Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-T6xa4ZO5hflDSLGxp7_LOJxyIQ.roa
File: 1-T6xa4ZO5hflDSLGxp7_LOJxyIQ.roa (raw, json)
Hash identifier: htehoZ1r92yYpsAP9M0WpwfCD755DyVu4nxBDxwQdiU=
Subject key identifier: F9:3E:B1:6B:86:4E:E6:17:E5:0D:22:C6:C6:9E:FF:2C:E2:71:C8:84
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01863EE25E67C1C92C2ED715E43298F0F638
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-T6xa4ZO5hflDSLGxp7_LOJxyIQ.roa
Signing time: Sat 11 Feb 2023 05:11:08 +0000
ROA not before: Sat 11 Feb 2023 05:11:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3e:e2:5e:67:c1:c9:2c:2e:d7:15:e4:32:98:f0:f6:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 11 05:11:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f93eb16b864ee617e50d22c6c69eff2ce271c884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:de:51:76:91:7b:1a:5a:e5:50:f5:8d:da:a4:
e2:72:23:1a:1f:57:17:f8:54:c6:cc:a4:a9:de:56:
bc:9a:ed:b6:b3:5e:de:6b:e5:67:8f:8b:ca:5b:86:
79:59:04:6e:7f:f7:14:4c:ab:6a:e4:0f:d5:af:03:
d0:f3:67:d1:4b:5f:92:c9:de:e1:8e:94:2e:98:45:
17:78:e5:33:28:8f:61:70:02:d0:28:26:67:d9:68:
d7:dd:d5:73:d1:01:22:5b:98:23:63:ac:57:40:b3:
e8:db:76:68:75:2b:5f:8a:d4:91:b9:dd:7b:5f:83:
3f:3c:81:50:95:d4:47:17:aa:ba:b4:0f:24:93:2a:
56:96:09:14:94:41:74:69:d3:69:a6:77:9e:8c:2e:
b1:a6:12:8a:11:fd:46:2c:85:d1:a1:3d:8a:8d:46:
25:47:9d:26:72:88:8e:4e:da:ff:63:34:9c:64:bf:
f1:32:38:36:97:fa:20:8b:d7:33:e0:6b:83:d5:6f:
32:00:26:51:1d:7b:b3:0b:bc:ab:17:b6:7c:27:db:
66:6a:b9:67:38:8a:7c:cc:d8:cf:6e:40:82:d7:e6:
a5:90:b3:fa:b3:c9:50:8d:28:e1:6d:ff:40:f5:dd:
ae:7c:29:d5:47:03:80:e5:8f:7b:f6:92:9a:b8:48:
c3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:3E:B1:6B:86:4E:E6:17:E5:0D:22:C6:C6:9E:FF:2C:E2:71:C8:84
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-T6xa4ZO5hflDSLGxp7_LOJxyIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
79:0f:d6:67:5f:43:72:af:03:4b:e6:92:36:0b:9e:77:a5:64:
6b:97:46:f1:38:6e:96:68:62:0b:c0:f9:28:dc:77:44:02:2b:
55:2d:34:0d:c3:c5:27:2e:0c:af:94:31:c6:49:d7:54:51:3e:
aa:76:71:dd:49:93:a3:22:03:14:a7:f9:26:14:cd:28:1d:ad:
5a:82:77:93:45:52:50:6a:f9:0f:b1:94:ce:10:1b:bc:7a:8a:
09:c3:58:5e:5c:89:cb:80:5b:ef:db:17:73:c0:9c:2f:75:ba:
5e:e4:d5:95:51:e0:f5:f9:58:fa:86:13:04:44:06:bb:d1:0b:
ee:b5:ad:eb:9c:dc:78:ee:c6:d3:8b:3b:03:0d:07:eb:88:fc:
27:46:c9:ff:15:7d:df:d3:40:86:1f:e2:1b:01:fe:b2:57:e6:
ed:83:24:88:ab:39:7b:eb:39:57:f4:53:4c:c2:71:54:d9:6e:
33:43:10:c5:49:fd:4a:6d:28:0b:c1:ee:df:0b:b5:4b:55:cb:
f0:48:60:c2:76:4b:68:b7:0c:07:df:f1:e0:c8:ba:a2:a2:11:
07:29:7e:10:b2:3d:a3:fd:b6:2b:2d:65:15:d6:cd:ef:c9:47:
8f:76:a5:48:9d:6e:9b:80:51:1e:5f:8d:ab:bf:e0:d1:45:f8:
48:d0:90:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:00:57 2025 by rpki-client