Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1xgIDcbiZ-ODGZVzXXQZNxlJTVA.roa
File: 1xgIDcbiZ-ODGZVzXXQZNxlJTVA.roa (raw, json)
Hash identifier: 34969NSI17BayonDXxmmDT9mL2xILCGZuXNGfqVdhmQ=
Subject key identifier: D7:18:08:0D:C6:E2:67:E3:83:19:95:73:5D:74:19:37:19:49:4D:50
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8D857AEF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1xgIDcbiZ-ODGZVzXXQZNxlJTVA.roa
Signing time: Fri 17 Jun 2022 12:07:44 +0000
ROA not before: Fri 17 Jun 2022 12:07:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:56ba:5b78/128 maxlen: 128
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2374335215 (0x8d857aef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 17 12:07:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d718080dc6e267e3831995735d74193719494d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:26:f1:66:87:36:10:39:00:f2:0c:74:2f:ba:
da:d4:7f:4a:87:84:3e:04:64:ea:4f:20:4d:08:e6:
ea:6f:0e:c2:4a:ed:68:2b:d1:3b:75:59:74:00:ea:
53:c1:b4:3f:6f:5b:88:b7:e4:c4:71:5a:40:83:b8:
f7:d2:18:3d:80:3d:19:69:ff:7c:f7:c1:04:cf:d3:
1a:48:e0:26:74:d0:6f:2f:00:3b:b8:6e:a7:66:4e:
75:d2:26:3b:2e:eb:ad:28:c2:41:46:05:7f:0e:c4:
63:f6:7d:4d:a6:50:a4:99:f4:d3:f8:3b:0b:54:79:
20:96:15:2d:12:be:cd:8b:61:9d:d5:f9:57:a9:cc:
07:6c:05:0b:bd:e4:3a:1e:18:e1:b9:90:af:26:74:
7e:68:ae:0d:5e:bb:a6:98:ab:70:0c:16:85:f3:a1:
03:2b:f4:d9:ae:42:9a:27:fa:4d:fc:fb:71:d9:be:
59:4d:16:cd:45:f4:b2:cb:89:42:f9:e1:bb:60:0f:
97:3a:6b:63:1f:ee:59:74:9c:d1:9d:8f:65:8a:ee:
75:ce:e1:ab:0e:08:60:e2:26:4e:44:e6:56:96:87:
16:df:64:9a:b5:b6:d6:74:58:f6:ae:74:2d:98:4d:
2b:66:b6:3f:b5:6f:da:5a:80:ea:3c:10:d6:1e:f5:
ff:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:18:08:0D:C6:E2:67:E3:83:19:95:73:5D:74:19:37:19:49:4D:50
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1xgIDcbiZ-ODGZVzXXQZNxlJTVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4b:63:6c:d5:1e:b0:c4:2c:4f:e5:7e:c2:25:7d:d8:b0:a6:62:
a8:1f:87:68:13:ba:a3:74:15:c2:82:cf:f1:80:df:ec:89:1a:
64:93:89:78:5d:ef:f3:87:90:a9:3b:1b:20:74:bc:56:91:f9:
df:29:20:f0:d6:a0:18:0a:fc:5a:4e:65:23:01:d7:f8:16:8a:
77:fb:02:5c:6e:95:18:20:26:9b:81:84:92:9d:2e:84:34:57:
23:8f:33:43:6b:52:88:16:a0:ce:57:73:2e:1c:aa:3c:2d:24:
f7:1e:e1:f1:94:c9:05:3a:bc:f5:45:13:d6:93:05:73:04:cc:
11:b7:c6:ff:91:29:e8:ac:dc:ef:dd:95:49:ca:fd:3b:c2:b2:
7b:cb:44:6d:85:b1:a5:64:80:16:6c:c2:6f:dc:aa:f7:20:5e:
f2:5c:b8:a6:41:6f:2d:c4:a3:75:5a:b6:39:31:03:cc:c9:32:
e6:8c:8f:88:dc:07:51:83:83:a6:4e:7a:2e:b7:6a:e4:28:41:
84:ce:a3:d1:ff:5a:b6:d9:d7:77:23:e6:a4:3f:fa:c8:eb:12:
76:a9:1e:a4:aa:bb:0b:3a:2f:3a:c1:10:01:6c:c4:c8:5a:dc:
c6:2e:2b:50:3f:c0:5d:d8:b5:a0:f8:fa:a5:b5:b2:a3:ba:8d:
1e:c9:6e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 02:32:38 2025 by rpki-client