Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3cfyfbyclQeWtW3u4fbf9k-5Zo0.roa
File: 3cfyfbyclQeWtW3u4fbf9k-5Zo0.roa (raw, json)
Hash identifier: 9rUYDGMj2IPLqfq5yiuHS/whPzpAh8eKmpl/UsMN4FQ=
Subject key identifier: DD:C7:F2:7D:BC:9C:95:07:96:B5:6D:EE:E1:F6:DF:F6:4F:B9:66:8D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7A8CF826
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3cfyfbyclQeWtW3u4fbf9k-5Zo0.roa
Signing time: Tue 12 Apr 2022 00:11:29 +0000
ROA not before: Tue 12 Apr 2022 00:11:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2056058918 (0x7a8cf826)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 12 00:11:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ddc7f27dbc9c950796b56deee1f6dff64fb9668d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3c:f9:8b:b1:c0:27:16:93:29:64:fe:10:a6:
50:c1:cb:07:b5:61:73:7f:2a:c4:a6:de:98:f9:2b:
d6:80:13:fb:00:b6:a7:30:ff:3e:b9:03:4a:43:d2:
39:9a:3b:5b:32:f2:6f:16:46:41:0e:94:c1:64:c5:
20:ab:6d:91:bd:d0:7b:e9:38:34:61:e1:c5:6e:d2:
71:60:9a:8e:fe:8f:a3:d3:8f:1b:09:f1:e0:a8:3c:
0b:9e:73:e8:50:8e:33:69:01:d1:ab:fd:0e:92:6d:
51:08:ad:a2:53:f9:3f:0c:3a:25:ad:68:21:cb:cb:
6a:4d:da:92:7f:b0:a6:3c:f4:a5:29:1c:e2:65:15:
7f:8b:97:7e:84:d5:55:01:46:cb:ba:ff:b2:1a:0c:
f9:1e:22:de:7b:b3:07:3f:6a:35:84:c2:b8:6c:73:
cf:21:4b:46:2c:69:08:5a:a7:a9:45:8c:2c:5e:9a:
21:e9:9d:61:8e:73:37:f4:ea:47:dc:2f:83:ae:4c:
91:42:d5:cd:18:74:66:aa:22:3f:d9:a5:5d:e4:11:
31:b2:32:e5:30:b3:bb:57:4d:3a:88:c5:b1:ec:73:
d8:4c:4c:06:93:94:67:99:4e:45:d8:00:f3:0d:42:
e9:be:f0:5c:a2:cb:a0:03:cf:52:d5:67:0f:9a:a1:
4a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C7:F2:7D:BC:9C:95:07:96:B5:6D:EE:E1:F6:DF:F6:4F:B9:66:8D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3cfyfbyclQeWtW3u4fbf9k-5Zo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
35:15:d2:88:8e:21:15:08:a0:44:d7:b0:9b:72:bc:24:ef:7f:
63:d4:63:65:70:67:de:7a:a5:a2:2e:76:b0:63:5c:20:d7:41:
a4:f0:26:e0:b2:9d:0e:be:50:b7:15:01:dc:eb:81:96:66:0e:
e6:27:1b:09:27:9a:50:cc:82:c4:aa:38:a9:18:d5:63:b9:ba:
58:87:87:52:3f:30:42:a2:8d:c2:a1:68:f3:6b:eb:46:81:c7:
17:e5:a0:28:3d:a3:d8:cf:86:ca:e3:1e:42:f5:b2:dd:a5:06:
0b:df:e8:25:ca:e5:e5:f5:c0:38:41:34:1d:1a:00:59:f9:0e:
d8:a5:0f:5d:1e:a4:93:02:fd:6b:98:11:bf:84:5a:6b:e7:97:
a3:70:a6:e1:3d:13:16:1a:e8:f5:a2:e0:14:64:4c:48:d6:be:
87:a8:98:e7:1a:da:f4:49:30:28:e2:0c:75:eb:e0:58:48:e5:
62:9e:eb:1e:35:1f:c0:4f:4f:de:1b:3b:8c:21:d0:1f:95:fb:
22:b6:85:4a:19:35:a9:25:e1:00:fc:cd:61:42:bf:3a:f8:9d:
e3:2c:cf:4a:56:56:ff:0f:a4:ea:94:50:db:93:52:c3:ef:90:
2d:10:7a:d8:55:6a:ea:4a:0d:4f:41:4b:cc:0d:aa:ff:2b:47:
17:76:cc:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 18:26:32 2025 by rpki-client