Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0reveKbM4i7Bhi7wl3IDFx_0i8c.roa
File: 0reveKbM4i7Bhi7wl3IDFx_0i8c.roa (raw, json)
Hash identifier: p3kvy/oN5jVNgrd4qgHy8XRFGQf4aGafa8yw4aLrU+E=
Subject key identifier: D2:B7:AF:78:A6:CC:E2:2E:C1:86:2E:F0:97:72:03:17:1F:F4:8B:C7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A36B3AE0CBAD256EB06585396F6C037F9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0reveKbM4i7Bhi7wl3IDFx_0i8c.roa
Signing time: Sun 27 Aug 2023 11:14:19 +0000
ROA not before: Sun 27 Aug 2023 11:14:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:36:b3:ae:0c:ba:d2:56:eb:06:58:53:96:f6:c0:37:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 27 11:14:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d2b7af78a6cce22ec1862ef0977203171ff48bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d7:c3:90:92:e1:92:9f:20:e7:de:80:14:99:
13:c1:e4:a1:7c:69:fe:4e:34:d5:ac:86:70:c7:91:
ab:10:a5:31:9b:2e:0d:42:4f:30:1b:a3:8c:aa:85:
2b:44:f1:de:ab:02:d0:68:24:c4:fb:34:b3:d1:fa:
81:04:c5:71:bf:fd:18:8d:21:d1:78:8d:ec:26:e3:
8e:9c:f0:09:c6:70:2a:48:25:24:7f:31:02:8f:b6:
e9:4d:a8:05:b0:28:74:83:60:be:ce:8a:3a:c4:51:
1a:99:96:63:b1:b6:8d:42:61:83:ea:7b:0c:09:7f:
67:e8:50:c8:c8:31:ff:e2:c0:84:1c:c8:4f:e4:40:
3e:a9:a3:85:94:47:b9:8c:f5:ed:c3:92:3d:ea:d3:
59:38:3c:3f:9c:0f:57:7a:b2:63:67:32:34:aa:6d:
82:c2:43:c7:4a:99:69:a9:a2:af:a5:d0:a2:c1:3c:
6a:bb:96:71:d9:1c:56:62:3b:cb:08:a6:e3:1d:49:
cc:81:86:e8:20:55:fb:5b:da:ad:1d:1a:db:48:c0:
75:5d:df:96:b4:fd:80:9e:c8:8b:e8:7f:22:14:74:
35:55:97:ef:8c:81:8d:e8:4d:9f:ed:e2:72:a9:7d:
f9:c6:8a:8d:5b:be:43:d1:e3:08:8a:ae:d7:8d:6d:
f0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B7:AF:78:A6:CC:E2:2E:C1:86:2E:F0:97:72:03:17:1F:F4:8B:C7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0reveKbM4i7Bhi7wl3IDFx_0i8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2d:c0:7a:29:c3:89:79:ec:69:c2:62:55:27:a4:c8:e1:52:5c:
63:11:6c:0c:ed:b9:0d:d0:af:95:5c:bc:ee:92:7b:b4:4b:64:
28:e4:2a:e4:37:c6:80:98:6d:d3:93:ec:06:a8:70:6a:3c:11:
17:3b:e3:8a:e5:34:55:ee:02:fe:18:2f:06:3e:f6:fb:7f:c4:
ec:0f:6b:78:09:f1:93:8c:81:03:ee:bd:5b:c2:6c:15:b1:9b:
44:85:32:fd:6b:0a:2e:c1:a0:9d:29:db:22:36:ff:1d:c0:13:
14:e5:9a:6e:01:06:79:b3:66:75:2d:b7:ad:73:e9:44:5d:96:
45:81:b4:fd:b4:3b:3d:cd:0b:3c:2d:cc:ba:1b:ee:18:20:af:
05:1e:48:d1:ad:58:0e:4b:86:6e:8b:31:21:19:56:f9:a5:65:
13:8b:86:73:5a:0b:f1:f3:6b:43:fe:d3:9e:f8:e7:10:76:f0:
ac:b7:85:6d:ca:5e:76:9f:ff:d4:c3:bc:65:77:ac:36:9e:44:
d5:e5:3f:42:d1:a8:ac:0f:a8:0f:b7:22:e3:d2:59:81:94:8f:
0e:78:7e:76:8b:43:4b:21:54:00:b9:e2:72:47:f5:59:e7:7b:
df:1f:87:30:36:ca:a2:4a:b7:c0:c9:b1:ca:d9:ce:34:20:3a:
fa:36:17:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 17:31:40 2025 by rpki-client