Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/487PB1iGJiPgUCkzyFjThzZgQkY.roa
File: 487PB1iGJiPgUCkzyFjThzZgQkY.roa (raw, json)
Hash identifier: gtZKzVHBwN6VxB6I82LFhGtZyPB+xo6vgUdCvhDY0gs=
Subject key identifier: E3:CE:CF:07:58:86:26:23:E0:50:29:33:C8:58:D3:87:36:60:42:46
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184640B2733F7BAE0063C4193F1E4E5A07C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/487PB1iGJiPgUCkzyFjThzZgQkY.roa
Signing time: Fri 11 Nov 2022 00:16:03 +0000
ROA not before: Fri 11 Nov 2022 00:16:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:64:0b:27:33:f7:ba:e0:06:3c:41:93:f1:e4:e5:a0:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 11 00:16:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e3cecf0758862623e0502933c858d38736604246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:bf:56:ba:b5:70:47:d1:31:27:55:65:83:bc:
47:c5:38:f6:30:bf:b5:0a:4f:e1:e5:e6:c3:ed:f2:
ab:fd:d7:de:a0:ff:61:46:c6:f5:48:99:3c:1d:06:
03:c6:af:e7:71:14:4b:c5:d6:08:d7:7c:74:36:aa:
4c:78:5f:6a:a7:35:0d:96:3e:a5:44:0a:7b:b6:14:
e7:b6:ac:a6:a2:07:03:d0:73:08:b1:c1:d6:50:ae:
7d:93:08:cd:71:d4:51:02:27:1f:6a:85:de:33:df:
3a:c2:c9:bb:4f:90:e4:84:84:10:81:a9:ed:6c:e6:
9c:47:d4:55:08:2a:8f:7e:a3:05:c4:dc:e7:98:cf:
00:85:0d:ad:95:f5:50:da:32:53:06:28:5c:29:e5:
2d:23:48:43:98:55:d9:4a:a6:1f:96:84:89:f1:67:
a7:1c:5a:af:09:76:05:8e:10:39:fd:ad:23:f5:d3:
74:b1:22:01:e3:fc:e5:da:51:d9:c6:77:ae:2c:33:
21:08:e2:0e:12:ec:9d:57:14:c1:f7:b6:65:73:80:
5d:1b:c0:7b:bc:a2:a8:9a:5d:d7:46:fe:8f:14:a6:
4c:87:9f:3b:b7:02:a2:50:08:ac:6b:9a:ea:0f:f5:
f9:0d:49:24:75:78:37:85:a8:f7:17:ae:f3:c3:bc:
07:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:CE:CF:07:58:86:26:23:E0:50:29:33:C8:58:D3:87:36:60:42:46
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/487PB1iGJiPgUCkzyFjThzZgQkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3d:5d:f9:a7:83:41:13:b2:0d:be:77:24:ef:00:14:84:cf:e7:
22:63:f4:4f:e0:b8:9e:1c:43:16:e6:64:5d:ae:52:6c:4f:a9:
2d:04:7b:ae:ea:38:fd:69:c5:11:a4:cb:9e:2c:09:b2:86:0f:
f1:fc:61:31:5f:f2:ea:34:58:c9:5c:9b:88:b2:bf:74:31:7b:
11:73:bc:9b:43:5f:00:e5:f1:8d:4b:7e:da:5e:64:cb:bd:21:
b7:1d:16:27:a7:99:dc:6e:e7:6c:cb:80:54:0c:63:63:7e:66:
71:da:3f:e3:49:d2:15:db:03:05:47:ca:bf:0a:8d:ed:20:00:
c7:74:db:f8:7e:0b:02:f4:8b:be:8b:4a:b6:7b:20:d2:31:51:
af:c7:aa:10:76:e4:74:94:b5:3c:c4:57:2b:0f:05:e2:d6:52:
69:0d:b7:cf:55:66:fc:cc:f1:26:1f:32:5e:74:31:50:25:d5:
9d:8e:8b:9c:bc:82:10:2e:c3:2d:d0:43:0e:a3:62:be:d0:98:
be:e5:2b:95:a2:bc:c9:0e:dc:79:ef:30:e2:b9:e7:80:5e:cb:
cd:44:2b:31:0d:68:c5:8e:26:4b:db:2c:fb:ec:0c:6a:1c:c0:
f0:d2:c0:75:8a:c4:32:d8:5c:f2:c2:1f:e4:91:8e:f6:e9:62:
97:38:a2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 04:30:16 2025 by rpki-client