Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4egSJ0WhtPEYblc2bLEKIL0VRT8.roa
File: 4egSJ0WhtPEYblc2bLEKIL0VRT8.roa (raw, json)
Hash identifier: 9Kwi1L5U/BMGM6uuVFiavf9KWCfk0iebhMssiurmEhQ=
Subject key identifier: E1:E8:12:27:45:A1:B4:F1:18:6E:57:36:6C:B1:0A:20:BD:15:45:3F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182A5476293265CDA484625FF6F89E2FB99
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4egSJ0WhtPEYblc2bLEKIL0VRT8.roa
Signing time: Tue 16 Aug 2022 06:11:35 +0000
ROA not before: Tue 16 Aug 2022 06:11:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a5:47:62:93:26:5c:da:48:46:25:ff:6f:89:e2:fb:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 16 06:11:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e1e8122745a1b4f1186e57366cb10a20bd15453f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c6:1d:d6:7f:f8:a9:ca:c4:a0:87:94:42:68:
85:4e:d5:b4:20:89:1f:b1:5d:b9:49:e2:12:a8:75:
e8:3a:6c:b2:28:f2:09:95:bc:74:b2:79:2c:3c:fe:
91:cb:fd:37:d3:1a:58:55:4b:91:6b:e4:65:2f:99:
10:b4:97:48:92:3d:62:c8:8e:70:e9:0a:b9:86:93:
46:e7:30:c8:11:ac:27:7b:c7:e1:62:86:41:fc:66:
64:61:f3:34:bb:84:7e:b4:59:8c:b2:c9:5f:75:2a:
87:fe:10:8f:f6:78:fa:75:49:62:77:18:03:6e:28:
20:1e:93:f0:23:43:55:76:86:49:9e:f2:2a:05:6f:
70:4d:69:18:fa:c1:34:64:2c:f3:ee:43:03:81:bc:
68:e4:a2:ce:1f:8f:27:82:00:68:7b:61:c6:20:05:
35:c4:ad:a6:03:88:03:a1:3d:48:20:e3:a7:41:b8:
d7:de:17:c6:84:2e:1f:43:e0:52:fe:ab:28:54:e2:
f5:65:f6:b6:45:03:03:cb:28:ae:81:3d:fe:ff:f3:
68:4a:c7:5c:8d:af:bf:85:c4:09:5a:54:de:8e:d2:
94:14:fa:1f:dc:19:4b:96:5c:36:90:05:ee:94:f6:
ee:0e:a1:0a:56:17:01:a1:e5:a9:78:29:be:2c:df:
bf:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E8:12:27:45:A1:B4:F1:18:6E:57:36:6C:B1:0A:20:BD:15:45:3F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4egSJ0WhtPEYblc2bLEKIL0VRT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
61:a6:df:e8:c8:fa:f4:1b:6a:f3:e0:91:4b:12:d2:be:a9:ff:
9c:ca:fc:5e:e3:ad:d7:9c:b1:e6:ca:1a:28:d3:43:bd:5e:59:
8c:a2:17:22:d4:5f:4f:08:51:23:92:19:17:9d:70:94:88:c2:
71:85:92:e5:32:83:01:05:74:e5:ec:7c:0b:bb:cb:07:56:7f:
b6:24:6a:b3:c9:9f:80:a1:ef:02:4a:29:b8:b9:4e:ec:04:5c:
22:51:e6:dc:8a:c0:9d:c8:2b:bc:83:5e:50:0f:08:dc:cc:b5:
31:30:bf:f6:a5:46:ea:2d:b3:11:12:75:fc:33:b8:d0:b5:85:
3c:12:d7:79:f1:d9:6f:a6:bd:51:4a:06:20:52:80:a2:7e:f3:
bb:a1:39:89:0c:5d:8b:d8:b0:a3:a0:83:85:ac:93:c8:2a:48:
24:a5:1a:2c:27:53:64:80:aa:ae:df:18:f8:95:28:de:18:47:
3b:70:7f:bf:77:b5:36:3b:2f:2b:fd:c9:69:01:8b:10:d0:3d:
7c:c0:71:5e:15:1b:be:8d:8b:04:c7:36:f8:e4:4d:21:39:cb:
23:70:e0:0a:c2:0c:9f:8a:07:43:5e:fa:69:9a:98:db:32:e3:
2e:52:b2:8e:5f:91:d1:b4:8c:79:d3:3a:4f:1c:5f:05:4d:4f:
50:da:e9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:21:02 2025 by rpki-client