Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RLOpQmxF3E59q1yJI62oRj9WSa0.roa
File: RLOpQmxF3E59q1yJI62oRj9WSa0.roa (raw, json)
Hash identifier: g0a1PkV4tHbrWMYbo0n7Xyf6ZB38kj9+xY2ZovDbs60=
Subject key identifier: 44:B3:A9:42:6C:45:DC:4E:7D:AB:5C:89:23:AD:A8:46:3F:56:49:AD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186805853B94021538DCFB771A67F330466
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RLOpQmxF3E59q1yJI62oRj9WSa0.roa
Signing time: Thu 23 Feb 2023 22:15:17 +0000
ROA not before: Thu 23 Feb 2023 22:15:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:80:58:53:b9:40:21:53:8d:cf:b7:71:a6:7f:33:04:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 23 22:15:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44b3a9426c45dc4e7dab5c8923ada8463f5649ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d2:02:a4:f3:e1:51:2e:0b:a9:d9:93:11:dd:
e3:3b:9f:f6:71:a7:c4:07:ca:38:33:9d:36:f0:aa:
dd:a4:24:eb:ca:9a:12:19:4e:b7:1c:0a:80:83:1c:
b4:36:2f:c8:00:6f:36:5c:30:e8:9d:81:00:72:09:
13:16:78:50:bf:6a:e8:92:c9:62:b8:52:c5:d2:e2:
1f:28:b1:c8:9e:b1:a7:b5:16:9e:96:72:49:ac:d9:
ca:56:8a:de:ad:25:54:e4:cc:24:e4:f8:a9:fc:0f:
f0:18:1b:fb:07:b4:86:e7:79:52:c4:49:92:3e:8b:
89:57:90:e8:bb:ac:f6:69:e5:c2:ec:f7:37:7f:ec:
e8:fb:7c:77:9c:9f:1d:fe:a4:6c:0b:ee:52:b9:82:
98:45:49:d7:19:33:e4:06:5b:7a:27:ae:b0:4d:5d:
fe:77:18:b2:47:c3:38:cc:a1:ca:48:a1:13:fe:12:
e9:8c:85:f5:c5:1d:20:ad:dd:76:f8:c4:32:15:e8:
a3:26:89:42:54:cd:9b:0c:a4:94:4f:49:ea:73:ad:
b9:ee:76:e9:a3:44:63:27:1b:b6:db:0a:2d:5f:52:
6f:f1:b7:5b:1c:b6:e5:39:99:54:4c:fc:ca:d2:29:
54:5e:5b:38:38:55:35:31:9d:1e:98:4f:1f:db:8f:
6a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B3:A9:42:6C:45:DC:4E:7D:AB:5C:89:23:AD:A8:46:3F:56:49:AD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RLOpQmxF3E59q1yJI62oRj9WSa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
59:44:15:b3:9f:05:d0:41:88:0d:fc:da:d6:87:85:55:7a:6f:
39:ad:2d:65:cb:2c:ce:0e:8b:71:4d:c4:29:e8:05:2b:7f:4e:
91:70:79:cb:d1:6a:ae:46:3d:e4:be:f4:e8:be:80:90:e4:63:
39:d5:3b:fd:9b:d4:f8:45:bb:eb:85:d7:fa:dd:7a:b0:fb:67:
ff:53:40:7e:f7:8f:6c:27:c0:93:31:56:9d:66:8c:18:2d:25:
94:f0:38:30:11:a1:ba:57:e5:6c:41:b6:8d:ee:11:f2:84:05:
17:b1:39:32:2e:5b:99:b2:d2:c3:f4:a0:9b:ad:92:ad:5e:b8:
9d:14:d0:5b:d3:2a:45:a0:88:af:51:02:54:f0:e5:df:20:fd:
51:33:20:89:d4:ea:2e:3f:7c:6a:8b:be:3b:93:ad:69:5c:2f:
d3:64:09:45:d2:15:ff:c1:c4:38:c1:5b:f1:3a:af:cd:f9:d9:
d1:1a:ed:0a:db:cb:59:4e:22:37:4e:e6:a2:87:59:e0:94:ac:
14:4e:60:30:a3:f3:5a:9b:50:27:16:a8:41:c8:94:62:38:0f:
de:71:53:15:9c:48:59:54:a2:40:d5:a3:cc:6f:15:ef:ad:51:
78:fd:7d:d2:a8:87:96:df:75:eb:a5:2a:2f:83:f4:7e:0b:43:
9e:85:9d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:31:10 2025 by rpki-client