Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2NmQ7VbTA3chf2ev2uxBAkicsY0.roa
File: 2NmQ7VbTA3chf2ev2uxBAkicsY0.roa (raw, json)
Hash identifier: KxVp4VGoYNIehojBdEGHsqmZfXC8zJQBfhsCPYEeh2g=
Subject key identifier: D8:D9:90:ED:56:D3:03:77:21:7F:67:AF:DA:EC:41:02:48:9C:B1:8D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184CBAB217EAE3C79934EFD60CC0EC6C818
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2NmQ7VbTA3chf2ev2uxBAkicsY0.roa
Signing time: Thu 01 Dec 2022 03:11:40 +0000
ROA not before: Thu 01 Dec 2022 03:11:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:ae77:4719/128 maxlen: 128
2001:67c:64:ffff:0:184:9f03:9814/128 maxlen: 128
2001:67c:64:ffff:0:184:bdea:9abb/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:cb:ab:21:7e:ae:3c:79:93:4e:fd:60:cc:0e:c6:c8:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 1 03:11:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d8d990ed56d30377217f67afdaec4102489cb18d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0e:43:c1:44:3f:d5:ed:56:9e:cd:c0:eb:e6:
8f:95:eb:00:7c:95:63:9a:62:e6:fb:77:d3:29:c4:
d6:ae:76:6a:8d:84:7e:fc:a2:f5:33:58:96:75:66:
1d:85:04:6e:85:1c:d9:81:1d:51:ab:0e:16:54:14:
e1:d8:f8:0d:f4:9a:46:f3:03:a6:c9:e7:f2:9f:78:
eb:8d:c1:6b:07:dd:40:62:0a:c3:da:ee:16:fb:88:
62:af:cc:ae:87:5f:6e:2c:b9:db:61:b9:16:87:c8:
4e:bb:57:22:1c:1a:5b:bc:d9:c7:e9:37:30:26:6d:
6b:08:cf:11:e9:ee:e4:1d:ca:11:70:0f:bb:4b:e4:
f3:a9:f4:50:17:e3:a9:09:70:1c:83:8d:42:8f:1c:
87:09:2c:40:8b:2e:01:5b:a8:e8:d8:cf:a6:7e:03:
98:24:ae:df:89:ce:98:91:66:f7:ab:99:9f:ca:94:
c7:6d:9d:2d:f0:67:7e:99:f5:1f:61:6f:01:f7:f3:
e4:38:8e:41:b8:2e:57:2c:2d:ee:cf:7e:3b:1c:4e:
76:e0:7c:04:a5:ea:99:5c:0a:e8:6c:2f:ec:ea:c8:
bd:80:d4:a2:62:58:55:97:18:c4:dd:7e:d5:ce:94:
72:05:94:35:1c:8c:a7:d0:4e:bc:18:71:2a:a2:f1:
db:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D9:90:ED:56:D3:03:77:21:7F:67:AF:DA:EC:41:02:48:9C:B1:8D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2NmQ7VbTA3chf2ev2uxBAkicsY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
63:43:a8:78:7a:6b:1e:09:a3:df:e9:e4:ce:33:fe:da:4e:f3:
c0:56:c8:e1:d2:9f:9a:ec:10:73:de:ff:05:71:80:fc:59:35:
93:ad:5b:db:1a:a0:d9:bb:80:b0:76:01:6f:7c:93:a3:89:4e:
dd:b0:4d:68:20:0e:54:20:84:9f:92:9e:cc:c5:fe:a9:49:54:
22:3f:44:be:cd:8f:8f:b5:43:f0:c8:c9:e8:4f:12:4d:dd:66:
0b:95:52:e8:23:19:02:f5:67:5a:72:d1:f5:ab:ac:6e:0f:ff:
8a:6a:48:80:72:75:f4:53:78:f6:d4:a1:d7:80:78:2c:b3:d3:
fd:73:c2:4f:a2:d3:b2:a0:8c:e1:ca:01:3e:27:7b:f1:00:e8:
b3:78:c4:18:2e:44:ec:09:ab:4d:55:8e:1b:af:8a:6d:1b:6f:
ef:7c:ce:f3:19:ff:a0:70:29:1e:87:3a:01:44:c0:c2:ed:a6:
f3:d0:e6:ef:0e:00:d5:42:23:ea:b6:75:9b:d8:32:f1:cc:96:
14:5f:05:e5:e7:33:a3:af:81:27:66:2e:e3:4c:6d:fe:b4:8a:
61:ef:09:35:56:58:60:19:6e:ce:05:ba:a7:52:8e:42:d6:9f:
fc:c6:da:56:ef:75:d8:52:33:2c:9e:5b:cb:7c:91:65:a3:bc:
dd:31:84:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:45:30 2025 by rpki-client