Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OO39jMgPcxkiwmR-BNef9gjl_Rk.roa
File: OO39jMgPcxkiwmR-BNef9gjl_Rk.roa (raw, json)
Hash identifier: QFEs29f0FaoOR0JEctpTQNIXIzkj/8zaptMVZCTPSSc=
Subject key identifier: 38:ED:FD:8C:C8:0F:73:19:22:C2:64:7E:04:D7:9F:F6:08:E5:FD:19
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189B77226DEC4769E3F1F8AE1A2D9FE780B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OO39jMgPcxkiwmR-BNef9gjl_Rk.roa
Signing time: Wed 02 Aug 2023 18:10:58 +0000
ROA not before: Wed 02 Aug 2023 18:10:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b7:72:26:de:c4:76:9e:3f:1f:8a:e1:a2:d9:fe:78:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 2 18:10:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=38edfd8cc80f731922c2647e04d79ff608e5fd19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:45:07:1c:3c:2f:9d:df:f5:21:f2:f3:af:07:
77:e8:31:90:29:c6:05:6e:da:ba:c8:de:7d:22:9b:
05:eb:75:aa:20:d2:2e:f7:59:3f:29:8e:d7:42:d4:
c1:08:c7:ab:91:6a:4b:bf:ae:82:70:e2:1b:a8:e9:
df:8d:44:12:9f:b6:42:13:86:89:3d:14:a8:24:d5:
1d:8e:d8:c6:83:fc:77:fd:78:d3:2e:36:2b:ae:dc:
e5:5e:3f:6e:59:fa:98:e4:97:85:bf:5c:75:f4:e5:
90:2f:e8:d5:10:da:ed:5a:0f:fc:48:2e:1e:5b:3d:
cf:c5:a5:86:4a:98:3f:6d:16:e3:6b:47:eb:5e:d5:
42:ec:c4:68:c9:4e:e6:98:f9:86:3e:5d:8d:02:70:
76:69:5e:9a:2e:ad:5d:ac:74:f5:73:03:d1:77:50:
7c:c0:46:84:40:7a:92:64:39:3d:2c:0b:d8:57:67:
00:a4:ab:e8:c6:49:ee:be:20:51:f7:18:6f:b3:c8:
85:82:db:04:fe:7c:4b:c2:5d:9c:55:f5:7e:e7:a0:
bd:fa:b9:e6:c7:29:c1:02:5f:19:71:fc:72:77:de:
70:63:ee:9b:94:cd:73:4e:e2:18:45:a8:34:bb:68:
fb:0f:ba:c1:72:04:d7:3b:f3:e8:47:20:d7:9f:89:
59:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:ED:FD:8C:C8:0F:73:19:22:C2:64:7E:04:D7:9F:F6:08:E5:FD:19
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OO39jMgPcxkiwmR-BNef9gjl_Rk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
79:4f:19:ad:ee:f2:0d:6f:4a:a6:bb:fa:24:9c:97:f0:e2:86:
47:40:07:ea:77:6b:c8:64:f3:f9:b5:86:46:17:fb:ac:f2:3d:
a2:3b:19:78:8b:1b:75:2f:a7:6b:5a:90:70:f2:bb:a7:df:fe:
86:6f:b6:40:db:88:3b:2d:70:2d:c9:12:e5:86:82:26:c2:0d:
27:fb:b9:6e:c6:2f:38:c2:3a:8e:d0:46:3b:09:e5:6d:16:7f:
74:70:37:6a:8c:2b:7c:1c:e4:86:bb:86:94:27:63:e1:2d:6b:
a6:be:88:bf:17:74:d3:41:f2:f6:8d:70:66:d6:02:eb:20:ef:
7e:bb:0c:f9:23:fa:ae:9b:a7:81:1d:d1:49:9d:9e:24:f8:c2:
ef:47:b8:cb:2d:70:d8:c7:45:c3:a6:7c:41:e4:ba:e9:ad:95:
d8:ea:a0:06:9a:84:fe:99:30:a0:e7:3c:32:df:3f:80:ce:09:
8e:6c:ee:4d:16:56:83:7a:da:c1:92:f8:93:02:ce:22:50:0d:
8a:80:ae:16:f1:6b:cf:44:20:24:5a:ce:09:2b:f6:b7:1b:07:
41:5a:59:f2:8c:1d:51:ad:1b:32:98:15:d5:59:8c:17:15:14:
e3:68:ad:af:d8:71:e3:02:4c:77:bd:58:82:15:65:ad:e3:c9:
a5:cb:cc:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 08:01:08 2025 by rpki-client