Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-SgmcfAQF1j6x8b82Cqx_CYEeiA.roa
File: 1-SgmcfAQF1j6x8b82Cqx_CYEeiA.roa (raw, json)
Hash identifier: aD+TyptMFffQnhqox0xK8WxQx/jaLQXS2vxg9tOOym8=
Subject key identifier: F9:28:26:71:F0:10:17:58:FA:C7:C6:FC:D8:2A:B1:FC:26:04:7A:20
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 67D9DAA2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-SgmcfAQF1j6x8b82Cqx_CYEeiA.roa
Signing time: Fri 04 Feb 2022 15:19:39 +0000
ROA not before: Fri 04 Feb 2022 15:19:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1742330530 (0x67d9daa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 4 15:19:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f9282671f0101758fac7c6fcd82ab1fc26047a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:18:38:ec:90:1d:82:b5:f9:ca:b5:ba:c0:29:
86:33:6a:41:bc:b7:aa:39:bd:49:f5:2f:2e:06:75:
cf:97:e3:41:45:90:7c:02:c6:7c:80:67:5d:ec:c7:
97:ef:b2:d3:26:95:f3:94:4d:1f:7b:9e:fc:1b:f5:
73:7b:5b:42:7c:e0:05:19:8d:45:d7:ec:a7:8c:f9:
f9:0b:1e:a5:b1:71:07:b5:0e:04:1e:26:e3:b0:e9:
f1:cc:21:67:cb:66:47:79:93:d9:90:63:f6:57:8a:
4b:8b:47:fe:e7:a4:fe:96:5a:9b:24:86:bb:9e:13:
16:5f:85:4e:24:81:b2:e9:06:3b:de:3e:3b:c0:e5:
22:bd:c6:73:0a:6c:92:41:c8:e2:11:ee:2f:f4:a6:
ac:eb:0b:1e:81:cd:0d:3a:6f:44:d8:66:7e:77:58:
2c:90:84:99:36:19:21:81:c0:6c:1d:eb:3c:d4:a2:
86:3b:bb:40:51:51:f6:24:47:18:10:5a:26:a6:82:
1d:43:de:87:88:dd:46:05:a0:99:5a:34:94:dd:b8:
74:90:74:9e:bb:6f:4b:de:4b:da:41:38:45:2c:b4:
06:c7:ad:95:a7:bb:5e:63:3f:54:4a:3e:c7:89:68:
1e:67:84:79:fa:47:88:a5:a5:9c:b4:17:c0:5b:84:
9d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:28:26:71:F0:10:17:58:FA:C7:C6:FC:D8:2A:B1:FC:26:04:7A:20
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-SgmcfAQF1j6x8b82Cqx_CYEeiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
39:75:50:70:78:27:42:87:03:33:6f:04:28:6e:48:72:5d:df:
4e:34:d0:8b:05:96:c4:38:ad:f4:7d:bd:c5:56:49:21:7a:67:
dd:51:67:7d:e9:cb:a2:c7:83:4b:6c:6b:b7:a5:28:d8:a6:bf:
96:e1:89:7a:b8:6d:0c:06:a2:d6:05:96:03:92:b0:e2:80:33:
29:dc:55:72:50:2c:d2:1a:ab:c2:23:12:77:76:39:6d:87:fe:
da:f1:3b:e7:88:32:8b:0f:76:43:84:28:6e:25:2c:f9:e8:1a:
c0:90:49:78:0c:d9:0f:bd:30:83:36:f0:6c:b3:66:af:d0:bd:
55:d0:9a:d8:b7:2f:f0:23:84:29:bd:23:c8:d2:48:48:c0:5d:
44:d9:a1:42:8f:34:74:98:8c:96:8d:32:7d:40:ea:d2:2f:4e:
49:4c:8d:22:12:4a:e6:96:38:d4:e1:7e:e0:16:25:68:1e:1c:
82:0b:ee:bf:54:a5:86:ff:2a:99:8f:07:35:f3:70:11:7c:83:
b9:5d:c8:3c:cc:71:28:02:d4:cb:5a:93:8f:96:7f:18:40:81:
29:70:d2:ff:e4:18:99:06:a9:bb:18:3f:93:e7:84:98:3f:8b:
0a:9b:28:3c:2f:6f:61:4a:ae:ea:e1:eb:09:cf:81:02:ef:90:
ff:2b:cb:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:06:53 2025 by rpki-client