Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-E4VmWlrNxyp6EF9ExITb9FX5EA.roa
File: 1-E4VmWlrNxyp6EF9ExITb9FX5EA.roa (raw, json)
Hash identifier: JYpGH7rZzv0QDUmiUXlkaj77DBJkBWDBY+MrGNVhyZQ=
Subject key identifier: F8:4E:15:99:69:6B:37:1C:A9:E8:41:7D:13:12:13:6F:D1:57:E4:40
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186B028AB7A635B84C8D005DC0DFF7E957F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-E4VmWlrNxyp6EF9ExITb9FX5EA.roa
Signing time: Sun 05 Mar 2023 05:05:00 +0000
ROA not before: Sun 05 Mar 2023 05:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:b028:16d5/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b0:28:ab:7a:63:5b:84:c8:d0:05:dc:0d:ff:7e:95:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 5 05:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f84e1599696b371ca9e8417d1312136fd157e440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:10:d6:c7:02:b0:a9:ce:d7:77:8a:f4:e1:97:
5e:45:ed:97:80:9a:7f:ed:67:ac:4c:ce:5a:16:cb:
49:e6:01:55:bd:d5:cb:3f:77:c3:32:79:70:d6:ed:
7d:6e:60:ef:d5:54:7c:91:db:db:d5:11:b3:de:4e:
f0:b7:cc:af:58:da:86:0a:90:3e:f8:46:7a:57:c0:
5b:f4:b0:d0:ff:9b:97:ee:fc:e1:70:d5:4e:eb:70:
03:7c:b7:88:bd:55:81:9b:5e:fb:c1:84:c2:3a:65:
01:20:ea:5f:7f:32:26:4b:86:0b:92:53:f6:ee:ce:
4f:93:3b:ea:11:64:1f:63:94:75:b7:f5:b9:a0:6e:
3f:cb:06:04:8a:13:39:61:50:b5:9c:55:59:42:51:
19:14:0b:d5:c9:2a:83:15:ea:a9:f6:0e:98:02:31:
2c:19:9f:42:f0:c3:86:9b:d6:8d:6b:b2:8b:98:03:
3b:40:b7:84:ac:fb:c9:2e:a4:71:9d:82:6f:b9:3c:
3c:44:9b:9d:cc:86:cb:f2:38:73:27:33:72:38:6a:
e3:1a:e5:5f:9d:36:d2:fc:da:66:b0:82:dd:0f:55:
aa:03:f2:05:cc:71:61:95:a7:bf:5b:7d:1a:ba:ad:
66:59:23:e4:86:ca:55:fc:f8:74:5e:39:0a:41:a8:
ad:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:4E:15:99:69:6B:37:1C:A9:E8:41:7D:13:12:13:6F:D1:57:E4:40
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-E4VmWlrNxyp6EF9ExITb9FX5EA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
72:ae:a6:45:85:7d:01:38:32:53:51:d7:7b:18:c6:a2:c4:c6:
a6:87:f4:20:c7:72:cc:ed:5f:03:2d:69:b7:cc:c7:36:60:5d:
c6:a0:57:9f:be:25:2c:a1:60:2e:92:bb:24:d7:d5:30:b6:fb:
45:3d:24:8c:6c:eb:bc:0d:78:27:71:f0:f0:98:6f:22:12:54:
4b:81:13:31:e4:c5:c6:f8:fb:18:eb:13:d5:8e:40:06:86:b1:
35:47:ee:5c:23:ff:55:2b:97:83:66:19:71:eb:b6:2d:a4:cd:
71:a5:a5:e1:a7:bf:d9:2d:c2:fc:17:ae:bf:d3:6c:fc:6b:53:
e8:29:93:a5:91:76:af:ed:82:78:ca:02:a1:69:8a:a4:44:7f:
17:88:a0:91:ba:c8:c2:b7:39:17:a6:a2:83:db:09:33:a9:c0:
9c:02:ab:eb:ae:67:a7:04:4c:ee:9b:d2:5d:bb:fd:6a:ee:1a:
68:68:fc:c9:75:49:f7:2e:13:43:f1:53:26:b1:5d:b6:ce:28:
7c:70:e9:ba:55:ba:64:09:af:05:41:aa:7e:da:9e:0b:04:dc:
9d:14:d8:fb:f2:9f:23:48:e5:85:93:a3:66:6f:7b:b2:6e:3c:
28:92:43:7d:49:04:72:04:05:c4:7e:25:ec:ab:3a:df:d1:8d:
0e:d8:61:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:26:23 2025 by rpki-client