Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/F1sCa3UK8oiuWez9Dqcq9iWsuzU.roa
File: F1sCa3UK8oiuWez9Dqcq9iWsuzU.roa (raw, json)
Hash identifier: anK7Uc33fYWYa5f2Bm+oTpkB3/VSpNWkddafOFjgJ3k=
Subject key identifier: 17:5B:02:6B:75:0A:F2:88:AE:59:EC:FD:0E:A7:2A:F6:25:AC:BB:35
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189CFEA313F328E0559B2061128F18C0B74
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/F1sCa3UK8oiuWez9Dqcq9iWsuzU.roa
Signing time: Mon 07 Aug 2023 12:12:59 +0000
ROA not before: Mon 07 Aug 2023 12:12:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:cf:ea:31:3f:32:8e:05:59:b2:06:11:28:f1:8c:0b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 7 12:12:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=175b026b750af288ae59ecfd0ea72af625acbb35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:81:0f:b3:0d:8c:d9:3f:64:c2:ed:1d:a8:e9:
86:98:fb:8d:51:47:20:77:8f:50:1d:54:a8:51:90:
08:cd:7e:b5:bc:c7:fa:bf:33:fd:eb:92:25:1f:e1:
76:24:e2:29:90:c4:1d:0e:ee:40:59:d3:54:06:db:
49:fb:ce:34:c4:39:0a:cb:64:9f:71:e3:47:6c:64:
c4:32:ed:bc:b0:2a:e6:60:d9:f6:5b:5a:b4:1f:9c:
21:aa:74:63:e3:35:59:87:e8:9f:02:18:05:0f:6b:
b2:5e:14:89:d4:c7:63:97:39:89:10:f2:55:9c:6f:
3d:77:b6:72:c4:8e:5e:04:26:80:58:21:81:b1:d1:
6a:b9:33:1b:db:d8:bb:33:8c:16:12:b5:a9:cd:a8:
ad:2d:de:ff:b8:0c:45:7e:ff:3b:6a:34:91:7b:92:
59:2a:45:3d:c9:6f:a9:7f:8e:f6:ee:5e:10:0d:d7:
95:3a:b6:5a:a4:84:5f:8c:e6:3c:8d:f0:b1:aa:37:
6e:85:54:b8:36:85:b9:37:3f:1e:80:8c:ab:23:b7:
0c:e4:be:38:28:b2:6e:ff:08:04:2a:3d:21:46:c2:
a1:1c:ec:b4:e2:36:e3:a2:78:51:a3:c7:f9:04:00:
41:a4:a7:0a:13:75:19:cc:06:14:6b:00:19:3f:03:
85:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:5B:02:6B:75:0A:F2:88:AE:59:EC:FD:0E:A7:2A:F6:25:AC:BB:35
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/F1sCa3UK8oiuWez9Dqcq9iWsuzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
86:04:77:cd:af:05:ec:33:9b:e8:0a:57:9f:88:1f:e3:62:f9:
50:17:f7:51:dd:a4:b3:99:d3:c9:13:f4:54:60:20:1c:f1:fa:
d2:ee:37:7e:cf:1e:7c:7d:42:64:3b:5c:8d:58:a9:45:be:d1:
a5:44:a0:74:57:2b:e1:7a:d6:da:29:13:b9:d8:b2:24:47:15:
6a:ee:e8:5d:a6:2f:0d:4b:5c:46:cf:78:be:43:ba:35:37:a4:
73:44:93:4c:96:1b:ff:8d:bf:e9:cf:88:fd:46:01:59:30:1e:
17:13:44:1a:db:51:b0:89:f3:90:3f:56:28:41:1e:78:1f:09:
bc:a6:84:ca:00:5c:5f:b5:45:c6:57:1a:8c:ab:d8:bf:d6:24:
a6:6b:5f:f4:d4:66:d4:d3:28:97:3b:8e:ce:09:a7:29:fb:29:
d2:1f:25:79:0e:56:1b:30:38:d3:38:d4:a8:fe:11:68:03:d5:
9e:b9:05:a9:2c:ef:6f:ea:cd:4f:40:40:65:b3:52:d6:5f:08:
17:72:e4:54:51:62:ab:70:f2:19:37:cb:57:6f:a1:f3:e7:10:
59:c3:3d:4d:a6:81:fd:c1:e2:8d:7a:75:ab:7a:a6:1a:51:c9:
ca:4c:32:c8:08:ea:cd:d3:a0:e2:66:b2:9a:f9:7e:de:ac:54:
5a:00:81:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 07:33:40 2025 by rpki-client