Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4bmlgQcJ4KdgWxldhGqODbOWOSU.roa
File: 4bmlgQcJ4KdgWxldhGqODbOWOSU.roa (raw, json)
Hash identifier: 69ujewr9UCfOJlFehLXAg6tHlf7ADo3n2I3TCOFI08w=
Subject key identifier: E1:B9:A5:81:07:09:E0:A7:60:5B:19:5D:84:6A:8E:0D:B3:96:39:25
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018752CEC278EB6201001D0549D5D67249AD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4bmlgQcJ4KdgWxldhGqODbOWOSU.roa
Signing time: Wed 05 Apr 2023 19:04:54 +0000
ROA not before: Wed 05 Apr 2023 19:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:52ce:30e1/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:52:ce:c2:78:eb:62:01:00:1d:05:49:d5:d6:72:49:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 5 19:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1b9a5810709e0a7605b195d846a8e0db3963925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:68:b0:a8:12:8c:5d:b0:bb:57:0f:7a:dc:96:
7d:81:43:d6:92:95:fc:c3:25:07:01:26:47:22:34:
81:18:60:7e:09:7a:83:6e:87:10:df:c4:9c:af:f8:
15:25:de:ee:46:4a:b1:af:5e:eb:f9:1f:b1:92:18:
48:09:9f:3a:83:53:a1:6f:16:93:6a:80:b1:82:09:
fa:9d:69:d7:3f:fc:98:9e:52:51:61:57:f8:b0:b6:
64:32:82:65:dc:87:cf:93:48:c3:43:18:4e:28:43:
d0:f7:08:62:07:36:8d:93:38:e3:6f:c3:b2:5b:43:
eb:fa:8c:02:90:cc:81:c0:13:c3:87:78:59:ac:83:
ea:76:d8:94:82:84:17:ac:86:7c:d8:29:d9:de:b8:
e7:a3:b9:9d:12:4e:ba:41:23:23:59:68:53:18:9f:
7c:84:07:fa:2e:69:0b:ae:df:52:0b:22:8a:ad:1b:
8e:8e:54:21:67:16:8e:8e:52:8f:35:b6:c9:02:a0:
45:6c:44:18:a8:b4:84:51:53:a6:5b:ca:13:d9:c5:
6f:74:94:d4:9c:eb:7a:61:e8:81:2d:5b:a3:29:97:
43:d9:9e:5b:72:65:8d:43:a5:58:58:b9:ab:8a:9f:
f7:7d:62:cf:53:7c:18:cb:f4:0b:62:33:27:97:5d:
57:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B9:A5:81:07:09:E0:A7:60:5B:19:5D:84:6A:8E:0D:B3:96:39:25
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4bmlgQcJ4KdgWxldhGqODbOWOSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7b:4f:a6:89:8b:9a:13:ec:02:33:27:eb:4c:5b:a5:1b:50:3c:
19:c7:a0:3a:45:b1:57:4d:54:0d:fc:29:1d:86:7f:c2:0a:cf:
57:57:e0:06:32:3c:88:30:8d:51:16:89:39:52:f4:7a:8e:c7:
57:16:70:d9:60:fe:8e:2f:61:8e:08:a3:c6:3a:75:3c:c5:18:
54:6d:ba:61:43:28:5c:f2:e7:da:65:56:9a:b5:d8:69:87:67:
d7:55:bc:95:29:8a:d0:72:3f:eb:3a:62:6b:2d:6b:80:70:4c:
50:2d:74:dd:4f:59:ff:b4:46:eb:93:28:78:85:0f:90:b4:99:
1d:84:1c:df:5d:c9:c8:d9:e8:f7:ae:0e:2c:4f:5b:35:25:e2:
05:8f:57:97:cf:b6:54:1c:63:16:5d:5a:fe:d7:1c:1b:d0:30:
79:89:2e:35:12:00:5c:c1:00:e0:ca:39:2e:a4:1e:39:55:11:
36:fc:f5:b4:8b:12:c1:4f:55:56:a5:71:de:8d:2e:14:8c:7c:
4d:b6:6e:81:30:b3:8a:d8:66:af:68:64:8c:5f:f6:fb:43:f5:
fa:ac:90:e2:59:f4:97:85:97:84:42:f1:84:35:8c:94:cd:94:
6b:ee:ea:20:10:7f:bb:f7:5b:4d:89:3a:89:f8:44:4c:95:7c:
24:81:b5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:24:13 2025 by rpki-client