Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4MBjGnox7nYrM9q7n8PtMoB2INk.roa
File: 4MBjGnox7nYrM9q7n8PtMoB2INk.roa (raw, json)
Hash identifier: RSpjHnhiHKCgI7TBspiBi4brGu/zARL0/LOQGr5wqJ0=
Subject key identifier: E0:C0:63:1A:7A:31:EE:76:2B:33:DA:BB:9F:C3:ED:32:80:76:20:D9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189BA3E1619CCFA3435218EDA0575E215AC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4MBjGnox7nYrM9q7n8PtMoB2INk.roa
Signing time: Thu 03 Aug 2023 07:12:58 +0000
ROA not before: Thu 03 Aug 2023 07:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ba:3e:16:19:cc:fa:34:35:21:8e:da:05:75:e2:15:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 3 07:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0c0631a7a31ee762b33dabb9fc3ed32807620d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f7:58:88:71:11:30:ab:b4:a1:4d:c8:63:ee:
ae:aa:19:97:58:8b:e0:b8:3a:29:b7:d0:09:9a:d9:
6b:fb:a0:23:f4:d7:40:cd:ae:7f:b5:24:95:89:76:
95:1c:b9:d3:70:46:a8:7d:aa:90:70:3b:e0:10:f5:
d1:81:06:f7:0b:20:f4:53:3c:b2:d6:db:71:71:71:
b0:3d:5c:9f:d7:6e:58:7e:7d:44:72:b7:8d:15:2e:
32:64:14:fe:58:0a:af:da:3b:1a:fd:a5:1c:d9:93:
ac:8c:72:83:cc:d3:6c:3f:ef:bb:27:a0:17:ea:e2:
28:c5:45:24:d8:fe:22:2a:d1:39:50:27:b1:bb:db:
f8:ff:2b:c6:ea:5c:10:46:a8:d5:f7:02:d3:6b:1c:
69:2a:6d:5d:27:37:d7:71:12:56:e4:4a:b6:a2:03:
f2:18:91:25:af:f8:51:2e:85:8c:bc:54:e6:cc:8d:
45:b2:61:3d:7e:ac:0e:32:2a:b2:f6:fb:00:1a:be:
60:3b:8e:27:fa:23:b8:a7:74:2d:ee:cf:c1:fe:c4:
e5:ab:b9:fd:53:d6:4c:a1:32:99:f5:fa:97:f4:14:
58:07:81:da:a6:5d:72:63:76:3e:dd:9a:22:61:6c:
92:c0:2e:d7:7b:20:40:ff:95:c7:08:97:f5:a6:42:
72:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C0:63:1A:7A:31:EE:76:2B:33:DA:BB:9F:C3:ED:32:80:76:20:D9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4MBjGnox7nYrM9q7n8PtMoB2INk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ae:ed:a7:a1:4f:37:b9:39:62:9b:9d:b2:3b:97:5b:22:fb:4a:
ea:f8:1a:17:5d:6b:7a:41:76:43:8d:32:26:f2:08:1c:ae:84:
cc:b6:50:65:c9:d0:a8:2d:25:33:24:89:01:66:7d:f4:0c:41:
8c:c2:ea:db:76:4d:c3:b9:b4:77:18:36:14:fc:98:a7:3a:b8:
f1:2d:a2:d7:6c:33:aa:b6:9f:ce:ca:50:99:ad:61:24:16:6d:
89:c8:8f:d7:0b:55:47:9c:f2:e6:70:30:aa:92:7d:da:cf:ae:
23:11:da:99:10:a7:15:fa:51:24:94:60:ec:d0:28:51:ae:3c:
70:c5:cb:36:82:69:64:36:38:90:be:8a:d8:a1:2f:fb:3b:5e:
cc:39:b2:21:84:f1:95:bd:42:28:47:12:29:4d:ea:bb:f1:c9:
68:0e:6e:f9:70:31:6c:59:46:ad:ab:5f:b5:6c:e6:eb:01:84:
7d:e7:f5:ad:f5:2d:b6:dd:63:c2:cd:af:4d:10:f9:79:2b:7f:
05:c5:e3:e9:a5:cc:bd:03:c6:01:39:21:16:98:99:2f:fa:ff:
f4:08:6d:83:d3:72:28:2e:b0:04:3b:df:a3:f7:d8:23:3c:c2:
ff:82:ab:e2:50:94:04:54:46:fb:6a:0c:57:30:4b:76:04:3c:
e3:24:6d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:11:47 2025 by rpki-client