Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/S0FaRCNM0F81lV4bLLFjm-I4JVQ.roa
File: S0FaRCNM0F81lV4bLLFjm-I4JVQ.roa (raw, json)
Hash identifier: hmvJBG45XIuibbfc4O6t/A0mgykWkZWhf44+5llfREM=
Subject key identifier: 4B:41:5A:44:23:4C:D0:5F:35:95:5E:1B:2C:B1:63:9B:E2:38:25:54
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186AB7C14F8BAE5B03C6781E8E60EEE8B06
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/S0FaRCNM0F81lV4bLLFjm-I4JVQ.roa
Signing time: Sat 04 Mar 2023 07:18:00 +0000
ROA not before: Sat 04 Mar 2023 07:18:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ab:7c:14:f8:ba:e5:b0:3c:67:81:e8:e6:0e:ee:8b:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 4 07:18:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4b415a44234cd05f35955e1b2cb1639be2382554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:dd:63:2a:39:1b:8f:78:25:77:b6:48:f6:f6:
47:36:9e:81:7f:2f:59:ff:29:15:66:33:02:ad:a2:
50:c7:a6:94:db:24:a7:51:25:84:84:85:42:3b:8d:
e9:b8:d3:80:b9:29:0e:d9:94:1e:cf:90:6e:43:8a:
c5:40:d1:06:f5:d5:da:b4:40:18:25:e1:85:42:2a:
3b:ba:cf:fa:15:42:4b:63:fd:e7:c1:f5:b7:74:20:
4d:df:33:7e:be:92:be:52:70:c5:56:72:be:87:42:
38:28:44:d3:c7:70:41:2f:df:55:51:85:3c:8e:ba:
2c:f3:f9:17:5c:5d:b8:b2:ec:fb:cd:f4:99:9f:09:
f4:56:6a:b4:98:68:49:cc:f2:df:12:2e:11:9d:4c:
24:c6:31:b3:66:29:6a:dc:0a:c3:e2:ab:35:44:02:
f2:02:b9:70:06:89:19:b6:17:a6:48:24:5b:8e:f2:
11:b6:e8:07:ab:32:80:1a:14:71:79:9b:c9:63:7d:
3a:c8:30:09:40:e5:46:9c:49:4b:22:dc:a0:18:3c:
e7:57:cb:16:c0:a6:4c:bf:95:ac:81:d4:fb:63:d2:
60:92:b2:69:7e:9b:54:a0:d1:5d:f4:99:1b:c9:8d:
41:89:a4:39:e7:34:06:c7:07:d6:74:9f:26:13:8e:
1b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:41:5A:44:23:4C:D0:5F:35:95:5E:1B:2C:B1:63:9B:E2:38:25:54
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/S0FaRCNM0F81lV4bLLFjm-I4JVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2e:29:e5:e9:02:2f:67:6d:d9:14:d7:ac:5c:00:b6:f9:75:61:
69:a0:46:ff:38:1d:80:7a:a2:54:a5:37:54:46:2f:68:02:ed:
62:94:48:4c:26:2e:6c:86:2c:b3:5a:41:55:55:22:30:23:6a:
dd:c3:ce:6f:d6:ad:a3:b5:6d:d4:f0:6c:99:1e:7b:3a:e1:e7:
3a:b0:4d:25:32:53:8c:71:1c:51:ae:41:79:45:5d:ea:4e:44:
75:d3:df:36:e1:3e:b2:f4:00:17:19:52:d2:57:15:40:8b:9f:
dd:5c:4e:fd:b2:14:9a:65:f5:d3:92:4c:ff:69:69:b4:f1:bc:
25:34:a8:fd:fb:5e:c6:0f:50:93:1d:60:4e:77:59:d2:f3:6c:
9b:5e:8a:7d:9c:74:de:e7:cb:35:16:0e:00:3e:6b:b2:a3:28:
4a:6b:6a:8e:0a:b0:75:8c:58:4a:7e:4b:8a:5c:1b:3b:80:d6:
9f:0c:5d:8d:85:08:e3:86:6e:07:09:e2:43:58:f1:a3:f4:04:
80:67:16:50:31:aa:98:47:7e:66:79:96:83:4a:df:69:28:59:
5d:18:4d:e5:46:58:e8:4a:73:e1:81:62:dd:da:00:bb:fa:66:
fb:16:6c:32:67:be:41:cc:03:b7:bd:b1:69:c4:82:02:b1:65:
2b:6f:de:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:30:50 2025 by rpki-client