Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4kxU2o3Mko-QIh2-1gyHCCBuh6I.roa
File: 4kxU2o3Mko-QIh2-1gyHCCBuh6I.roa (raw, json)
Hash identifier: ZlYk5uX9TSPK3IQQ12Owjq75X2Gz+5nl0nINsB6OyS0=
Subject key identifier: E2:4C:54:DA:8D:CC:92:8F:90:22:1D:BE:D6:0C:87:08:20:6E:87:A2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181CE0FB94DFB95E4798917A3644B6F216C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4kxU2o3Mko-QIh2-1gyHCCBuh6I.roa
Signing time: Tue 05 Jul 2022 11:12:25 +0000
ROA not before: Tue 05 Jul 2022 11:12:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:ce:0f:b9:4d:fb:95:e4:79:89:17:a3:64:4b:6f:21:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 5 11:12:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e24c54da8dcc928f90221dbed60c8708206e87a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:43:a3:bb:cd:1c:c1:3f:be:08:5e:8a:bd:3f:
09:ef:ef:76:86:ba:f0:a5:4e:bb:30:d9:88:4c:bc:
8b:ea:60:ac:fc:c1:c4:d2:82:61:f1:df:67:a4:31:
9f:ea:5f:66:de:0f:06:35:f5:09:f6:3b:95:00:f0:
bc:cd:58:0e:d7:19:20:fd:da:3c:74:3e:6d:5e:ea:
03:f8:2d:a7:4d:77:d7:f9:a3:11:2b:d7:54:69:e5:
aa:f5:ed:6d:83:fa:8c:64:82:4f:b8:1d:19:ee:13:
ef:0e:5b:b0:d9:5a:2c:39:26:c9:fe:2c:aa:af:21:
ab:ec:95:f7:c3:db:12:80:0a:98:6b:56:e1:68:0b:
b2:bb:0b:98:19:48:09:ec:9a:3e:8d:36:05:f2:6e:
bb:4f:9a:6d:fb:54:e7:d7:f4:65:b5:4a:1e:70:a6:
9c:9a:e4:8d:c3:95:e7:aa:f6:38:19:69:a6:1c:d1:
29:51:84:7c:f6:ec:fa:23:31:99:e6:d1:c3:a0:7a:
45:43:b1:cf:b6:32:33:52:0e:dc:38:91:36:46:fd:
ae:5c:e7:fb:28:b1:de:2e:0a:31:58:57:e6:1e:5a:
e8:02:c8:ed:53:f3:5e:37:9d:36:39:99:da:64:16:
c2:82:8a:31:e1:b8:8e:73:82:8f:50:0b:54:41:11:
e0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:4C:54:DA:8D:CC:92:8F:90:22:1D:BE:D6:0C:87:08:20:6E:87:A2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4kxU2o3Mko-QIh2-1gyHCCBuh6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
91:ec:f6:7b:65:50:91:9f:d6:6b:a2:13:f1:28:ee:97:3e:3a:
c7:86:1a:0c:c0:79:d1:2f:28:02:0a:a1:a9:f1:65:6e:79:f5:
6b:5e:14:81:9c:0d:df:c9:ef:7d:8a:a3:82:48:fe:9b:e4:d8:
d1:73:62:70:88:6a:ea:d9:02:2e:ea:da:cb:47:bb:db:aa:19:
66:6a:db:1f:64:cb:55:56:26:82:a7:20:ac:cf:a6:a9:24:87:
2e:03:5c:6a:f6:bb:40:12:d3:10:a7:66:33:91:5a:25:81:0e:
ed:08:d5:3f:24:89:26:27:51:ac:f3:d4:27:d2:24:cd:7e:4f:
d8:a3:bb:d9:05:db:89:e3:28:d1:54:57:01:f5:16:d5:0b:b0:
2f:fa:96:35:58:93:b5:de:55:66:f5:5d:20:dd:04:de:81:7c:
b7:3a:99:ad:42:ae:ab:7a:66:f4:9f:38:63:88:0e:11:7b:eb:
0d:56:00:7a:b8:09:42:e7:30:13:4f:c8:26:b7:19:0a:03:f2:
90:b4:b8:da:1e:3e:50:cf:47:e0:5f:4c:d6:4f:8b:c2:f1:11:
d5:67:2c:31:91:63:09:ed:4c:22:5b:f9:29:15:f4:ab:0d:f2:
20:3d:34:0a:4c:39:1a:1f:7d:ce:e2:6a:66:b7:4f:6b:61:e3:
b3:40:a0:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 21:42:55 2025 by rpki-client