Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/44MEYqAd_aqJ_xRlQ8w9SnKEcPE.roa
File: 44MEYqAd_aqJ_xRlQ8w9SnKEcPE.roa (raw, json)
Hash identifier: /eVkSv/9l63YVFlYG9v4nPkD2oOl1bc6s+xXJMffji4=
Subject key identifier: E3:83:04:62:A0:1D:FD:AA:89:FF:14:65:43:CC:3D:4A:72:84:70:F1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01856F9A0101C55A2AE8542AD80352AFD3EE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/44MEYqAd_aqJ_xRlQ8w9SnKEcPE.roa
Signing time: Sun 01 Jan 2023 23:10:41 +0000
ROA not before: Sun 01 Jan 2023 23:10:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9a:01:01:c5:5a:2a:e8:54:2a:d8:03:52:af:d3:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 1 23:10:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3830462a01dfdaa89ff146543cc3d4a728470f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:0d:ea:b6:4a:29:8e:d0:95:04:38:8f:64:6b:
9e:e5:76:e0:20:e9:af:9d:9e:bf:97:eb:cc:3f:68:
f3:55:60:a2:df:c2:d3:12:75:27:da:5f:a6:93:88:
de:95:34:b1:25:22:5b:d8:e1:a6:66:88:8e:87:6a:
cb:1e:77:b3:b9:e7:f1:a3:5c:9a:98:d9:97:99:13:
41:b2:6b:9b:b2:ba:4b:19:f2:c6:66:ae:08:a4:54:
fa:4a:75:8d:53:57:7a:cd:58:1e:c9:00:1d:21:0f:
4d:03:e0:1a:01:be:84:f9:d5:40:48:c5:17:75:52:
ba:f2:53:47:ed:1e:60:68:24:5e:c7:c2:a5:b6:35:
1f:94:df:45:ca:6a:69:4f:02:9c:24:cc:ed:e6:25:
e0:3a:60:69:9b:fb:2b:4f:61:44:6e:1e:c4:59:b2:
59:f3:f7:f8:23:95:c5:f6:8e:4c:de:fe:f4:7a:32:
3f:ce:3b:64:68:30:ef:5b:b1:57:9a:56:7e:08:93:
d9:c3:4f:97:8b:a1:ff:10:ad:b6:62:46:e7:de:65:
de:3c:ec:f6:25:d1:cd:0c:87:1b:80:ff:69:31:89:
82:04:b6:cd:bf:b8:a2:78:e2:63:6e:59:87:fe:67:
7d:6e:d5:a9:cb:3c:07:be:26:e4:3b:7b:c2:89:07:
46:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:83:04:62:A0:1D:FD:AA:89:FF:14:65:43:CC:3D:4A:72:84:70:F1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/44MEYqAd_aqJ_xRlQ8w9SnKEcPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ab:d5:67:a2:21:bb:e3:d7:f6:c3:c5:d7:2e:dd:fa:c8:85:59:
ec:34:bd:25:11:92:c8:03:43:90:5f:38:5a:89:91:e2:9f:90:
ad:55:15:a3:4f:3c:9c:dd:ac:b9:c4:19:80:4e:95:36:de:e8:
d0:b2:ba:a3:a1:17:d3:56:67:b7:2f:bb:93:80:03:1e:0a:ca:
9d:91:96:65:1c:46:79:12:58:ee:53:7b:d0:53:91:ae:97:bd:
aa:ba:bc:54:44:4f:1a:5d:8a:77:b8:d0:4b:22:4b:50:6e:2d:
44:72:fd:30:bb:9f:63:27:b9:99:3f:e4:e5:dd:5a:95:14:c3:
02:44:7f:5a:9e:0d:7c:9b:eb:8e:c0:d1:5a:eb:43:1b:62:8b:
8d:dd:8d:a1:04:db:e1:9a:d3:04:9e:84:87:14:b9:c9:12:1b:
dd:d2:97:ed:45:c5:e3:0c:19:e7:04:a8:6d:78:cd:e8:5a:bd:
83:13:bc:7c:16:77:7f:47:81:cc:33:81:e5:a4:8c:19:4a:c1:
e5:f1:c1:ce:76:b4:6c:0e:9b:1d:5b:22:49:ec:3c:04:11:9c:
8d:17:14:ba:f9:1e:f1:c9:2e:21:eb:77:72:47:9d:98:16:bb:
cc:14:dc:53:9e:56:37:e6:43:2c:8a:6a:24:2a:e3:4e:6f:88:
c5:26:e8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 02:16:43 2025 by rpki-client