Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4ANwmZAl9D5Twgj4tZeQ_5t20To.roa
File: 4ANwmZAl9D5Twgj4tZeQ_5t20To.roa (raw, json)
Hash identifier: Egg+BX8J/AHwZo9UKw1DmBmB6hqN4Qa4NjOMB/QprHk=
Subject key identifier: E0:03:70:99:90:25:F4:3E:53:C2:08:F8:B5:97:90:FF:9B:76:D1:3A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6801CD85
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4ANwmZAl9D5Twgj4tZeQ_5t20To.roa
Signing time: Sat 05 Feb 2022 04:09:34 +0000
ROA not before: Sat 05 Feb 2022 04:09:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1744948613 (0x6801cd85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 5 04:09:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e00370999025f43e53c208f8b59790ff9b76d13a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:41:50:24:09:eb:b2:7f:ec:67:ef:71:ac:7f:
a4:62:93:03:aa:0d:b9:2d:ec:4f:8c:03:c0:a9:38:
40:e4:5d:4b:8b:82:30:62:51:4b:f6:5c:7a:61:3f:
39:76:ec:4e:be:47:4c:70:24:51:0b:25:54:4c:c9:
78:69:d1:44:1b:f5:9e:e1:4d:e2:73:32:3d:12:f7:
14:13:64:d0:71:71:68:a8:c0:f8:e9:ac:59:44:77:
4c:ec:e9:ed:f6:bc:38:1d:dc:95:cc:b8:6a:60:04:
f0:a4:59:cf:eb:8e:b2:98:a9:2c:1b:28:66:ab:38:
ea:da:80:22:c5:b9:6b:a0:77:1f:63:0c:b8:61:99:
09:ff:75:0c:94:cc:50:a5:c6:84:9f:89:10:50:f7:
3d:11:67:11:80:27:92:30:2a:4c:a9:1f:99:cf:b2:
48:ba:9f:77:2a:f8:1a:e7:13:ab:66:bb:ec:f2:9a:
63:f3:d6:bb:2d:c7:45:71:33:d9:11:45:cf:09:c3:
88:0e:3c:5f:3b:3b:fd:43:0a:83:24:86:c4:5c:74:
97:db:e5:83:26:10:ff:96:ec:1e:fd:79:d0:d2:83:
5b:51:cf:f9:12:2a:07:9f:3c:49:77:0f:4b:17:81:
dc:9a:67:a8:02:12:ba:4b:dd:a0:b0:d0:dc:d5:f1:
e7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:03:70:99:90:25:F4:3E:53:C2:08:F8:B5:97:90:FF:9B:76:D1:3A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4ANwmZAl9D5Twgj4tZeQ_5t20To.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
49:0c:8d:f1:98:97:2f:93:f6:12:a5:42:c0:c6:76:a7:d2:ba:
be:1f:9c:2a:04:2b:a6:e5:07:31:2a:f9:4d:46:f1:df:9e:eb:
71:8e:ca:31:4c:28:b5:7e:ca:3f:bf:ae:57:b3:86:d5:8d:61:
9d:0f:c5:7e:94:a2:2d:ab:79:25:06:a0:85:58:6e:be:86:60:
e5:68:27:63:24:c1:6e:57:21:87:07:80:b3:83:3d:e2:0e:fe:
ed:34:61:7c:79:b8:ba:e0:dc:27:e7:4c:89:dd:03:d2:5d:8b:
f0:fa:dc:e5:69:2c:b3:14:e2:ac:4f:19:a7:d6:bc:c7:4b:b4:
3e:fd:36:aa:0a:44:32:43:c7:32:f5:0f:e0:43:31:6c:93:36:
31:25:eb:06:d7:25:fd:1d:b5:68:47:e6:c7:74:ed:a5:73:ca:
6a:46:7c:c0:5b:61:1e:f2:63:07:fa:bc:0d:df:11:8b:97:f0:
50:e7:07:1b:af:fa:90:ab:47:82:f6:a1:c4:cc:0e:30:51:50:
37:f4:60:5a:52:b3:93:1f:6a:dd:9f:a0:8e:03:dd:33:90:2e:
bb:89:8d:3e:b4:48:9e:8b:86:48:16:3f:fe:99:90:90:90:54:
72:98:c5:b4:ba:7f:3f:8a:2e:9c:11:f3:eb:44:db:96:a4:4b:
1d:f7:6c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:26:50 2025 by rpki-client