Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4L4y14Tu13T9sm9NaOhJSs09KmM.roa
File: 4L4y14Tu13T9sm9NaOhJSs09KmM.roa (raw, json)
Hash identifier: PSDW4YrwC9r1f6iOCWXrdKF0O6ObKBFQl/PaDU8h9Ys=
Subject key identifier: E0:BE:32:D7:84:EE:D7:74:FD:B2:6F:4D:68:E8:49:4A:CD:3D:2A:63
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A2EBA0C2A68EED12E08E91F432C7CBA1C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4L4y14Tu13T9sm9NaOhJSs09KmM.roa
Signing time: Fri 25 Aug 2023 22:04:19 +0000
ROA not before: Fri 25 Aug 2023 22:04:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:2eb9:f08a/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2e:ba:0c:2a:68:ee:d1:2e:08:e9:1f:43:2c:7c:ba:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 25 22:04:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0be32d784eed774fdb26f4d68e8494acd3d2a63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:af:60:1e:7b:ab:1b:a9:1b:3f:35:96:3a:f8:
10:21:b4:61:6a:ee:fd:73:ed:b6:f5:13:85:e3:2a:
49:2a:11:05:46:3e:f1:72:57:44:61:76:0e:99:95:
d2:52:a2:92:59:4b:21:21:64:0d:cf:19:03:dd:62:
61:3b:0e:92:c7:7a:08:1c:9f:d5:38:b7:69:86:ff:
67:f2:79:53:ad:6c:57:16:c2:3e:1f:06:2c:66:2e:
7c:2a:e8:fe:ba:78:fe:1c:6f:6c:1a:58:c9:0a:d1:
e9:6d:4c:40:ac:d2:59:93:ea:8c:66:65:56:dc:77:
c3:c7:24:54:fc:c4:33:ad:8f:b4:5b:c1:41:66:ba:
8c:76:04:74:49:85:00:bd:01:9d:c2:b3:a7:f6:28:
7f:57:72:6d:25:c2:62:85:72:f6:2b:a4:64:ef:00:
b6:38:a0:70:53:eb:97:42:2f:ff:f2:4d:55:21:56:
86:aa:60:27:3f:a7:19:aa:11:ea:af:1a:33:4b:dc:
f4:02:a1:d6:48:19:6d:00:22:f4:79:15:43:8a:74:
0d:66:41:c0:d1:50:31:bb:e9:b5:30:47:fb:8f:23:
80:42:a7:db:38:3e:c6:4b:45:85:9e:de:65:7f:c4:
fe:d0:fc:7d:32:ea:0c:7a:26:04:e0:a5:24:ef:c4:
e4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:BE:32:D7:84:EE:D7:74:FD:B2:6F:4D:68:E8:49:4A:CD:3D:2A:63
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4L4y14Tu13T9sm9NaOhJSs09KmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
54:99:ba:64:18:fa:98:61:e3:c5:a0:d0:e5:b0:59:43:7f:29:
0a:8c:78:29:24:2a:6e:3f:62:63:0d:00:38:33:97:56:a1:d7:
15:52:91:f3:f6:d4:64:32:40:0b:22:72:9b:a9:49:98:a9:ea:
31:da:6d:2e:af:9d:00:ce:b3:9d:5d:25:69:d2:60:37:49:96:
d9:23:d1:da:fb:c8:9f:be:aa:87:6f:b6:14:d6:63:d5:03:e7:
1b:e6:88:bd:1e:eb:ed:f0:3e:b4:c8:6a:f3:50:a4:9c:60:a5:
6e:ff:1c:f9:32:af:72:3e:6a:c6:72:3f:c3:1a:9f:67:a9:80:
2d:9f:c7:e6:95:cf:de:55:47:b3:a2:5a:66:6e:66:9a:11:a6:
10:19:5f:16:43:78:a6:09:24:b4:82:1d:3b:c4:42:3c:d9:3a:
3f:a9:c7:fd:1c:15:4e:01:cb:28:0f:f1:de:38:4c:30:19:eb:
0e:7d:e4:99:c9:35:b2:0d:76:ec:df:4f:f2:17:d0:dd:df:71:
52:67:00:e8:97:18:1c:df:c8:c7:a4:bd:ed:79:a2:f6:96:31:
3f:20:4c:55:b5:1c:d2:68:98:b7:88:a9:a7:59:3d:3d:93:ed:
d7:5e:01:b9:f4:cb:7d:2e:71:e5:b6:cf:a6:3a:0e:cd:45:8f:
bf:0a:dd:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:13:48 2025 by rpki-client