Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/teTuAcBFc_rtveWrB-fcmeBX9-I.roa
File: teTuAcBFc_rtveWrB-fcmeBX9-I.roa (raw, json)
Hash identifier: p3qHN4p8er5kx8Vq1BkzRPqaKuHWDazyt8uinfGtv4I=
Subject key identifier: B5:E4:EE:01:C0:45:73:FA:ED:BD:E5:AB:07:E7:DC:99:E0:57:F7:E2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187C4C4C0A54E44638B53EB35B252ADA7D1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/teTuAcBFc_rtveWrB-fcmeBX9-I.roa
Signing time: Thu 27 Apr 2023 22:10:41 +0000
ROA not before: Thu 27 Apr 2023 22:10:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c4:c4:c0:a5:4e:44:63:8b:53:eb:35:b2:52:ad:a7:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 27 22:10:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b5e4ee01c04573faedbde5ab07e7dc99e057f7e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:50:6e:42:1e:4f:40:a4:4e:2c:9e:cf:13:6e:
c5:7f:ce:f0:b0:f1:43:f1:d4:52:19:53:58:7e:2c:
4e:9d:07:84:99:0e:4c:20:77:e3:ea:94:e4:b8:ee:
c5:61:b2:2f:4f:3a:06:69:cd:f2:0c:70:41:c4:e4:
90:96:17:d0:d3:d6:04:74:ad:34:08:f8:94:00:d7:
7b:50:4f:d0:1b:fe:62:a3:63:8f:30:a9:0c:f0:cf:
0e:05:ec:4e:e4:d9:60:19:ee:e8:2c:d3:ae:e5:58:
51:2a:81:e0:7b:ef:2d:cd:b1:ab:04:48:6a:43:3f:
a4:b0:f1:21:d4:f4:33:50:67:ee:d9:16:a4:75:29:
21:26:71:bf:02:9a:77:4e:c0:b1:f1:9f:a9:e5:c7:
cd:c6:34:94:c7:11:44:68:84:9c:f4:45:54:95:e4:
3c:0a:d9:57:5f:99:8a:3a:c4:75:05:ce:95:4d:b4:
ad:4c:1d:20:c2:c0:d5:a9:8a:b7:3f:6a:c8:e7:0a:
d7:39:91:96:53:ef:64:a0:f8:92:a1:24:7f:c1:ef:
5c:4b:8d:99:41:1d:16:48:93:de:35:58:b5:91:a2:
22:e6:12:bd:0a:55:ba:c1:18:62:d8:99:87:6c:04:
7f:ed:ea:40:98:a3:04:a6:bd:58:e0:e1:46:b8:46:
07:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E4:EE:01:C0:45:73:FA:ED:BD:E5:AB:07:E7:DC:99:E0:57:F7:E2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/teTuAcBFc_rtveWrB-fcmeBX9-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
59:60:58:7a:25:ab:0d:31:af:f4:a7:c7:88:7c:46:5d:a2:8d:
0f:b0:eb:c2:82:40:ff:b4:31:aa:e9:48:7c:19:22:b1:a7:9d:
55:1d:54:9c:45:e8:e3:b7:00:86:df:24:4e:52:e6:d5:4a:1c:
d3:c8:30:00:74:18:8c:24:cd:9e:a4:f1:2e:e8:51:a9:b6:86:
43:e6:89:b4:d0:49:74:41:6e:88:74:98:60:79:b5:0a:d1:50:
5a:f4:be:b5:a0:3e:45:97:44:a0:d5:26:4d:37:46:97:6f:0d:
52:2b:ca:3a:64:4e:5f:35:a5:d2:72:10:36:2f:29:fb:5b:64:
18:8a:78:68:27:bb:0b:a0:ed:3f:62:03:61:9c:7d:03:a8:f0:
88:6f:ca:1c:61:54:1b:64:74:c1:b3:a1:70:02:8b:58:c8:de:
e4:85:3a:51:4f:61:88:5f:ec:b8:12:5e:33:00:d0:33:62:3a:
a5:4c:5c:3b:4b:ee:ae:03:ea:04:91:73:6b:fa:08:a2:b5:20:
2b:01:c2:44:17:25:12:e9:9b:57:66:34:7d:f4:72:c0:25:4e:
74:d6:2d:a0:65:2f:0e:de:9c:f8:36:40:22:00:e2:5d:11:da:
76:54:5f:a2:4b:20:88:11:53:45:f6:ed:86:b0:1b:19:a7:6d:
7a:14:30:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:09:26 2025 by rpki-client