Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t08pp4pOWMjG6HtvRxsNF-_lM_E.roa
File: t08pp4pOWMjG6HtvRxsNF-_lM_E.roa (raw, json)
Hash identifier: ef+ROFzzyXj9Sc59U/HRCRdXsLbNL/DIwVRce5Grb7Y=
Subject key identifier: B7:4F:29:A7:8A:4E:58:C8:C6:E8:7B:6F:47:1B:0D:17:EF:E5:33:F1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018687A30D5ED36394BC2CB6C4E7A140A06B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t08pp4pOWMjG6HtvRxsNF-_lM_E.roa
Signing time: Sat 25 Feb 2023 08:14:15 +0000
ROA not before: Sat 25 Feb 2023 08:14:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:87:a3:0d:5e:d3:63:94:bc:2c:b6:c4:e7:a1:40:a0:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 25 08:14:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b74f29a78a4e58c8c6e87b6f471b0d17efe533f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f5:e2:b1:1d:1d:5f:2f:72:7b:f5:12:3a:6f:
91:7d:e9:61:3a:48:63:7f:a9:dc:2a:ba:2e:3f:e2:
1e:a5:2c:e0:f2:6c:c7:32:89:99:1b:9d:0b:57:d7:
79:e0:7c:90:7f:69:0d:78:7d:6f:db:34:d0:59:44:
94:f3:68:bb:64:7b:c8:40:85:02:0a:ac:9b:79:73:
55:01:8f:f3:ea:ec:6b:74:99:30:4c:5b:f9:35:d5:
04:93:68:19:ea:d4:aa:05:4d:35:fb:13:70:43:ca:
4b:8e:ea:14:54:e1:4b:be:45:2a:3a:6e:9a:6d:c4:
65:43:0a:14:7f:a1:7d:89:2a:4f:a6:58:15:af:18:
55:36:fc:e1:38:05:ec:ec:6d:7c:14:29:91:43:9a:
a7:50:f0:36:b5:b3:05:cf:00:41:50:ee:f1:ce:dd:
35:99:d6:1c:a6:5c:26:c7:1a:70:3c:08:2b:65:69:
df:4a:34:a2:f0:01:c6:f9:27:0d:3d:91:8f:25:ff:
a7:31:9d:16:e5:54:30:e5:45:8e:bb:2f:9e:6b:0b:
2a:64:13:5b:a0:f9:af:ea:64:df:eb:ad:a6:a2:28:
4b:9d:83:11:51:af:f8:6c:f1:25:ab:fa:c1:08:6c:
42:6d:67:8d:ee:76:b4:5a:b4:93:16:4b:45:92:97:
08:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:4F:29:A7:8A:4E:58:C8:C6:E8:7B:6F:47:1B:0D:17:EF:E5:33:F1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t08pp4pOWMjG6HtvRxsNF-_lM_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6d:d6:8b:ca:3b:47:49:13:69:bb:4e:a1:67:ca:f3:17:71:ba:
95:7b:8d:6f:54:ab:b2:38:e4:80:42:a6:3c:d2:75:d0:f9:5b:
7b:94:e4:84:c6:35:2e:4e:bb:ab:37:cc:3b:2f:11:a9:cb:f1:
2e:84:87:61:a5:e0:27:62:3f:78:e8:63:b1:df:57:77:b2:24:
75:af:14:b1:33:18:ef:3e:9d:fa:f5:5b:33:6e:9e:fb:ca:aa:
9e:98:ce:f3:b4:b8:f2:da:ed:a9:47:28:67:96:5a:b7:10:52:
9c:cd:ad:43:f7:92:a2:7d:4f:7a:30:cc:fa:24:c7:a2:81:d9:
a0:20:a5:43:df:4b:dc:c8:f9:5a:62:a7:a2:ff:c8:65:8e:7f:
e9:48:2c:68:e4:7c:8f:92:35:bf:bc:ef:c8:e2:5a:66:af:2a:
e7:db:4f:eb:71:19:8a:4e:bf:17:6c:ed:f0:e8:b4:16:0d:b7:
a4:dc:f5:63:2a:1b:98:d2:98:ff:23:cb:5c:17:44:de:ed:4c:
35:75:ab:b8:18:ce:a0:c2:aa:12:56:6c:0b:98:4a:db:e6:7c:
de:9b:36:15:49:12:d3:ac:34:a4:af:51:52:91:eb:51:29:3b:
bb:7c:e2:3b:d1:01:50:d8:17:f2:08:75:c8:03:24:cd:28:5a:
87:11:d6:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 21:06:28 2025 by rpki-client