Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rNhc4jizzKP9fPdrbkQ4ofGptsc.roa
File: rNhc4jizzKP9fPdrbkQ4ofGptsc.roa (raw, json)
Hash identifier: KU7oEpFJukoUHA856Z72z1GykJX/YG0Gh0ygvlUodW8=
Subject key identifier: AC:D8:5C:E2:38:B3:CC:A3:FD:7C:F7:6B:6E:44:38:A1:F1:A9:B6:C7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187CC467319AF4F84C1D246835B9406BAC7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rNhc4jizzKP9fPdrbkQ4ofGptsc.roa
Signing time: Sat 29 Apr 2023 09:09:41 +0000
ROA not before: Sat 29 Apr 2023 09:09:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:cc:46:73:19:af:4f:84:c1:d2:46:83:5b:94:06:ba:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 29 09:09:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=acd85ce238b3cca3fd7cf76b6e4438a1f1a9b6c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:fe:37:8d:cb:c6:58:95:de:2e:3d:a8:f6:a9:
c4:06:62:32:1d:15:fa:74:df:b9:6c:62:22:3c:eb:
54:8c:e5:33:13:dc:12:49:42:aa:8d:e9:5e:a4:a3:
ea:37:47:15:69:54:4a:34:3a:f5:8b:f0:6d:e3:66:
9b:a3:cc:bd:2a:20:8b:02:8c:78:c9:43:53:5a:83:
2e:8a:72:bb:b4:4f:8a:1b:5e:7a:46:5f:52:a5:99:
b0:a2:d6:1c:19:77:ec:33:34:02:02:8e:0e:27:a2:
48:37:7f:4d:8d:eb:64:7c:a8:78:ce:5c:ec:23:b3:
06:64:33:e7:df:6e:e5:01:fe:b3:47:1b:64:83:ee:
3f:eb:af:ed:3e:04:b1:ed:22:a3:3e:75:b4:a3:3b:
29:37:54:98:f1:dd:b1:32:c4:9b:67:38:cf:56:bd:
d9:7c:e9:79:ae:be:0f:85:24:0a:e7:6e:6c:84:bc:
23:fa:4f:c8:31:79:41:42:45:05:89:d9:48:52:34:
7f:1b:61:a0:55:de:aa:1e:57:ab:f6:27:6f:a3:25:
4c:54:6e:a1:79:43:41:9a:27:67:4f:dd:d1:70:03:
f8:2e:43:f9:3e:6f:5c:0e:cc:f5:f2:98:e2:75:84:
96:b9:23:d2:2e:61:b7:8e:0b:17:8e:cc:2d:3c:a2:
c3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D8:5C:E2:38:B3:CC:A3:FD:7C:F7:6B:6E:44:38:A1:F1:A9:B6:C7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rNhc4jizzKP9fPdrbkQ4ofGptsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3f:94:f9:0b:28:ec:2d:aa:e4:91:6b:7b:de:d6:e2:b5:24:80:
13:18:1f:28:dc:1b:dc:79:8b:2b:1b:67:f3:ad:88:7d:fd:30:
96:f2:b3:cf:c3:11:b2:52:eb:4e:35:0d:cc:13:c8:e9:2f:98:
0b:e6:bb:88:db:66:a8:4a:90:5e:4d:f0:04:ac:85:9d:fb:4b:
6a:02:b3:da:a8:c4:3b:cc:4a:f6:e6:bc:e1:6e:6f:48:93:8a:
3b:82:cc:d1:10:68:53:64:d8:3f:8d:a4:8d:11:82:ab:e3:d4:
85:55:58:cd:e4:6c:8a:c9:0e:a2:04:0d:2e:89:82:f6:7b:e3:
a6:6a:48:39:6d:e9:58:7d:79:19:4b:9e:57:eb:d2:8b:38:57:
76:ab:62:13:87:9b:cb:21:6f:72:01:1a:ed:62:d0:28:2e:e3:
2e:7e:03:d4:9b:b0:80:15:b2:b2:0e:28:fb:02:43:0f:7c:08:
e4:3b:ba:81:c8:03:f6:06:02:cc:02:4c:77:f1:95:b0:4a:4d:
9e:37:3d:78:f2:17:1e:b3:18:9b:73:f0:f1:70:a6:31:75:f8:
56:5b:f2:46:63:b2:0c:6b:86:d1:e1:75:c0:ca:3a:07:f0:97:
ab:3b:79:2d:2b:b5:29:aa:a9:61:ef:12:55:82:35:0d:91:8c:
ff:e2:47:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:12:37 2025 by rpki-client