Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/37RlgWkU_ACCEM1VZVieLxMBS1M.roa
File: 37RlgWkU_ACCEM1VZVieLxMBS1M.roa (raw, json)
Hash identifier: P4LP7pYzFmL+En7XYoDJgD/jV4ybh4L+b+0uFNNLjSY=
Subject key identifier: DF:B4:65:81:69:14:FC:00:82:10:CD:55:65:58:9E:2F:13:01:4B:53
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8843F72C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/37RlgWkU_ACCEM1VZVieLxMBS1M.roa
Signing time: Sun 29 May 2022 20:11:14 +0000
ROA not before: Sun 29 May 2022 20:11:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:180:ff9c:1e7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2286155564 (0x8843f72c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 29 20:11:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dfb465816914fc008210cd5565589e2f13014b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a0:0c:55:d8:18:45:71:f1:70:2c:1a:94:69:
8f:1b:ba:17:1b:a1:97:ec:f6:51:75:1d:81:26:68:
3f:fe:a0:44:fd:53:24:83:bb:85:9f:1e:13:32:a2:
a6:6c:3a:d0:bc:d1:44:00:45:33:2c:cb:b2:2d:b6:
61:c6:52:fb:c5:6b:ac:06:4e:70:0f:8d:a7:1e:be:
fb:b6:74:ae:85:52:ec:a9:4a:ab:1d:0e:6c:0a:18:
bb:3e:3c:a0:ef:b6:c6:72:81:59:ac:d2:0d:de:63:
3b:f2:d5:5a:96:a9:c0:9a:10:58:81:93:1d:28:2b:
39:b0:9d:68:95:de:de:24:8f:fe:75:94:61:f0:54:
db:04:35:46:81:4c:c9:7f:52:29:99:fc:b6:74:ee:
49:bb:f3:94:b1:39:83:49:4a:74:fb:61:8d:7b:b1:
e0:b5:da:d0:6b:eb:3f:95:a4:63:ae:b0:d4:2c:bf:
cc:5b:32:3d:05:0a:79:7c:36:bd:96:62:7f:1f:97:
73:3d:16:52:72:95:cd:43:76:b6:28:78:26:66:26:
88:bd:ae:a0:87:92:7b:4d:b1:be:ac:31:3b:ef:bf:
3a:b9:83:1f:26:63:96:29:a3:21:f8:fa:6f:e1:5d:
09:93:fb:bd:2a:35:03:c7:9a:d6:5e:55:b2:14:0e:
cf:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B4:65:81:69:14:FC:00:82:10:CD:55:65:58:9E:2F:13:01:4B:53
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/37RlgWkU_ACCEM1VZVieLxMBS1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
78:65:7c:ca:82:06:c3:4c:ab:99:f2:cb:a5:af:e4:d3:cd:a1:
c1:b2:71:d2:d2:1d:2f:f2:dc:72:bc:b4:74:38:89:02:28:05:
70:54:01:48:5a:17:a0:87:8d:e2:fb:0e:3b:77:e7:06:ae:6b:
67:7c:5c:90:f0:0d:7f:5d:d3:20:7c:ee:9a:de:80:9c:88:62:
71:99:e5:dc:34:0c:c6:35:57:39:81:78:c8:6f:a7:b4:1a:6c:
e1:3f:7c:71:be:4d:ee:2c:10:1e:6c:80:54:ab:a1:c1:b1:94:
38:22:54:ad:78:3e:8a:1f:84:af:19:cb:56:63:1e:0c:0e:b5:
15:e8:19:98:f2:bf:08:2d:93:06:34:7b:2b:b5:7c:ae:61:0a:
b1:ca:11:be:f6:5e:5b:25:6c:5c:45:55:a1:64:a9:bd:4f:eb:
0f:8d:29:43:63:2f:41:52:29:f2:c4:0c:b1:a7:de:76:b9:b2:
e7:46:b3:7b:2b:1e:02:c3:2d:7a:b1:6c:cc:75:65:45:e4:74:
06:8e:c6:ba:36:64:ef:d7:ff:7f:88:6c:2f:26:b5:2d:b0:33:
1a:38:b9:ec:14:c4:1f:ad:c3:68:ad:0d:14:e8:2d:ee:13:dd:
ca:f7:54:6e:5b:47:55:2c:ae:97:22:fa:ca:b6:e3:42:8e:4d:
70:34:91:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 08:48:19 2025 by rpki-client