Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-sYwndpcTOpacqpyfIUqUe3B4qU.roa
File: 1-sYwndpcTOpacqpyfIUqUe3B4qU.roa (raw, json)
Hash identifier: vU9qqcl518oRgZcjNFk26jDmtZjAnt9dGAXmtkCpuII=
Subject key identifier: FA:C6:30:9D:DA:5C:4C:EA:5A:72:AA:72:7C:85:2A:51:ED:C1:E2:A5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183D1123BA366AB53A1C86674A2581F07A5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-sYwndpcTOpacqpyfIUqUe3B4qU.roa
Signing time: Thu 13 Oct 2022 11:19:36 +0000
ROA not before: Thu 13 Oct 2022 11:19:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d1:12:3b:a3:66:ab:53:a1:c8:66:74:a2:58:1f:07:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 13 11:19:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fac6309dda5c4cea5a72aa727c852a51edc1e2a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:50:1b:7c:7d:6b:6e:ed:d2:8d:e6:34:69:e5:
8b:10:88:12:c7:d6:99:d2:fe:7f:71:8f:b3:9d:0d:
ef:3b:eb:50:bb:ec:36:e1:7d:aa:17:5d:52:3a:91:
3e:19:3e:b6:5c:a5:2d:e7:d5:81:b2:d4:cd:19:dd:
4f:e7:4d:55:29:44:61:20:d6:2c:42:5c:c7:7f:2e:
da:29:6f:24:46:d8:60:26:24:72:56:6b:44:22:cc:
c1:d5:eb:d4:12:b8:98:2e:cd:84:9d:2f:62:08:8a:
1c:4d:ef:f2:92:1e:7c:7d:c7:b4:49:99:42:fe:0b:
3c:54:33:b0:41:f2:26:38:25:47:e8:dc:f5:9d:e6:
83:19:63:45:78:49:b6:b0:b2:fd:94:28:c9:26:ad:
8f:b4:ac:e4:db:6c:7a:1d:41:7d:0f:2d:54:ad:c1:
9e:31:55:08:8e:63:a7:16:b4:99:5b:0a:52:35:db:
a6:23:a3:2d:27:4f:4b:cd:88:9e:e4:41:72:aa:57:
84:05:e2:d6:cd:22:1b:b5:40:22:86:0f:e4:7d:ef:
8a:81:bd:aa:be:07:99:90:d0:59:5d:33:a4:f9:6f:
83:91:1d:8f:92:dd:97:83:d1:71:a4:a2:b1:7e:a5:
e8:55:4e:9d:5b:93:46:18:2f:ac:16:95:1a:02:58:
ec:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C6:30:9D:DA:5C:4C:EA:5A:72:AA:72:7C:85:2A:51:ED:C1:E2:A5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-sYwndpcTOpacqpyfIUqUe3B4qU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6d:e6:a7:07:33:d5:c2:08:b0:52:28:31:df:7b:7d:38:67:74:
bf:91:d5:92:f3:2c:53:da:0f:d2:cd:ad:42:ac:f8:fa:32:8a:
69:3d:e3:31:d9:ff:5b:23:26:ad:d5:df:c3:52:72:f8:79:44:
e2:d5:db:7c:9a:99:49:a2:a2:6f:7d:4e:cb:ad:3c:77:82:dd:
bd:04:90:73:a6:44:f7:9e:ec:0b:98:38:72:89:a6:1d:9c:5f:
78:cc:9f:ea:0e:9f:1e:4a:d3:55:b5:72:af:cc:fe:a2:ab:7d:
72:59:e6:07:78:97:cd:37:b3:98:e5:20:f2:54:97:06:7b:25:
88:34:ed:1e:23:41:bb:ff:82:13:5f:a1:93:84:01:37:1d:e7:
4b:ac:b0:9e:05:01:30:c7:73:2b:19:a4:73:2d:19:05:20:ca:
0c:02:00:a6:e4:63:e5:44:31:49:d8:7e:4b:3d:b9:d4:30:92:
e0:27:20:a0:f5:3c:28:81:33:d2:e8:67:12:97:cd:c2:bd:d0:
88:59:6a:16:01:f5:50:24:1f:f2:a8:8e:4d:4f:34:62:da:b6:
4f:93:06:b8:83:7f:0b:ec:7d:1f:2e:92:de:9e:fb:1a:8c:eb:
76:01:89:76:89:7a:7b:2c:a1:8f:a3:de:ea:e7:25:be:be:62:
21:ca:a9:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:13:01 2025 by rpki-client