Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4zHE5YKsTJ-h3xIIn4-Cp71bGpU.roa
File: 4zHE5YKsTJ-h3xIIn4-Cp71bGpU.roa (raw, json)
Hash identifier: eCNFNvXMSgWYHoa0uCr+nGYXzlhb5tiXUma8n3ANp4w=
Subject key identifier: E3:31:C4:E5:82:AC:4C:9F:A1:DF:12:08:9F:8F:82:A7:BD:5B:1A:95
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189507687181F667AF33DF4B7D4EED11EF4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4zHE5YKsTJ-h3xIIn4-Cp71bGpU.roa
Signing time: Thu 13 Jul 2023 18:14:52 +0000
ROA not before: Thu 13 Jul 2023 18:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:50:76:87:18:1f:66:7a:f3:3d:f4:b7:d4:ee:d1:1e:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 13 18:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e331c4e582ac4c9fa1df12089f8f82a7bd5b1a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1d:61:aa:05:85:2a:e8:fb:e1:fc:b1:33:8d:
b8:e3:fa:0c:a7:43:50:19:f7:20:fd:0b:45:c2:52:
4e:6d:e5:7b:06:8b:d9:cc:19:f9:15:f5:b3:86:78:
6f:a2:cb:2b:9d:69:cb:43:f1:4b:a0:19:20:14:3b:
d1:ef:6c:b1:e2:6b:7c:35:16:8e:53:21:60:70:1d:
72:1c:b5:f8:6f:f2:d0:72:b2:42:77:ba:8b:35:af:
04:64:c4:e2:46:6e:5b:ab:89:a5:3c:43:56:df:d9:
9a:e2:48:4d:77:78:c8:19:56:e4:ee:14:35:ea:c0:
15:47:c7:6e:1d:01:a1:fa:62:0c:62:d2:aa:fc:6b:
6b:39:ad:94:cc:02:1a:7e:bb:01:9e:ae:24:0f:2c:
30:59:86:13:66:ec:5a:f9:76:6a:26:a0:e2:77:50:
46:d0:83:0e:19:06:c7:7d:8f:56:e9:b1:c7:6a:8b:
1d:94:09:33:05:1f:f4:c4:52:41:fa:2c:91:7b:e2:
f5:29:04:d9:3c:34:f0:3a:ea:73:a7:7b:21:70:f1:
47:00:d3:33:7d:bb:2b:2b:23:5e:74:b2:f1:f2:70:
da:00:e6:ca:3b:02:69:60:b6:93:63:77:1d:d5:ef:
67:e0:39:0a:9f:cd:15:d7:ff:2b:10:b1:44:b5:f2:
fa:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:31:C4:E5:82:AC:4C:9F:A1:DF:12:08:9F:8F:82:A7:BD:5B:1A:95
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4zHE5YKsTJ-h3xIIn4-Cp71bGpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
af:6c:c9:77:88:91:e5:3c:3c:7e:dc:18:1b:90:f8:bc:86:0f:
84:16:84:5a:15:5d:f9:0b:09:98:8b:3a:ac:23:a9:42:31:a9:
02:7c:67:21:dc:2f:a4:fd:6a:24:4d:af:fb:47:fa:78:0c:13:
d0:d9:06:94:ff:7a:6b:86:5a:a6:62:23:45:35:cb:3c:18:5d:
fe:79:fa:ff:31:9c:95:b2:e5:40:c6:cc:95:35:41:f2:71:5c:
5c:0a:1f:aa:ee:80:d3:ab:79:53:dc:37:9c:da:b2:fe:1c:23:
56:66:69:27:a9:7f:15:ea:88:e2:b0:0c:ae:2a:f3:f1:30:6c:
a4:ae:42:80:e8:bd:b9:86:96:11:2b:4f:6b:80:c5:27:09:ef:
fc:4b:6b:86:d2:9e:6c:4f:a7:98:3d:ce:4f:88:1c:cb:62:29:
4d:79:04:49:42:34:93:90:ec:99:59:38:48:81:2f:fc:38:38:
35:ba:d9:62:c3:0b:1a:a5:2d:e9:15:3c:12:bb:a7:3f:4c:f0:
0c:fe:91:e8:43:f2:33:d0:2f:52:3e:86:26:73:f9:68:b4:a3:
5b:40:68:00:69:e1:a0:25:d3:7d:ef:3d:1a:ec:19:d0:a2:34:
5a:d7:56:e4:a7:10:09:0e:2d:d9:04:0f:39:95:1c:6d:b8:7d:
e1:92:dd:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:07:28 2025 by rpki-client