Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sbnY0XVZHQIss8prZ6_f0pGCI9A.roa
File: sbnY0XVZHQIss8prZ6_f0pGCI9A.roa (raw, json)
Hash identifier: UPWVj29c3hpwhXtXpIHAUM6Cgx6mpotbA1mNmc64A8k=
Subject key identifier: B1:B9:D8:D1:75:59:1D:02:2C:B3:CA:6B:67:AF:DF:D2:91:82:23:D0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186907114DECC3262FB3FC6A531917A3EE9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sbnY0XVZHQIss8prZ6_f0pGCI9A.roa
Signing time: Mon 27 Feb 2023 01:16:15 +0000
ROA not before: Mon 27 Feb 2023 01:16:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:90:71:14:de:cc:32:62:fb:3f:c6:a5:31:91:7a:3e:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 27 01:16:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b1b9d8d175591d022cb3ca6b67afdfd2918223d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a5:68:89:6b:dc:0d:6a:ca:25:0b:5f:b0:96:
44:7e:10:55:3e:ab:25:7c:0d:d3:ca:63:52:fc:c1:
dd:d3:de:fa:3e:98:ed:cb:f2:47:46:a1:24:81:cd:
df:d8:11:c0:d4:79:f9:c5:e2:0e:5d:36:4b:a3:f1:
9a:db:9f:4d:56:13:4f:ea:96:55:86:f7:c0:09:c0:
07:14:53:73:13:2b:a0:f2:00:d6:8e:d6:9c:0a:71:
0b:1d:22:79:12:3e:a1:4b:2c:79:14:2b:b2:87:66:
72:1e:72:31:26:d1:9a:c0:39:45:37:e6:66:74:c5:
ac:3a:05:94:e1:86:f7:05:0d:18:e7:40:13:98:82:
d4:a2:88:12:11:c4:c3:b1:16:b8:7e:9e:c1:66:8a:
80:a9:e1:32:0f:fc:a5:f6:76:b4:3f:46:e9:c6:97:
da:33:5b:ff:2c:14:aa:d5:2a:ed:a6:37:ff:b1:e5:
11:48:bc:86:66:4c:c0:6a:40:a3:2c:d0:a3:0c:d5:
0b:f5:c7:20:c1:90:75:32:2b:2d:42:21:dc:81:99:
0f:01:71:01:26:89:65:b5:e5:5a:4b:66:96:46:b0:
e6:ff:22:d7:d5:8f:bd:de:1b:db:78:7e:6f:8d:9f:
19:4a:37:c0:bd:24:f0:b2:16:c8:21:3b:8b:07:d7:
4c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B9:D8:D1:75:59:1D:02:2C:B3:CA:6B:67:AF:DF:D2:91:82:23:D0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sbnY0XVZHQIss8prZ6_f0pGCI9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a9:3d:19:79:ae:5d:72:29:32:9d:3d:f8:c9:de:0e:ea:1d:22:
f3:b6:36:04:d9:b0:dd:58:d7:9b:f9:b7:e0:cf:1a:97:ab:e6:
5f:5b:0e:93:60:be:f5:56:c1:22:b2:a3:0c:51:68:ac:56:a5:
96:ca:a1:4d:72:c4:bf:8e:4b:78:83:e7:ce:bc:2f:c5:51:7b:
01:24:45:13:dd:1e:14:17:6d:88:73:00:55:66:fa:be:4c:27:
94:46:72:bf:96:49:d2:51:6b:9c:a0:ce:c0:7a:f1:53:39:21:
2d:8f:07:74:ec:1e:59:60:99:e5:00:12:9c:eb:87:33:ea:de:
61:5a:44:8c:61:01:5c:ff:c2:a5:7b:76:91:66:88:c4:6e:fd:
c5:83:eb:29:12:a0:ce:4b:d7:5f:d4:e0:95:13:0c:19:08:d6:
95:5d:43:3f:70:86:bd:4b:7c:ab:bf:bb:92:ea:08:e9:43:c8:
e9:e0:fd:93:f4:f7:8e:d3:bc:3c:63:f6:8b:04:ea:25:93:5e:
ea:1b:81:9a:4e:c7:47:b8:23:b6:8d:aa:a1:80:a7:ae:2a:81:
ec:e9:41:4d:86:8d:d4:04:61:f6:1a:8f:87:7f:a5:0f:52:67:
8d:68:c5:b9:c8:b4:3f:60:b7:20:24:68:10:82:a3:df:f1:54:
de:af:e4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 05:27:39 2025 by rpki-client