Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/l8ApVhZZNCOMq4gGCbDcIJfrTpU.roa
File: l8ApVhZZNCOMq4gGCbDcIJfrTpU.roa (raw, json)
Hash identifier: 4okoDZB4yIPYjQVsoTnsUTGPkhaj91FfEFVRRxEjzMM=
Subject key identifier: 97:C0:29:56:16:59:34:23:8C:AB:88:06:09:B0:DC:20:97:EB:4E:95
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01886732D9E93E3C776363DE092C2455B0DF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/l8ApVhZZNCOMq4gGCbDcIJfrTpU.roa
Signing time: Mon 29 May 2023 11:09:25 +0000
ROA not before: Mon 29 May 2023 11:09:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:67:32:d9:e9:3e:3c:77:63:63:de:09:2c:24:55:b0:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 29 11:09:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97c02956165934238cab880609b0dc2097eb4e95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7b:89:2c:d2:01:3b:19:51:12:47:89:d0:96:
22:ca:2a:03:c5:bf:1d:b3:61:2c:c9:51:03:e5:1e:
6f:f9:5f:02:91:77:80:f1:db:68:69:38:90:d4:35:
f0:67:93:bc:09:a2:8a:6c:b2:af:a9:1c:ce:bb:82:
26:d6:dc:3d:8e:72:34:55:b0:02:e7:4f:70:3e:13:
80:62:2a:3b:ef:03:36:95:e7:42:09:05:42:3b:62:
b4:b3:5a:f7:78:85:36:43:55:aa:5d:b8:6e:26:77:
99:04:79:9f:b8:0b:3c:98:cd:38:6d:6c:27:e2:26:
38:cf:27:73:74:eb:9c:7f:74:da:ef:96:da:04:73:
04:91:9b:67:24:36:96:5f:02:e7:a1:d8:b4:99:da:
e9:a7:b7:2e:e9:8a:5e:e5:dd:07:d3:2e:33:33:b0:
f2:d7:6d:a8:cf:fb:eb:f6:ca:98:8b:11:9c:c0:ec:
1e:3c:38:92:08:c9:41:81:67:09:96:b7:d1:c9:94:
95:e3:c0:2a:ac:52:ad:cb:b6:cc:27:3f:fb:06:8e:
3c:56:43:fd:c3:f2:ce:e1:c6:04:f9:86:0a:0a:f6:
8e:96:23:49:42:96:fe:2b:ed:6a:09:13:6b:fe:8a:
58:63:aa:87:e3:5d:e9:c7:e8:a1:fa:a8:b1:e1:43:
f7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C0:29:56:16:59:34:23:8C:AB:88:06:09:B0:DC:20:97:EB:4E:95
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/l8ApVhZZNCOMq4gGCbDcIJfrTpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
85:18:79:07:c3:bd:9d:96:b7:5f:dc:70:28:c5:a3:c3:60:72:
fb:88:78:21:95:5d:2b:77:15:21:95:77:e0:7a:5e:46:6b:30:
d8:58:a7:82:d4:7c:5c:8c:ba:2c:fe:91:8f:69:3b:6b:56:5c:
82:57:97:6d:16:b7:d7:5d:9d:65:23:76:1d:92:35:e2:2c:6d:
51:4a:ba:00:48:f3:52:24:24:34:6c:49:f0:94:0b:17:26:ca:
ae:ec:73:b9:e4:77:4d:0c:d7:59:98:e8:e8:49:69:d9:28:b2:
4e:6c:c1:4f:14:dc:ad:87:6b:d6:09:ef:e3:cf:5a:af:61:64:
a4:78:c3:a2:a3:d6:9f:a5:46:f1:bd:cd:7b:3b:b0:84:9b:3c:
68:0b:db:28:3a:74:8f:37:c8:25:d0:07:d4:f7:37:45:45:a9:
d0:63:4d:82:dc:9d:2a:0d:22:7f:85:d7:48:f3:cc:7f:7a:4d:
39:6f:f7:c2:82:9a:72:ac:de:96:b1:9c:96:1b:c8:58:08:32:
ad:ea:57:1b:59:6a:84:d2:23:99:2a:0e:6a:9a:f4:52:b3:bc:
1b:70:ac:2e:20:e2:61:9b:61:a5:fc:14:8b:16:21:af:81:66:
2a:b9:91:83:ed:24:31:f2:39:94:fa:5e:26:7b:f1:7e:dd:8d:
ce:43:f1:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:54:20 2025 by rpki-client