Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1puMGEbs_LabdWxUot1IwqC2B_A.roa
File: 1puMGEbs_LabdWxUot1IwqC2B_A.roa (raw, json)
Hash identifier: YCoasYCmC7OVUeZhX6jSG/M8VBsJQykbqVeem94DuOI=
Subject key identifier: D6:9B:8C:18:46:EC:FC:B6:9B:75:6C:54:A2:DD:48:C2:A0:B6:07:F0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 68877BAA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1puMGEbs_LabdWxUot1IwqC2B_A.roa
Signing time: Sun 06 Feb 2022 21:08:40 +0000
ROA not before: Sun 06 Feb 2022 21:08:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1753709482 (0x68877baa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 6 21:08:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d69b8c1846ecfcb69b756c54a2dd48c2a0b607f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5a:cd:40:02:fc:22:61:3c:3d:9d:e6:92:d4:
82:5a:a7:aa:32:42:f3:81:da:e9:39:a4:a6:32:e8:
1a:6b:3e:ff:c1:8a:7b:fe:20:16:f1:28:84:f1:e6:
f1:25:60:fa:d1:c8:8f:81:6c:33:d6:11:92:6c:9d:
3f:a6:f2:0c:65:6e:5c:3a:e7:72:1a:f0:6e:4c:92:
43:2b:09:bb:ec:8b:56:b0:19:86:56:97:e3:0c:59:
d6:f0:eb:d8:c0:f6:70:f6:93:1a:4a:c0:94:3c:2f:
63:af:1a:16:82:d5:90:4b:f2:ba:17:ad:e8:20:8c:
a2:03:19:e4:6b:f9:54:15:83:9a:2b:d2:7c:3d:97:
0b:de:24:72:73:15:ed:fd:46:e9:88:b5:f2:4a:d1:
84:6b:ab:c7:b5:e7:94:a6:78:a6:53:31:45:55:b6:
1f:51:14:f7:9e:00:46:f5:c7:d1:13:c8:ff:22:ea:
ad:6e:15:ee:6c:bc:1d:bc:b4:fd:91:77:3e:d7:ce:
6c:0f:29:93:ab:96:a4:87:9b:44:62:dd:f1:59:b9:
35:a0:c5:0a:50:8b:a4:09:97:51:8c:bf:5c:14:cf:
5f:7b:66:33:9e:68:9c:9e:27:e5:b1:c2:f7:79:49:
49:ed:a6:bb:9b:0c:82:83:60:b7:ed:d9:03:c9:4d:
54:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:9B:8C:18:46:EC:FC:B6:9B:75:6C:54:A2:DD:48:C2:A0:B6:07:F0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1puMGEbs_LabdWxUot1IwqC2B_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
52:3b:7a:59:2a:03:69:62:03:72:7f:ad:56:2e:4a:d6:dc:e9:
ce:11:ed:c0:d2:82:71:d9:1c:9f:21:03:bc:5c:5c:34:4b:a7:
23:09:7a:46:f9:a7:65:0d:86:6f:83:31:d5:94:fe:a1:95:e2:
2c:76:14:a6:99:b5:dd:8c:40:32:b0:71:b1:06:59:87:24:be:
48:9c:23:55:75:ad:f4:58:c4:d3:88:b2:30:3f:b2:92:56:cc:
c8:f5:ee:8f:fe:55:cb:6b:93:e7:da:f8:9a:bf:6d:db:fb:90:
10:23:da:5a:e4:92:68:c2:66:ec:a8:e2:5c:36:f5:a6:ff:0b:
5b:82:bb:91:d3:89:65:8f:34:d5:01:48:1a:54:bf:91:08:0c:
a9:dc:2d:32:d7:27:7d:6b:5d:eb:bb:2e:a7:86:27:71:08:06:
a6:71:44:cc:91:0f:59:26:1c:8b:23:44:c4:55:c4:34:11:c7:
42:ff:43:b2:d1:bc:83:31:9b:fa:a6:28:b3:42:fa:29:60:06:
ec:31:f0:fc:27:60:42:d8:34:95:64:b6:fd:9a:27:c6:ce:02:
58:6c:7f:86:b5:29:8b:b7:be:8e:d1:2a:d8:44:4b:31:af:35:
47:ef:f1:37:74:ef:df:4a:98:19:34:63:e5:5d:5c:f8:13:07:
b8:58:e2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:33:50 2025 by rpki-client