Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1_StdkdvfowcUQTizRuEu9eNSLk.roa
File: 1_StdkdvfowcUQTizRuEu9eNSLk.roa (raw, json)
Hash identifier: 78otdqanoDQgOdZG+hvONNN5WKuJ2Ed42oaBGLAH8D0=
Subject key identifier: D7:F4:AD:76:47:6F:7E:8C:1C:51:04:E2:CD:1B:84:BB:D7:8D:48:B9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184D2F873FA13D4DB6EC3E1F82052506B48
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1_StdkdvfowcUQTizRuEu9eNSLk.roa
Signing time: Fri 02 Dec 2022 13:13:28 +0000
ROA not before: Fri 02 Dec 2022 13:13:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d2:f8:73:fa:13:d4:db:6e:c3:e1:f8:20:52:50:6b:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 2 13:13:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d7f4ad76476f7e8c1c5104e2cd1b84bbd78d48b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:19:68:24:a0:6d:e3:25:c9:4a:e5:25:e1:1b:
5b:a3:2f:86:68:69:56:b4:6f:81:c3:65:ff:27:b1:
93:e9:14:c2:d5:49:0f:44:47:47:6b:dd:30:06:ff:
17:2a:bd:4b:82:2e:a8:d3:30:70:17:6f:21:c3:94:
dc:e7:2f:d4:83:56:f2:74:7b:04:63:43:9c:d7:4c:
64:16:af:cb:a2:0b:2b:dc:2a:61:ff:88:9e:46:22:
3e:b9:11:94:03:02:f7:c8:5b:eb:f7:05:ee:4b:e1:
34:52:d6:67:58:15:d1:64:e6:09:76:7b:4a:c0:b5:
0a:ea:0e:2a:91:2c:47:20:c5:4d:1e:6e:44:33:6a:
91:e5:2d:d9:8a:f6:c3:41:10:09:75:fa:8e:36:fb:
56:e5:c7:e7:4e:e4:6e:af:7a:f5:b5:ff:e1:11:2e:
1c:b4:34:89:a7:75:4c:2f:c8:2c:37:7a:1d:bf:83:
e6:f1:16:b4:18:0b:d5:cd:0d:05:45:2c:46:e7:c4:
b1:3e:ca:b9:46:fd:95:02:63:6a:7b:f7:6c:a0:4f:
16:b2:b1:92:29:6a:b1:77:ae:d4:42:f4:5d:6d:3a:
51:06:0f:68:3b:89:0e:d2:be:3e:92:23:5a:55:4e:
44:b4:4f:a8:3a:38:e9:bf:9b:40:84:3f:a1:70:e5:
e2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F4:AD:76:47:6F:7E:8C:1C:51:04:E2:CD:1B:84:BB:D7:8D:48:B9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1_StdkdvfowcUQTizRuEu9eNSLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
90:b4:8b:43:ae:4f:e2:95:7c:08:10:35:e8:c3:6f:ae:8c:05:
90:5a:5b:43:c1:31:80:71:7d:f5:17:8f:1a:0d:71:47:49:d9:
8e:a6:c0:0b:d9:bf:bc:67:a5:06:c6:b7:eb:d5:6c:c8:87:5c:
b7:ba:6b:fa:68:86:27:c1:81:2e:a7:0c:d3:48:50:01:53:60:
74:5d:79:a9:d2:2d:86:02:70:1c:39:8a:f3:02:5a:bc:3c:1e:
1c:e3:f7:22:30:cd:52:80:79:47:bf:a5:51:02:54:19:8a:b4:
a0:61:00:a7:0b:7d:19:51:bc:d7:37:33:7d:2a:b0:98:43:88:
a3:f8:91:97:4f:e2:19:57:67:6c:4b:77:9e:d7:ea:be:d9:0d:
ce:39:a1:a6:bc:2d:fe:9f:84:7b:5c:da:f1:3f:b1:a2:ff:a7:
8f:97:dd:03:6a:01:69:b4:09:38:ea:a4:d9:93:2e:f7:19:f1:
85:c7:0a:d8:2c:16:58:2d:5d:18:79:58:b1:8a:9c:85:9c:57:
bf:d5:c7:97:b7:1b:1c:f0:b1:92:16:39:3d:19:36:60:7d:7d:
0b:9a:4f:70:35:f4:8f:5e:b5:6c:69:da:0b:2b:c6:37:0e:2c:
10:a4:63:be:79:18:cf:1e:b2:08:00:dc:15:7a:6b:f5:00:b4:
e5:fe:fe:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:08:08 2025 by rpki-client