Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4DY4uVllaNQBzslAFj7EqJjt2uc.roa
File: 4DY4uVllaNQBzslAFj7EqJjt2uc.roa (raw, json)
Hash identifier: OwndfDJPGbT6W3J1XNTUH9mmYA7nKotF9uWN4w2FNKM=
Subject key identifier: E0:36:38:B9:59:65:68:D4:01:CE:C9:40:16:3E:C4:A8:98:ED:DA:E7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01836C9F1472678E2BAC56DA55D8CDDF8810
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4DY4uVllaNQBzslAFj7EqJjt2uc.roa
Signing time: Fri 23 Sep 2022 23:11:48 +0000
ROA not before: Fri 23 Sep 2022 23:11:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:183:5f81:ab13/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:6c:9f:14:72:67:8e:2b:ac:56:da:55:d8:cd:df:88:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 23 23:11:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e03638b9596568d401cec940163ec4a898eddae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:15:d9:da:05:e0:74:ec:4a:1d:01:40:81:f4:
b5:93:17:e6:fe:56:af:b3:54:bb:ef:52:5b:54:4a:
22:9d:ac:ed:59:5a:e8:5c:0a:ed:43:d4:82:a3:a4:
d6:30:1b:3f:e3:41:16:20:f6:d6:0a:0d:f0:ec:d8:
d0:f7:43:4f:1f:c9:9a:cc:4a:ed:c5:cc:3f:5a:bb:
c0:db:20:ba:71:4e:b7:a9:a2:aa:2f:10:b5:d5:3d:
3c:1f:2e:7a:cc:7c:f5:ca:48:3d:23:63:57:73:89:
ac:fe:e9:89:43:dc:b2:81:cf:9c:3f:41:1b:08:b2:
0a:ed:49:0e:c3:d5:2b:62:49:2b:b8:f8:64:cf:4e:
e2:b8:7e:ad:4f:ac:5d:1f:88:bc:f6:ea:24:12:8c:
a4:bc:8a:33:33:56:7a:2b:19:5b:80:59:e6:09:5e:
d9:92:d0:a3:7a:85:d1:bb:d5:0d:03:25:18:74:01:
64:53:43:44:32:53:50:de:51:b9:b0:be:2d:e4:fe:
b1:85:cb:88:61:3a:bc:b3:f6:85:ed:4b:a4:bc:ba:
df:ef:72:eb:0b:d0:22:cd:93:c4:0a:9f:a8:58:53:
a0:82:c2:f6:a8:8e:c2:b1:76:3a:27:ea:cb:b2:e6:
a3:31:a7:16:59:1e:16:d8:a0:b5:75:a9:90:76:a6:
13:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:36:38:B9:59:65:68:D4:01:CE:C9:40:16:3E:C4:A8:98:ED:DA:E7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4DY4uVllaNQBzslAFj7EqJjt2uc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
50:33:eb:73:dd:bb:0d:91:33:d5:a8:36:bc:61:91:09:bc:8e:
11:b0:a5:6e:34:cf:3f:c2:6e:c6:3c:3e:53:4f:00:94:8c:a4:
5c:49:54:56:da:02:a1:c1:09:05:6f:4d:d7:cb:89:2a:35:0f:
bb:fb:85:5c:1e:d1:e8:ab:63:95:74:25:12:2d:ed:ce:28:58:
1e:f0:8a:c7:1e:93:8a:f6:98:7d:c8:30:fc:34:ac:24:d8:f4:
2c:f2:e9:b4:ce:24:05:26:b5:8a:16:5f:06:1b:6b:1a:42:14:
cc:ab:c1:be:b4:2f:4b:6a:aa:b4:7c:37:22:cc:2d:65:9f:76:
1c:8b:55:53:57:57:44:21:80:e4:e3:84:42:e2:e5:d2:b9:64:
c3:71:0a:03:36:8d:09:1c:b9:32:e7:03:00:65:0e:b9:70:c5:
75:12:90:9a:5e:ce:f0:76:e0:70:f6:0a:2b:69:c1:51:24:2f:
04:6b:dd:d1:38:42:d9:b9:56:7f:d6:81:ae:0e:ed:ff:f4:1a:
ae:dd:53:fa:88:2b:b2:6c:f2:16:a7:09:91:a0:29:1a:6f:2e:
d6:70:81:77:7c:7d:ad:e1:84:7b:74:1b:3b:2c:57:ae:4b:b6:
ab:f1:39:31:f8:6b:d5:19:a7:07:3c:6c:ab:42:89:53:d0:a1:
e6:e3:20:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 19:38:18 2025 by rpki-client