Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Plzs7irjKNcVA5zMUgkO_9Yp85o.roa
File: Plzs7irjKNcVA5zMUgkO_9Yp85o.roa (raw, json)
Hash identifier: owqbQVZxd3gJsBrBnyzhXavArlSO88f1lP6xQKnWos4=
Subject key identifier: 3E:5C:EC:EE:2A:E3:28:D7:15:03:9C:CC:52:09:0E:FF:D6:29:F3:9A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187FFFE5075C7FFC9C8B3AC9EED45DB0219
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Plzs7irjKNcVA5zMUgkO_9Yp85o.roa
Signing time: Tue 09 May 2023 10:11:09 +0000
ROA not before: Tue 09 May 2023 10:11:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ff:fe:50:75:c7:ff:c9:c8:b3:ac:9e:ed:45:db:02:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 9 10:11:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e5cecee2ae328d715039ccc52090effd629f39a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:cd:81:83:80:cc:41:3f:9e:d3:78:6b:a6:6c:
3d:46:59:b0:fa:3d:88:60:5f:a8:b2:1d:ee:c2:e5:
7c:8b:54:98:a5:ff:7e:5a:e4:5f:72:ce:60:cb:12:
f9:bc:79:b1:19:a7:c8:a8:59:71:fe:c8:10:4a:b8:
53:c0:c4:aa:1a:6b:f7:de:42:c6:76:91:93:f7:af:
69:34:0d:f9:16:d9:87:8a:7d:de:17:d9:c5:66:68:
85:63:d0:a3:95:54:48:97:6b:10:8f:7c:de:66:ed:
4c:ad:e3:6c:51:53:8b:75:51:68:dd:fd:67:0b:39:
c2:e5:8a:03:db:cb:02:b1:ff:de:1a:0f:58:59:ab:
ee:61:03:9c:c5:33:79:d8:22:0a:71:f4:99:5b:9f:
f0:4d:74:3f:c5:6a:da:a0:e5:59:68:c4:2a:bf:ca:
ff:c1:5e:26:4b:9c:d0:e5:01:5b:a7:05:d2:07:4e:
db:b3:45:33:0a:39:bc:9b:91:68:bf:3d:f5:33:09:
6d:ab:22:db:fa:c3:81:a8:f9:cb:e1:45:db:e2:e4:
1c:e5:f7:b2:a2:fa:ba:c3:10:aa:26:4a:5d:1f:08:
fa:43:90:da:3d:16:e0:75:03:d4:a3:4a:f1:af:a4:
5d:e4:1f:45:3d:91:81:2c:e6:db:8d:87:31:2c:e9:
30:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:5C:EC:EE:2A:E3:28:D7:15:03:9C:CC:52:09:0E:FF:D6:29:F3:9A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Plzs7irjKNcVA5zMUgkO_9Yp85o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4f:df:76:fe:d8:72:fa:ea:f7:44:9b:77:2b:7a:dc:c5:ac:2d:
91:28:58:00:05:2f:fc:86:67:8c:a3:61:ac:aa:86:24:b7:99:
bb:94:f9:de:c9:c7:94:8f:af:fa:03:96:20:f5:a5:ed:74:47:
24:c9:72:7e:78:14:3d:26:4e:b5:ec:c0:d2:35:42:3a:25:1f:
33:a5:65:42:63:bf:c5:09:a3:1a:53:b8:9b:ac:69:a7:d4:81:
d9:b1:e3:d4:4f:0b:21:f6:25:d0:f1:b0:c3:56:65:fc:2c:f4:
f6:01:93:fe:60:29:6c:6b:90:07:86:14:e6:31:99:e9:f9:b2:
7e:f9:d5:4a:2b:9a:2c:14:86:9a:3a:ad:85:2f:39:0e:4f:42:
15:97:9e:57:27:57:17:07:01:4c:c2:0d:e1:04:77:9c:71:98:
78:b1:0e:77:1d:ae:c2:20:45:19:96:c5:19:08:23:fe:fe:4e:
7e:27:ab:ba:28:20:7e:98:c1:a8:4a:93:00:4b:81:02:f8:7f:
3b:60:ad:83:5a:e9:9e:a6:0d:36:1f:e7:e5:45:a0:82:ab:13:
74:89:f0:74:60:3c:36:20:02:03:a9:2d:f6:36:25:7d:74:81:
0d:9f:02:d4:4f:c7:90:36:75:3c:9b:6a:7a:0b:41:40:a1:25:
53:49:d5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 18:01:46 2025 by rpki-client