:34:16:a3:dd:e7:de:5c:0a:10:70:04:0f:1b:81:b5:3f:
03:b5:46:6a:8d:73:57:9f:65:63:e1:94:0a:fc:ec:4f:f9:86:
cb:10:09:70:01:b5:73:1c:c1:11:8c:0b:9e:a3:df:af:b0:c1:
9a:c2:92:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:17 2025 by rpki-client