Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RuOUSBUcTBPjtqz5GMm6VSnQ2Jk.roa
File: RuOUSBUcTBPjtqz5GMm6VSnQ2Jk.roa (raw, json)
Hash identifier: 8TLsSedA5UIivM5hTrShfsZNc0mIACZYw64BKnsEzTI=
Subject key identifier: 46:E3:94:48:15:1C:4C:13:E3:B6:AC:F9:18:C9:BA:55:29:D0:D8:99
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189676B4A5A9595B72703A5C5A006F4CE8A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RuOUSBUcTBPjtqz5GMm6VSnQ2Jk.roa
Signing time: Tue 18 Jul 2023 05:13:51 +0000
ROA not before: Tue 18 Jul 2023 05:13:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:67:6b:4a:5a:95:95:b7:27:03:a5:c5:a0:06:f4:ce:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 18 05:13:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46e39448151c4c13e3b6acf918c9ba5529d0d899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e1:cf:a9:5d:ec:d8:61:53:48:5e:71:bd:8e:
0b:22:35:7e:97:09:ec:33:47:45:64:72:9a:df:0d:
46:1c:c4:e9:2f:47:d1:2c:4c:79:4b:f0:8d:da:7f:
8f:4b:2b:27:6f:5b:be:a5:39:28:99:7d:50:9a:90:
3b:9e:3b:d5:61:f5:34:47:6c:5d:c1:2d:df:77:47:
1c:bd:e0:16:70:3a:93:00:27:00:4a:67:58:39:19:
3a:a2:d9:fe:ff:17:36:bf:7f:04:97:29:50:65:98:
08:8e:de:86:3a:df:af:c5:ae:58:3d:18:97:af:6b:
88:bf:f5:1d:5a:2a:ef:84:db:bb:34:e3:65:ef:1c:
a9:ed:b6:f6:e5:9a:1f:73:ad:29:ef:74:76:58:4c:
6c:14:f3:dc:e1:89:a0:15:39:d9:ef:33:71:13:06:
97:d3:f8:76:3d:f8:b8:8d:ca:b7:eb:98:0a:a6:6e:
80:a0:89:08:c4:71:fd:00:c5:0a:88:e9:fd:3a:29:
07:5a:e0:ca:49:2d:28:22:15:c7:d7:20:5f:8e:a7:
b2:79:0e:2a:d8:20:9b:f2:f1:1a:b4:d2:32:81:06:
d0:c7:83:57:46:02:08:2b:20:cf:d2:bc:62:99:1c:
df:b2:55:31:41:ab:4f:16:2c:2c:4b:34:a7:be:c2:
33:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E3:94:48:15:1C:4C:13:E3:B6:AC:F9:18:C9:BA:55:29:D0:D8:99
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RuOUSBUcTBPjtqz5GMm6VSnQ2Jk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8a:a6:92:e9:0d:6e:35:25:fc:a3:81:75:22:a4:47:7c:49:e3:
8c:24:19:73:0b:ca:f7:1e:ed:ca:99:51:e0:e6:cd:86:56:ad:
ff:96:9f:70:6a:c0:ba:25:9c:83:9a:3e:ff:58:d6:c7:12:52:
4b:fe:cf:37:2d:fa:fc:6b:81:56:6a:2b:9e:39:47:70:cf:93:
b6:8f:d4:9d:e1:9b:f8:15:0c:87:d3:5c:28:43:b8:75:d8:dd:
bf:09:fc:28:cb:b2:ed:36:53:0e:58:f5:65:2a:78:3e:cd:3b:
f5:4c:56:4a:ed:5f:df:0b:3a:15:83:e5:f1:d1:ce:05:46:e6:
a4:14:1c:5d:fb:dc:44:de:b0:d8:21:97:fe:c3:0d:6c:b3:d9:
15:84:37:0d:eb:21:b1:f0:fe:1b:00:ae:0c:41:08:c5:59:6c:
88:a4:04:76:21:e1:43:57:13:dd:bc:82:24:31:0a:f5:da:46:
e5:6d:3c:aa:ea:b2:27:4c:50:bb:68:c9:d6:77:c8:4d:e9:10:
4a:ac:32:b6:ca:30:3c:19:e3:74:0f:3c:5f:d8:e0:59:ae:82:
19:00:b7:de:98:cc:77:37:5a:07:5e:43:c3:cb:20:c6:e6:33:
4d:f2:34:f2:67:64:e4:fb:55:48:79:8c:0c:c3:27:87:03:d6:
ef:ad:8b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 23:40:45 2025 by rpki-client