Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/21LZq7Mv5zJHagurhiby0SdxXps.roa
File: 21LZq7Mv5zJHagurhiby0SdxXps.roa (raw, json)
Hash identifier: OQLIq7HMc08MJCF8ckzrRMs10lMlVqRsh+hxEdoioyk=
Subject key identifier: DB:52:D9:AB:B3:2F:E7:32:47:6A:0B:AB:86:26:F2:D1:27:71:5E:9B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 91CC7F19
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/21LZq7Mv5zJHagurhiby0SdxXps.roa
Signing time: Sat 02 Jul 2022 16:12:25 +0000
ROA not before: Sat 02 Jul 2022 16:12:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2446098201 (0x91cc7f19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 2 16:12:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=db52d9abb32fe732476a0bab8626f2d127715e9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1d:f3:e6:0e:b8:3d:b6:0c:ad:6c:ab:b8:9a:
d5:90:ae:48:21:aa:11:d3:59:3c:41:38:97:8c:4e:
70:f1:e0:54:6b:81:4c:35:fd:56:0e:90:e5:3c:d0:
e2:2e:ba:e4:b4:28:7e:43:9b:60:cf:fb:26:23:b1:
dc:d7:77:a1:0e:eb:1f:1b:29:be:bb:56:0a:a4:77:
65:05:12:ff:90:ee:db:ed:00:02:e3:3b:94:dc:d0:
2c:7c:f4:5d:50:b1:65:94:b3:3c:f8:48:75:bd:eb:
8e:cd:ea:37:64:dd:66:fd:0e:df:6d:54:2d:96:ce:
08:7c:12:8a:d8:3c:d3:42:32:cb:61:05:75:b4:3d:
7e:24:5a:dd:06:25:d3:19:dd:5d:a2:f3:99:9e:ef:
23:84:46:dd:20:d8:5c:fe:3e:e6:92:73:61:01:c2:
1b:58:a5:71:cb:30:62:2e:ee:97:90:36:db:a9:72:
9b:4f:e0:76:75:25:c5:ca:70:57:2a:59:36:56:be:
b1:d4:ce:18:9b:ed:d7:f8:80:a9:a6:5c:0a:90:03:
72:39:00:10:a9:75:ad:ef:70:e9:60:ca:6c:8c:0e:
09:fe:a1:f4:30:56:0f:e9:b0:69:90:ed:62:f2:a5:
de:b2:c0:03:98:62:26:f0:5c:fd:63:7e:5f:6a:44:
68:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:52:D9:AB:B3:2F:E7:32:47:6A:0B:AB:86:26:F2:D1:27:71:5E:9B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/21LZq7Mv5zJHagurhiby0SdxXps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
16:14:70:37:b0:04:5d:cb:7c:52:28:52:4b:19:da:45:5c:79:
c1:4c:df:bc:96:77:62:3d:95:c1:c9:93:be:a1:c9:b0:03:16:
54:16:3f:3f:16:ec:d0:92:00:6b:e1:38:ac:f4:82:6c:4a:7a:
1d:64:4f:86:46:e4:90:34:33:95:15:57:64:a8:11:54:63:00:
56:11:3c:a5:eb:84:cd:04:a1:8a:90:7c:fb:69:d2:82:d6:a9:
2d:c0:53:35:7d:2d:3b:63:79:1b:6d:d0:75:04:23:ec:0d:92:
f8:bf:17:fa:5c:59:53:b5:3f:31:c3:62:6c:b3:a2:a1:9e:d2:
ee:6d:14:67:81:12:81:1d:9a:52:86:0f:b3:b5:e8:6e:38:f3:
86:17:2e:65:6b:83:af:f5:81:3e:2e:dc:01:fe:d6:a7:23:e2:
39:06:18:ed:be:04:4d:39:f3:fb:69:0b:d7:b2:ae:6d:d5:93:
60:c6:4c:fc:39:78:76:fd:62:63:4a:f9:1d:4d:64:db:b6:3a:
d9:02:68:0f:75:1c:0e:13:c6:db:0d:ad:1b:b1:42:c5:1f:2a:
a6:5a:2b:b0:8a:dd:63:7a:54:88:df:b2:79:f9:86:4e:9d:71:
d7:0e:e2:a2:13:a0:89:c5:ab:a5:09:92:1f:38:2f:74:88:3a:
23:d4:bc:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 22:29:14 2025 by rpki-client