Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-eASVSrDVDLhIv-38XFzheLr1yY.roa
File: 1-eASVSrDVDLhIv-38XFzheLr1yY.roa (raw, json)
Hash identifier: QhHVugBdogDVqJQVNG8zPK85CZI+5wnnSlm999w4/58=
Subject key identifier: F9:E0:12:55:2A:C3:54:32:E1:22:FF:B7:F1:71:73:85:E2:EB:D7:26
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01857917CFA10EBAE330EFE0DCDEB6F230EC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-eASVSrDVDLhIv-38XFzheLr1yY.roa
Signing time: Tue 03 Jan 2023 19:24:41 +0000
ROA not before: Tue 03 Jan 2023 19:24:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:79:17:cf:a1:0e:ba:e3:30:ef:e0:dc:de:b6:f2:30:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 3 19:24:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9e012552ac35432e122ffb7f1717385e2ebd726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a2:ed:36:c3:be:d4:60:24:50:9e:57:db:a4:
06:bf:28:9a:e2:54:8e:af:cd:cf:4e:0a:34:ab:9b:
33:7c:fc:eb:94:f3:d7:24:5d:2a:63:f7:95:f3:10:
4f:3e:e9:00:57:38:d0:a7:16:19:2a:cd:12:02:3b:
69:a2:cb:95:ea:59:55:f5:eb:24:45:a6:99:44:98:
1d:99:7d:b9:2f:ff:df:f2:b4:4b:9f:1b:b7:d5:03:
14:9e:84:e9:a8:3e:9a:3a:f3:b8:b5:93:6d:a4:5c:
81:6e:9f:d7:3f:12:3a:27:5b:2b:35:7d:66:4d:d9:
1d:b8:0f:a8:3e:84:07:3d:b4:d6:ab:a2:81:a0:c9:
23:0e:77:f5:d0:06:73:76:ef:49:28:8f:5d:8d:f5:
de:3d:73:1d:aa:f5:4e:59:90:d8:e4:91:5e:11:4f:
8e:5a:b6:cd:ee:e5:5e:eb:92:d8:0d:9e:67:76:59:
69:7a:76:ed:f4:c4:73:ab:ff:01:d6:33:15:7a:dc:
82:85:ad:b9:ae:ad:e3:71:1a:6f:40:3b:63:ea:06:
00:35:b3:c9:7c:7d:d3:78:83:10:37:74:ff:82:9e:
0c:fd:db:08:7e:34:51:05:68:41:74:cb:fb:da:75:
15:46:c6:81:64:c4:1a:73:1b:a4:3c:2d:45:24:ce:
fe:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E0:12:55:2A:C3:54:32:E1:22:FF:B7:F1:71:73:85:E2:EB:D7:26
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-eASVSrDVDLhIv-38XFzheLr1yY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
21:85:e3:b4:d7:7a:35:74:ef:2b:8d:e3:29:85:88:1a:fe:6f:
2a:9d:ef:6b:0d:64:39:4f:77:cf:5e:2d:ca:79:36:21:d6:61:
a5:f9:e9:70:e8:a2:39:f3:bd:0f:93:fb:27:44:d9:c8:7b:3f:
23:33:59:9c:d6:47:73:22:ec:af:71:b1:a9:a0:9c:00:f7:73:
98:95:e5:b1:ba:b9:c4:03:24:73:75:e8:eb:c8:5d:70:43:a6:
bb:19:a0:ad:d1:3e:b7:10:df:67:8d:4c:ee:38:98:f4:b4:41:
e1:76:56:01:a9:dd:02:23:53:b7:6c:69:d1:70:9f:3a:28:7c:
b8:c9:1b:da:84:04:e2:bd:fb:3f:bf:33:e5:44:55:7e:ae:5c:
f5:73:8e:cc:d8:ee:d3:bf:5a:00:6a:fe:90:b0:cc:2d:63:2d:
7d:d7:1c:33:0a:62:5f:d4:3d:91:11:db:72:2d:43:ae:ac:b5:
16:87:b6:fd:33:70:4d:2a:fb:ab:51:f6:61:49:0f:34:54:dd:
ea:24:62:18:b2:26:0c:63:70:22:13:b9:e6:c5:68:97:b8:46:
04:03:2f:de:d0:79:b4:90:bf:e0:74:9e:24:5b:6e:8b:d8:7f:
79:0b:e8:ac:5f:49:77:5b:50:27:86:cc:d2:1f:3f:67:51:63:
96:20:28:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 16:23:39 2025 by rpki-client