Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0CoUiMWz1astzbKuLn6CWAbS6dE.roa
File: 0CoUiMWz1astzbKuLn6CWAbS6dE.roa (raw, json)
Hash identifier: h3JTOQkn8O6sEsbRXTW14FXpsmYGbMBoIaaDHNhsy5Y=
Subject key identifier: D0:2A:14:88:C5:B3:D5:AB:2D:CD:B2:AE:2E:7E:82:58:06:D2:E9:D1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188C63D94B5006080E8ACCDB54147FCABCF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0CoUiMWz1astzbKuLn6CWAbS6dE.roa
Signing time: Fri 16 Jun 2023 22:05:04 +0000
ROA not before: Fri 16 Jun 2023 22:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:188:c63c:e7df/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c6:3d:94:b5:00:60:80:e8:ac:cd:b5:41:47:fc:ab:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 16 22:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d02a1488c5b3d5ab2dcdb2ae2e7e825806d2e9d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:d3:44:35:3c:0e:cd:4d:4a:98:f3:bd:2d:0f:
e7:0c:b8:4a:5c:64:1e:6f:7c:cc:37:c9:a7:f7:13:
34:ec:e7:e4:cb:3b:15:1d:8a:dc:60:27:03:7f:fd:
9e:91:9d:ce:90:01:b3:1f:eb:ae:29:39:cb:a6:85:
53:12:f6:1e:64:ef:c2:f5:32:76:ce:7b:45:33:bc:
40:94:fc:48:aa:04:0d:85:cc:df:59:93:5e:1b:e0:
ba:70:6a:79:98:9b:17:f3:a0:52:e6:de:e1:48:00:
9a:16:62:ab:e0:23:57:cc:3d:73:26:60:98:84:ec:
24:c9:6b:07:ba:aa:31:1a:4d:ee:f0:42:d0:d7:f3:
06:09:db:93:79:cd:96:54:11:69:db:a9:39:f7:8b:
05:4f:0b:0b:65:b0:ef:4d:b6:0c:56:9f:0c:bb:e3:
c5:35:ff:36:61:fe:ea:81:c9:5e:db:be:65:87:5d:
52:f3:27:53:f3:7c:a2:58:05:be:ad:72:dc:cb:87:
23:83:45:ea:00:15:66:8c:19:b2:24:58:f8:0e:1f:
9d:b9:18:fe:21:d2:21:e8:2d:52:62:48:50:37:c2:
f4:a4:c6:5c:a8:8a:96:68:67:ef:90:ce:c3:85:8a:
92:b0:2d:0d:c2:8f:2b:f8:74:43:b9:47:62:44:20:
f9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:2A:14:88:C5:B3:D5:AB:2D:CD:B2:AE:2E:7E:82:58:06:D2:E9:D1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0CoUiMWz1astzbKuLn6CWAbS6dE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1c:f9:c5:1c:c0:2d:ac:ab:f3:3e:8b:10:d5:1c:f1:3a:f9:58:
eb:d9:d1:6b:3e:26:b8:c5:f1:9e:54:ca:a4:51:07:a9:08:92:
31:0f:83:99:ff:eb:1d:24:16:9d:af:94:e1:29:73:0d:18:ae:
8c:8a:cc:d1:15:f7:1d:7e:96:43:3a:16:05:e3:12:d5:1c:75:
9d:d5:bb:07:3c:b4:fd:ce:0f:cd:40:d1:8c:a0:5a:2d:72:d2:
49:b5:3b:ce:3b:8d:51:ec:b2:8d:01:bf:40:19:36:db:11:a6:
1a:05:a3:81:8b:7a:00:bc:57:a6:8f:53:65:09:57:13:a3:9b:
74:38:52:42:29:02:01:8b:c1:24:ac:dd:61:e1:e3:c9:dd:d9:
71:12:5b:8b:86:f4:d0:ee:9c:bf:57:a7:5a:fb:08:68:9b:11:
2c:a7:dc:26:83:d1:a1:a0:8a:fa:5f:6d:cb:27:f0:1d:e6:67:
33:0d:ac:f9:cf:0a:ac:ea:7e:f5:62:47:fb:5f:60:5f:57:d2:
93:b0:77:58:52:eb:c0:53:59:36:b5:13:bc:39:80:0a:c7:16:
20:99:42:ff:2d:05:92:d6:a8:dd:c7:3a:00:68:9c:21:d4:c0:
2e:e8:c8:41:99:6e:96:96:06:48:fe:d5:6b:e0:83:ec:6d:6c:
19:f2:5b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 15:25:41 2025 by rpki-client