Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/44X8oa209esN9bFTdxVLnRjQH7c.roa
File: 44X8oa209esN9bFTdxVLnRjQH7c.roa (raw, json)
Hash identifier: 21vgUtcwNfDteqYjWvQrN/ypqbtOXWOrOMvfU8TWqbc=
Subject key identifier: E3:85:FC:A1:AD:B4:F5:EB:0D:F5:B1:53:77:15:4B:9D:18:D0:1F:B7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 69969667
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/44X8oa209esN9bFTdxVLnRjQH7c.roa
Signing time: Fri 11 Feb 2022 03:09:34 +0000
ROA not before: Fri 11 Feb 2022 03:09:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:d600:60b0/128 maxlen: 128
2001:67c:64:ffff:0:17e:d524:ead9/128 maxlen: 128
2001:67c:64:ffff:0:17e:d9a6:5e4a/128 maxlen: 128
2001:67c:64:ffff:0:17e:ddba:7b5e/128 maxlen: 128
2001:67c:64:ffff:0:17e:db26:e5c4/128 maxlen: 128
2001:67c:64:ffff:0:17e:dab9:26f6/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17e:da82:41aa/128 maxlen: 128
2001:67c:64:ffff:0:17e:dd83:3b9e/128 maxlen: 128
2001:67c:64:ffff:0:17e:dcde:5809/128 maxlen: 128
2001:67c:64:ffff:0:17e:d938:ba2e/128 maxlen: 128
2001:67c:64:ffff:0:17e:d85c:d348/128 maxlen: 128
2001:67c:64:ffff:0:17e:daf0:4034/128 maxlen: 128
2001:67c:64:ffff:0:17e:dc02:dc22/128 maxlen: 128
2001:67c:64:ffff:0:17e:d592:92a4/128 maxlen: 128
2001:67c:64:ffff:0:17e:d7ee:e040/128 maxlen: 128
2001:67c:64:ffff:0:17e:d6a5:23ae/128 maxlen: 128
2001:67c:64:ffff:0:17e:d901:fecb/128 maxlen: 128
2001:67c:64:ffff:0:17e:d7b8:3101/128 maxlen: 128
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64:ffff:0:17e:d826:2565/128 maxlen: 128
2001:67c:64:ffff:0:17e:dc39:b603/128 maxlen: 128
2001:67c:64:ffff:0:17e:db5e:7e8/128 maxlen: 128
2001:67c:64:ffff:0:17e:d713:9aeb/128 maxlen: 128
2001:67c:64:ffff:0:17e:d55b:c264/128 maxlen: 128
2001:67c:64:ffff:0:17e:d66e:8559/128 maxlen: 128
2001:67c:64:ffff:0:17e:d96f:7a13/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1771476583 (0x69969667)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 11 03:09:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e385fca1adb4f5eb0df5b15377154b9d18d01fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:69:d4:72:c3:08:6f:76:09:4e:81:5c:59:5b:
5a:61:99:bc:39:9c:47:ed:98:e6:38:c0:1c:8f:f1:
82:4c:c3:74:ae:71:bb:01:67:a4:49:d4:38:68:9a:
99:e9:21:c5:eb:54:e3:b5:c8:aa:23:64:ac:8f:eb:
ce:93:f9:f2:47:91:47:0f:55:f1:0b:a3:b1:a9:da:
e1:c7:f7:43:8c:65:d3:19:5c:7a:88:28:d9:a6:2c:
ba:ce:1c:da:1f:bc:6a:b1:8a:52:bc:66:cb:be:df:
48:1c:c6:04:da:4e:4a:e8:57:09:36:d5:6a:f5:e2:
a5:38:76:04:c9:09:f9:21:9f:7c:40:e2:ab:91:ca:
9c:55:17:81:82:f2:44:32:0f:1f:f9:6f:db:86:5b:
4e:16:4a:c5:90:64:c8:c1:9a:b3:1a:82:d9:ec:46:
ba:89:69:4c:75:ff:b0:16:ea:a8:3b:76:c8:ee:1d:
43:f6:46:e0:36:a5:26:fa:1d:da:d7:7b:67:02:74:
3d:53:13:c9:86:f8:6f:34:90:e1:be:0b:07:b6:8d:
bb:4f:1d:83:71:3e:b1:cd:15:2e:20:41:17:81:3b:
20:c4:2f:98:37:a6:d7:be:18:84:50:e2:28:9f:e9:
f6:1b:a5:55:c2:7b:60:af:fe:3a:9c:81:bc:88:59:
e4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:85:FC:A1:AD:B4:F5:EB:0D:F5:B1:53:77:15:4B:9D:18:D0:1F:B7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/44X8oa209esN9bFTdxVLnRjQH7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
56:cf:8a:e3:d9:c9:9e:71:57:db:12:32:c5:fd:94:d9:1d:c3:
4c:00:59:af:90:37:46:96:f0:32:8f:71:61:cb:af:3d:d1:0d:
2a:0a:b9:59:94:3e:71:98:6b:5b:e7:d9:a2:1f:83:2b:e5:ea:
4d:38:26:2d:28:0c:59:bd:eb:81:c9:09:c5:fc:53:cc:68:26:
fc:bd:ca:97:a1:63:15:42:19:9f:31:6f:5d:2b:37:8c:b8:04:
a8:0f:86:8e:06:76:e9:d5:41:57:d6:85:6d:9e:cf:b7:e3:d3:
c1:e5:95:f5:50:4b:36:26:f2:fb:d7:2a:a6:0e:63:a8:8b:d0:
98:6e:4e:d7:7a:7f:5d:b6:06:5b:65:76:f0:55:9c:2a:51:f0:
52:4e:dd:b5:be:39:0e:ba:8f:80:a7:d2:21:c2:64:57:d2:37:
b2:2c:3e:78:96:24:8a:39:1a:3e:c8:b6:50:3b:ed:f1:f1:2b:
8e:6e:3d:6d:6f:64:c2:d4:5c:cc:21:6f:2e:93:57:5d:ca:3f:
62:ed:c3:82:77:2f:b4:b3:90:91:ce:73:d3:c8:bc:b9:13:bf:
c0:32:3d:ff:71:1a:5b:7a:3f:14:7f:68:b7:71:9d:34:68:22:
a8:06:8d:00:45:49:3f:d8:86:64:ad:4c:1e:a2:98:84:c0:da:
b5:df:70:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:45:44 2025 by rpki-client