Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0r3yxG_d4yixKIn1-RQ5HE9y7sw.roa
File: 0r3yxG_d4yixKIn1-RQ5HE9y7sw.roa (raw, json)
Hash identifier: IICf1plkZa7DCTAX0+2GBlh/4GpKM3RyDD3YpiHhiPg=
Subject key identifier: D2:BD:F2:C4:6F:DD:E3:28:B1:28:89:F5:F9:14:39:1C:4F:72:EE:CC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184E150A22E90DF17DF99529F429209EA5F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0r3yxG_d4yixKIn1-RQ5HE9y7sw.roa
Signing time: Mon 05 Dec 2022 08:04:28 +0000
ROA not before: Mon 05 Dec 2022 08:04:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:e150:9580/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e1:50:a2:2e:90:df:17:df:99:52:9f:42:92:09:ea:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 5 08:04:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d2bdf2c46fdde328b12889f5f914391c4f72eecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:55:df:f6:4d:b2:69:58:52:fe:b9:be:ba:64:
88:37:70:16:c5:63:41:17:74:32:58:99:04:ee:5c:
ad:04:85:d0:e5:dd:b3:f4:9a:2d:63:81:c7:24:c7:
0c:a4:6a:05:a6:09:dc:30:db:17:da:fe:2b:2a:f8:
3d:7a:ea:2a:17:b3:91:dd:8e:ba:60:89:30:fa:ae:
fd:7d:ca:9a:00:5f:7b:01:52:03:14:4e:86:cf:b1:
93:24:40:76:a0:88:11:8b:4e:5b:44:6f:57:78:09:
4e:0a:ab:1b:de:8b:49:d7:e0:6a:88:d8:c4:bc:6b:
4e:6f:1c:2e:36:01:e0:98:55:2e:5d:c1:e1:29:20:
92:55:7b:e7:d3:b2:18:21:ea:15:50:78:8f:33:0a:
01:4c:3a:af:cf:93:e0:d9:4f:f6:77:b5:9f:90:bc:
e3:0e:55:b0:12:32:76:6d:82:a6:7f:5f:74:b4:d5:
f5:aa:ce:95:8e:97:ff:8f:14:f2:45:53:7d:81:69:
dd:66:5d:5e:1a:e6:a6:b5:ab:90:7a:44:57:0d:0d:
22:88:d2:6e:ed:03:70:73:74:0c:69:13:14:ee:26:
ef:e7:3e:27:58:e6:97:d1:e5:28:59:ee:f7:0f:11:
77:63:e3:4f:5e:ce:60:25:05:70:9b:6c:d9:54:ef:
fa:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:BD:F2:C4:6F:DD:E3:28:B1:28:89:F5:F9:14:39:1C:4F:72:EE:CC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0r3yxG_d4yixKIn1-RQ5HE9y7sw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ad:56:41:ca:76:d5:5c:4e:d3:c4:2c:fd:8a:13:65:33:43:40:
01:9f:5e:40:f7:d3:ac:ec:18:d1:5c:29:5b:5f:2e:c4:b3:75:
38:3b:dc:6a:06:aa:75:8b:7a:af:7e:fc:18:04:45:78:ef:85:
f0:bd:10:ad:8d:95:e2:7d:79:62:ba:56:7e:45:a7:cf:71:ae:
53:be:dd:ad:f9:a6:9d:ce:0f:1d:b4:24:e2:81:91:88:7f:d2:
4e:17:e7:0f:3b:a6:6c:7d:f9:89:56:a9:78:85:e9:ef:db:d2:
fc:6c:5f:bc:58:98:09:35:c7:e4:75:ed:2b:e0:a7:02:55:e2:
14:50:05:88:b2:81:50:41:24:a4:c2:30:f4:b4:51:dd:d7:e0:
d9:80:91:83:d5:f9:60:cc:49:2d:3c:a5:58:09:26:16:ed:70:
85:8d:c7:de:1d:8d:df:33:1d:32:83:b1:20:b9:da:ec:76:d5:
18:da:d2:e4:32:f5:b3:19:b6:dc:d3:3c:a9:e6:10:ee:87:89:
b2:0b:88:94:73:d2:be:d7:b5:09:41:35:8c:e7:37:67:0d:f5:
97:49:01:4b:82:ca:e3:c1:86:e8:69:ca:8a:01:ae:d2:9c:cf:
a9:39:b6:00:2f:88:72:9c:51:bc:fd:b3:1c:d9:eb:08:35:37:
41:e9:9c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:16:21 2025 by rpki-client