Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/o95Hvrll3DPL881DMTjYJu0KzFQ.roa
File: o95Hvrll3DPL881DMTjYJu0KzFQ.roa (raw, json)
Hash identifier: 8qlc9djq6vPdPJUKSTd8RePkk3UsCsZ4b81CaAJcDQI=
Subject key identifier: A3:DE:47:BE:B9:65:DC:33:CB:F3:CD:43:31:38:D8:26:ED:0A:CC:54
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189B9625B90C3ECB4F33EF2C9F2A72C38CA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/o95Hvrll3DPL881DMTjYJu0KzFQ.roa
Signing time: Thu 03 Aug 2023 03:12:58 +0000
ROA not before: Thu 03 Aug 2023 03:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b9:62:5b:90:c3:ec:b4:f3:3e:f2:c9:f2:a7:2c:38:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 3 03:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3de47beb965dc33cbf3cd433138d826ed0acc54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8a:e9:ed:d8:d4:ca:50:08:09:cc:60:a8:8d:
b1:22:37:8b:34:85:18:43:d8:10:ab:81:14:04:2e:
4a:30:c2:13:e4:1b:14:0e:27:3d:4e:80:5d:0b:61:
f1:48:bc:84:bf:ba:df:51:3b:e6:d4:ed:0e:a0:8e:
5f:8c:7d:80:62:a7:f5:ae:37:99:dd:03:db:f7:d9:
0b:32:c8:17:2e:b4:92:ed:ad:d0:26:26:14:29:c5:
ca:03:19:fc:87:e6:46:22:2d:93:aa:a7:12:b0:96:
9f:a5:39:25:8f:d3:b7:9a:88:5a:18:d8:7f:a5:f0:
cf:f8:08:94:d6:ba:1f:bc:79:dc:92:78:5d:a0:87:
ee:48:94:0d:35:9d:98:e6:1c:5c:cb:c0:dd:fc:ba:
5e:fb:6f:ce:bc:f0:06:9c:11:b0:07:30:b1:77:45:
d9:6d:ec:c1:a7:46:b6:f1:e8:35:1e:c6:27:3c:67:
0c:a0:09:55:e7:13:47:7a:ea:24:1e:f1:93:5e:65:
29:11:1a:00:02:ac:31:23:2b:6b:a1:fb:b2:2f:f2:
81:7b:36:8d:e2:d5:a2:66:06:97:28:0a:f2:9f:f8:
99:1a:43:c1:55:8d:d1:a1:b5:58:d5:11:a2:e1:ee:
7e:4c:c8:16:02:27:22:55:8a:64:00:ea:a9:50:01:
4b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:DE:47:BE:B9:65:DC:33:CB:F3:CD:43:31:38:D8:26:ED:0A:CC:54
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/o95Hvrll3DPL881DMTjYJu0KzFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
af:65:d0:81:eb:54:9b:f7:54:c6:df:2f:6b:9f:1f:81:96:a4:
5b:bb:3e:85:db:6d:4e:fb:5c:6d:60:06:90:a7:43:10:d9:35:
75:77:a1:10:07:93:af:22:d6:a7:14:1c:fd:8e:b9:c5:f4:d9:
93:68:95:53:38:29:58:0d:4e:87:c2:79:05:a3:7c:0d:47:70:
25:70:ba:a3:25:dd:1a:87:90:20:5a:83:c9:d8:db:a1:ae:ab:
31:53:2b:cd:b1:1f:97:6e:71:a1:d7:37:8f:8c:cb:3a:6f:8d:
18:eb:51:72:df:40:fd:2a:fe:05:53:4e:97:c4:27:58:59:2c:
21:b0:74:68:09:c2:ed:ef:fb:e4:29:1b:18:3f:42:22:32:d6:
97:d2:e8:b8:6c:f0:c9:94:c3:69:9a:8a:d9:68:a2:37:1d:5e:
f0:56:2d:8e:56:e4:6f:c5:3d:e3:6c:66:f1:a9:34:01:d3:0b:
a8:43:8f:4d:33:02:e4:52:4a:ab:7c:58:41:e4:96:c5:b8:fc:
7a:01:9c:7b:f9:ba:3d:a6:8b:bf:9c:ec:9d:f5:01:97:68:92:
98:95:4e:e3:43:7d:42:d8:aa:25:ec:94:69:e3:09:f4:03:a0:
9c:ec:42:cd:c0:2b:58:37:b6:cb:ee:61:5d:df:7d:4a:ed:1b:
29:56:e8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:41:29 2025 by rpki-client