Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-vW4qfTr4_kejvOVrL9smzBq7-8.roa
File: 1-vW4qfTr4_kejvOVrL9smzBq7-8.roa (raw, json)
Hash identifier: GJNKC/N8UbpB0EcB0BRaDO1SeePOrV0KLp+rbPikk28=
Subject key identifier: FA:F5:B8:A9:F4:EB:E3:F9:1E:8E:F3:95:AC:BF:6C:9B:30:6A:EF:EF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01850B65B5D358598828E4385F81A48FD71D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-vW4qfTr4_kejvOVrL9smzBq7-8.roa
Signing time: Tue 13 Dec 2022 12:11:33 +0000
ROA not before: Tue 13 Dec 2022 12:11:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0b:65:b5:d3:58:59:88:28:e4:38:5f:81:a4:8f:d7:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 13 12:11:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=faf5b8a9f4ebe3f91e8ef395acbf6c9b306aefef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b2:ab:b4:42:79:b0:80:1f:3f:ab:7f:96:3a:
13:74:1e:e2:ca:c7:07:56:4a:02:0e:06:31:ca:4e:
08:96:96:82:67:3a:e0:c1:67:a9:2d:2e:79:e3:3b:
4e:fb:b2:d7:f0:64:9a:51:42:ba:5a:80:ca:0a:95:
89:2c:c7:b0:6c:84:c9:50:23:10:ae:0b:3c:b5:71:
18:82:73:a5:79:21:8a:40:27:ef:1f:bf:2b:8f:b3:
4f:fc:4f:d2:80:9d:a7:3f:1e:39:67:76:a4:49:0e:
8a:2f:fd:e3:65:a5:0a:b9:23:4d:76:ef:c3:c6:81:
10:db:54:c9:2a:5e:c8:da:86:40:47:31:2f:e5:b3:
3a:53:d3:e0:b7:e0:96:f1:ee:fd:92:d7:da:3a:d7:
c4:7a:d1:0d:8e:71:f9:c8:f7:c0:6c:89:b6:a4:c4:
fe:3e:a8:a4:b7:4d:33:ec:56:6c:35:cd:96:c7:36:
60:5d:5f:f4:a6:5f:e8:cd:bd:4c:89:7a:41:18:4d:
6b:04:1e:44:f2:97:a3:40:ed:01:78:13:1b:6f:95:
ba:8b:57:34:ef:47:d1:3b:a5:90:b2:00:bf:51:8c:
6e:27:7a:9e:78:3a:53:f4:80:44:4a:6b:b1:18:c2:
0b:b6:72:da:64:e4:3f:1d:dc:fc:02:fb:73:ff:65:
12:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F5:B8:A9:F4:EB:E3:F9:1E:8E:F3:95:AC:BF:6C:9B:30:6A:EF:EF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-vW4qfTr4_kejvOVrL9smzBq7-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
09:4a:9b:07:58:11:b4:df:f6:f6:eb:47:e8:b2:fd:2b:3d:c7:
6b:4c:6d:d5:40:ee:22:c7:da:d8:3a:b2:63:06:05:8d:dd:96:
2b:f3:5d:21:a7:fb:5a:a4:2a:8f:28:6a:c1:56:fa:5e:8a:27:
94:e8:7d:89:0b:d0:3c:07:12:59:e8:d3:35:a8:c3:20:03:0b:
79:b8:b8:86:b4:88:2b:95:58:26:98:fe:ab:93:ee:3d:ce:dd:
15:9b:43:6b:b2:77:be:b3:5a:06:1a:68:5b:60:74:8a:64:95:
f1:b8:f2:8c:94:68:22:32:aa:d4:8d:53:74:21:bf:15:74:8c:
6d:36:79:fb:6b:28:60:ed:4e:21:07:a0:a3:70:f7:7c:86:12:
7b:70:06:53:58:34:fb:d2:00:36:4e:32:3c:81:83:52:73:a1:
59:90:15:6f:90:60:0a:6d:4a:a6:db:1b:7f:f8:0b:05:77:1d:
46:96:bc:1f:bf:88:5f:59:82:d6:98:12:86:84:6c:55:ac:a2:
62:b1:d0:29:df:bb:f8:75:9b:3a:eb:e1:5c:a8:e2:a0:0c:09:
59:60:40:8a:fd:66:1a:b3:2f:93:03:de:48:73:6a:06:18:bf:
af:f2:eb:fb:0a:41:68:59:a8:27:03:6d:1f:d2:d2:96:9d:52:
0d:e9:19:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 01:56:30 2025 by rpki-client