Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4azOuF6-x5nBjYE56cMnAO4Y5-g.roa
File: 4azOuF6-x5nBjYE56cMnAO4Y5-g.roa (raw, json)
Hash identifier: 50f0wavaRq1f6egyNBqMo15myAzgdUhugJBGkxiMqLE=
Subject key identifier: E1:AC:CE:B8:5E:BE:C7:99:C1:8D:81:39:E9:C3:27:00:EE:18:E7:E8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018567A409C0320CBA6C7E66790D0F1B5C21
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4azOuF6-x5nBjYE56cMnAO4Y5-g.roa
Signing time: Sat 31 Dec 2022 10:04:41 +0000
ROA not before: Sat 31 Dec 2022 10:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:67a3:b863/128 maxlen: 128
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:67:a4:09:c0:32:0c:ba:6c:7e:66:79:0d:0f:1b:5c:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 31 10:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e1acceb85ebec799c18d8139e9c32700ee18e7e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:21:d4:c1:d2:14:70:7c:5c:8f:b7:5e:4f:9e:
06:19:81:3b:c3:76:f3:9f:de:49:b2:aa:6a:e6:6b:
45:d1:52:29:1c:eb:76:19:16:06:9f:c5:db:7c:f0:
1e:5f:cd:cd:2d:7f:cf:2f:ca:e3:50:9b:f6:59:e0:
21:4e:24:d6:d6:68:10:06:2d:d8:33:c3:ca:f6:07:
ba:c3:99:3c:7a:d8:ab:5e:6b:52:7e:f8:d9:f3:87:
04:c9:66:95:10:20:cb:e7:a2:b6:c0:c2:15:d0:9f:
8c:48:12:57:01:26:0a:af:43:48:00:fe:2d:8b:5c:
c6:91:70:ad:86:8b:72:d1:bb:27:27:05:70:03:dd:
50:15:4e:23:39:8f:b1:72:aa:a3:08:cf:9c:92:e2:
b5:d4:bc:57:82:bf:52:26:df:88:38:dc:87:37:5a:
c9:92:ee:12:2a:45:92:f9:c2:2c:c5:d6:3f:6a:91:
3a:75:ff:cc:f9:49:c5:fb:77:9a:a6:34:ef:5f:01:
85:69:a2:dc:fd:77:d0:90:ba:37:8c:73:12:36:ad:
dd:6d:fa:67:76:72:15:e5:26:3d:9a:ae:02:9d:b0:
c5:f4:07:e5:19:fc:48:fb:3f:88:7c:33:16:be:4b:
8c:e6:0b:88:46:20:60:90:04:c8:9a:f3:af:b6:a1:
7d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:AC:CE:B8:5E:BE:C7:99:C1:8D:81:39:E9:C3:27:00:EE:18:E7:E8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4azOuF6-x5nBjYE56cMnAO4Y5-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6b:c9:11:0d:f5:21:58:fa:76:06:60:29:6a:fc:76:e2:e2:67:
f4:11:ab:46:27:69:a7:84:94:dd:58:08:25:a4:19:0a:44:34:
58:4c:2b:15:a5:e8:b3:e7:2d:af:21:54:b0:05:bd:38:b8:7b:
df:8e:8d:c1:1a:78:78:53:ed:1d:83:4b:73:44:cb:4e:a9:a7:
94:5d:29:77:27:f7:e0:63:54:a8:56:5b:ac:3e:0a:76:f9:a5:
a6:a1:55:54:17:67:df:78:64:8d:15:a4:6f:92:4e:b2:24:ba:
e4:59:a4:75:c9:7d:3d:f9:83:72:de:6a:f0:47:59:8a:ce:5e:
f1:08:26:d4:25:f2:74:3f:2e:41:24:78:86:a6:42:fe:84:a7:
31:63:dc:c3:7c:a5:8a:6b:8b:69:24:ad:39:78:08:4c:be:ea:
b8:e4:3c:33:2f:d5:4d:59:ce:dc:e8:69:8f:51:33:ba:19:b8:
a8:38:30:33:19:c9:0a:af:d3:13:52:bb:ad:78:f8:f5:1e:2e:
1f:f9:d5:4b:c6:53:6b:15:26:e5:ed:43:d8:8c:84:06:8d:8f:
86:c2:d1:ed:cd:e4:43:64:0d:d2:4e:15:cd:c7:62:f1:86:29:
97:d0:b2:77:aa:bb:44:0d:eb:37:ad:e5:5e:cc:68:6e:ce:97:
78:39:19:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 04:57:50 2025 by rpki-client