Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/25qRCtBDrAQQC7BXov8Rt4I8Eww.roa
File: 25qRCtBDrAQQC7BXov8Rt4I8Eww.roa (raw, json)
Hash identifier: A62okikhtufC9bV+SppJhjyrv7O4KonA1e/B3F8tUMc=
Subject key identifier: DB:9A:91:0A:D0:43:AC:04:10:0B:B0:57:A2:FF:11:B7:82:3C:13:0C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 825E37B6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/25qRCtBDrAQQC7BXov8Rt4I8Eww.roa
Signing time: Mon 09 May 2022 02:11:49 +0000
ROA not before: Mon 09 May 2022 02:11:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2187212726 (0x825e37b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 9 02:11:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=db9a910ad043ac04100bb057a2ff11b7823c130c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ab:66:8e:cf:80:0a:a5:28:7b:93:df:76:90:
34:aa:5f:5f:e7:55:70:a4:65:41:26:e6:37:19:c9:
c4:2f:b0:8a:5c:5e:09:ff:d5:21:62:4a:c2:06:b2:
d2:5f:46:2e:25:92:dc:f0:f3:33:36:c0:4e:b1:87:
f3:d2:14:01:1a:06:24:3f:38:f2:12:a6:14:4b:55:
e4:10:ba:24:01:42:48:9f:79:72:80:f6:03:d5:af:
16:eb:a7:33:37:c2:03:a1:c8:78:c9:4f:a0:7f:c8:
08:e0:0d:48:d1:c6:c9:b6:9c:41:76:53:0c:29:e5:
fc:77:af:c7:10:1e:bf:66:7f:f2:59:1d:d7:75:37:
e1:8a:f3:29:45:9c:51:88:34:cd:fd:81:21:ce:9b:
5f:38:a5:1e:81:61:d5:9c:44:3d:2c:48:f9:9e:62:
64:42:df:e3:ef:85:fe:9e:43:69:94:9b:18:d8:26:
d7:aa:65:1b:87:de:c1:a8:3c:24:36:b9:0f:0f:94:
ec:5f:25:f5:c4:c3:36:c8:8a:08:24:5b:45:6d:e2:
79:85:a4:5d:b5:41:f6:43:71:9f:10:5c:70:aa:15:
98:4b:b6:4b:cd:a8:32:6d:b6:7c:fb:ec:1f:06:4c:
6d:bd:53:5b:f2:4f:cf:fb:d5:d7:59:57:99:38:7e:
7d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:9A:91:0A:D0:43:AC:04:10:0B:B0:57:A2:FF:11:B7:82:3C:13:0C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/25qRCtBDrAQQC7BXov8Rt4I8Eww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
08:d3:8d:2d:f7:43:0a:2f:0e:ad:a3:1d:f8:16:4d:1b:40:c7:
b8:30:3a:5c:bd:e4:a5:26:e2:db:16:d2:90:a8:43:74:c8:eb:
0a:e3:01:74:11:d4:16:da:f2:52:02:c2:24:ac:18:b4:54:fb:
fe:53:6f:a1:70:ad:74:aa:47:2d:97:20:17:1f:71:73:53:dd:
4d:48:e7:9a:44:a7:0b:08:22:5d:97:c2:48:e6:0b:51:19:42:
5b:a9:48:e7:4b:3f:35:d1:0a:24:b5:92:3c:22:62:09:7c:c3:
49:92:76:7e:45:21:1a:17:8f:fc:ea:9f:db:b3:d1:c4:fa:9c:
f8:19:36:84:2f:db:52:2f:6c:44:ef:fc:51:20:1e:fe:c5:9e:
22:bc:91:18:01:74:ee:0b:77:98:d5:79:b4:fa:be:6f:2c:97:
dc:af:1e:7f:ae:55:f0:b9:99:d2:ab:a8:36:4a:8e:9b:17:82:
80:03:22:66:87:07:66:74:fc:96:09:2f:38:6d:d7:57:5e:3c:
f9:89:ad:c0:f2:f6:05:bf:a9:b0:3c:8c:0e:40:51:e8:62:8e:
ff:17:d7:30:74:ce:fd:ea:6a:11:2d:36:94:a2:f5:c1:39:d2:
1e:0e:0e:17:e8:1f:40:c4:71:b1:e3:d5:ee:16:30:ac:82:95:
9d:fc:a2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 16:14:38 2025 by rpki-client