Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4_szoYhpXDy1Ixh5wT5XCflx8q4.roa
File: 4_szoYhpXDy1Ixh5wT5XCflx8q4.roa (raw, json)
Hash identifier: fxXgk7d1nY0hxaU2qfb3oUJKskVgQoeGbboUvdHOJlM=
Subject key identifier: E3:FB:33:A1:88:69:5C:3C:B5:23:18:79:C1:3E:57:09:F9:71:F2:AE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 71695D9F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4_szoYhpXDy1Ixh5wT5XCflx8q4.roa
Signing time: Thu 10 Mar 2022 21:09:43 +0000
ROA not before: Thu 10 Mar 2022 21:09:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1902730655 (0x71695d9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 10 21:09:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e3fb33a188695c3cb5231879c13e5709f971f2ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:13:4d:58:40:ac:7c:4b:62:8e:06:e0:ea:f5:
9c:a3:c8:64:c1:2a:8e:f7:d6:1c:a5:6f:db:ef:35:
ff:e3:aa:52:ca:a2:81:a5:4d:12:ca:11:5b:ee:c2:
0e:0e:66:7c:5c:a9:ec:83:b1:41:39:a8:00:8f:9c:
d9:b5:dc:ca:86:52:54:dc:23:42:ac:04:3e:58:0b:
eb:bf:5b:c4:75:44:aa:9a:ef:65:4e:f8:b1:29:45:
f5:9f:f1:3d:75:b2:72:bc:5e:b0:06:b8:31:64:23:
11:aa:fb:8a:96:67:0e:c5:03:1b:99:04:bc:85:b3:
4c:f6:d5:79:1a:96:bf:2a:cc:4f:6e:ea:d8:2f:d8:
ef:3f:9a:6e:d2:4b:36:70:26:7f:7f:bd:69:40:8b:
c0:0d:e9:f5:c8:cf:88:c3:68:46:27:c1:08:c8:77:
3f:9d:58:5b:1a:7d:f8:23:7d:e6:3e:06:90:26:92:
a7:e1:2a:c7:f6:b3:a4:6e:df:73:ac:84:32:33:cb:
0e:b6:55:28:63:c4:43:96:54:31:81:90:01:27:a7:
0a:10:ae:6d:b8:5c:ea:b8:f1:bd:f1:7f:23:1c:a9:
c1:80:32:b3:06:64:2b:59:fb:57:88:18:b4:00:e3:
53:a5:ce:08:1a:65:f3:68:af:f7:66:49:52:8f:8d:
2f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:FB:33:A1:88:69:5C:3C:B5:23:18:79:C1:3E:57:09:F9:71:F2:AE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4_szoYhpXDy1Ixh5wT5XCflx8q4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
21:29:df:af:70:26:b3:b7:8c:c0:0a:d7:8a:c5:24:16:c7:f1:
3c:dd:0e:96:3e:3f:46:96:79:20:c0:57:7e:7b:8d:9f:a9:3e:
65:3e:66:c6:ac:d8:63:fc:74:ee:0a:62:3e:dd:de:ff:47:a4:
c3:25:eb:25:3c:e0:7e:90:92:0e:53:61:6e:64:1d:14:20:0d:
75:b6:ba:91:d5:f0:a8:10:7a:e9:c4:e9:c1:6e:f1:d6:58:8f:
97:88:63:62:55:68:9a:9c:41:42:3e:ba:8d:71:ef:f3:da:a4:
b1:73:75:ab:5e:01:26:e7:e3:b8:01:1e:11:f2:39:7f:c7:91:
49:54:3c:56:6e:de:0d:94:be:2e:b7:26:64:76:66:08:ae:c0:
42:83:26:60:7a:e7:00:6a:53:e9:d9:da:90:35:75:7a:e0:2b:
5b:5b:bb:98:27:81:3c:c4:53:2f:3e:cc:72:8b:eb:22:c1:32:
8c:62:44:45:e7:88:a8:73:e0:45:67:bc:df:7b:7f:5d:dd:56:
e3:a6:b1:85:fb:da:53:10:b3:ed:63:ef:71:fc:7d:ef:b7:4c:
39:77:8b:f7:e2:ef:4d:56:8b:95:3d:dc:14:6e:30:f8:fe:7b:
06:5e:8c:ae:aa:58:9e:78:61:d8:58:72:33:ef:59:08:20:8e:
87:80:48:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:36:24 2025 by rpki-client