Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2fsIK3Eueh2tk7X0SN5r0K_8_48.roa
File: 2fsIK3Eueh2tk7X0SN5r0K_8_48.roa (raw, json)
Hash identifier: XKBODvRuM9I4Kv03G1UtTOneM8h/CaFa5U5Yf5H170w=
Subject key identifier: D9:FB:08:2B:71:2E:7A:1D:AD:93:B5:F4:48:DE:6B:D0:AF:FC:FF:8F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184802561382D668F950BD5B1FDBECB5A75
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2fsIK3Eueh2tk7X0SN5r0K_8_48.roa
Signing time: Wed 16 Nov 2022 11:14:04 +0000
ROA not before: Wed 16 Nov 2022 11:14:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
2001:67c:64:ffff:0:184:75cf:c8d9/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:80:25:61:38:2d:66:8f:95:0b:d5:b1:fd:be:cb:5a:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 16 11:14:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d9fb082b712e7a1dad93b5f448de6bd0affcff8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:25:a7:11:08:30:d4:ce:57:24:82:16:0b:32:
65:82:96:08:3a:03:6a:99:99:e3:0d:89:8d:fb:3c:
ac:8f:e4:07:d4:07:cd:28:1f:04:4a:2b:a0:e2:43:
ef:cc:af:83:54:1d:81:60:8b:a7:1d:3a:2e:fb:c9:
36:52:19:12:4e:ed:f6:27:1b:27:c5:f5:f3:42:d5:
67:5e:25:54:14:73:8e:06:d3:fa:dd:b0:45:33:cc:
c1:ee:c2:a1:5a:91:a3:c2:47:d8:7b:5d:5e:42:3b:
f3:5e:e1:61:6c:a5:13:30:62:b5:ba:59:0d:f7:ce:
fb:2f:3d:1a:a3:68:82:34:10:da:17:8b:8f:79:e1:
8b:4a:30:d8:06:5a:2e:65:65:14:8d:18:53:3d:70:
1e:d9:3d:9d:01:46:eb:65:88:a9:e7:2e:f2:bc:66:
f5:1a:5a:76:0b:d6:2c:26:87:73:f6:05:c5:e7:4c:
d1:72:f4:08:6a:9a:f3:54:3f:9d:7d:cb:40:bb:5d:
0d:a4:5b:18:08:b0:77:ce:64:ff:52:1f:84:02:7a:
fb:dd:a4:b2:fe:ea:a5:a9:33:76:3a:1c:d0:dc:bb:
de:c0:c3:76:5b:ca:a0:3d:19:cb:ee:81:f2:0c:28:
28:a9:29:2a:a3:6d:c7:2d:c9:f8:1e:8e:65:7f:94:
7f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:FB:08:2B:71:2E:7A:1D:AD:93:B5:F4:48:DE:6B:D0:AF:FC:FF:8F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2fsIK3Eueh2tk7X0SN5r0K_8_48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0f:f6:85:a0:38:1f:9d:11:46:52:6d:b5:8c:88:34:de:0b:22:
dd:a5:95:98:01:e8:54:86:4b:45:60:64:33:42:1d:ac:b7:4c:
a1:ee:38:dd:40:76:6d:37:d2:4c:aa:e7:cd:bc:65:95:fd:ca:
6a:a6:e6:3f:e2:cb:bd:ab:42:e3:5c:33:20:84:21:e6:d7:85:
85:14:e1:66:3c:32:04:b2:6b:eb:27:57:30:f1:f9:04:4d:e2:
d4:4a:51:c6:08:41:b3:c7:bb:b3:89:83:b8:65:31:c0:58:f7:
54:aa:3e:a8:da:d1:66:2b:59:8c:cd:85:43:88:14:13:2f:b6:
3f:3d:bf:02:b8:95:de:7f:00:5e:c2:3f:66:b6:bb:1d:a7:32:
3c:ff:74:11:01:bd:69:09:8e:e6:72:54:4a:1d:e1:2e:1e:27:
2c:8f:cc:17:41:d8:e5:cb:ae:1a:53:5b:dd:d3:4b:bb:a4:6f:
8c:20:06:4a:cc:da:c7:63:6e:26:c8:ac:2c:fa:61:5d:1b:2c:
a5:1a:61:08:e9:f6:f7:0f:37:af:a9:6d:49:5e:66:02:67:56:
d5:60:d7:a5:ea:aa:e4:7c:c3:37:0d:22:e7:55:b3:43:a7:f1:
1b:f5:63:ef:dc:93:64:c6:82:dc:f1:08:c9:a8:50:ae:c3:32:
dc:97:25:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:52:08 2025 by rpki-client