Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4q56y6v-ARLr-7zO5YP8EEqF2TY.roa
File: 4q56y6v-ARLr-7zO5YP8EEqF2TY.roa (raw, json)
Hash identifier: hfQCAtHSDVC2UzeDm0vIe3zQ8umP0d/DuGpgfjHMIw8=
Subject key identifier: E2:AE:7A:CB:AB:FE:01:12:EB:FB:BC:CE:E5:83:FC:10:4A:85:D9:36
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7E0484C7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4q56y6v-ARLr-7zO5YP8EEqF2TY.roa
Signing time: Sun 24 Apr 2022 07:10:47 +0000
ROA not before: Sun 24 Apr 2022 07:10:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2114225351 (0x7e0484c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 24 07:10:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e2ae7acbabfe0112ebfbbccee583fc104a85d936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:54:71:27:e6:5e:81:31:f9:65:3d:28:5e:b0:
b9:b0:e0:de:3c:8c:60:c3:1c:dc:93:fc:d0:c4:32:
cb:85:f8:b9:7d:f3:ef:7f:f3:ef:7f:c0:e0:0f:e3:
e9:16:60:61:2e:f4:4f:06:0d:6c:56:98:c6:ed:a1:
b5:16:8d:7b:98:aa:98:22:82:2e:56:26:f5:fb:be:
47:be:4a:d7:0b:05:96:51:a8:95:86:a6:91:31:79:
f0:f5:b7:36:07:73:6c:45:1e:15:d7:c5:4f:b2:58:
18:5d:cf:22:47:73:9f:40:7b:33:08:b4:30:35:7f:
12:1c:97:d7:9c:2d:1c:ee:89:7e:dd:66:ec:93:fa:
34:12:79:fd:b2:8f:b7:0b:a9:ab:8c:94:1c:bb:17:
e2:f1:d5:29:93:d0:6e:fe:46:ca:dc:0a:0c:b1:44:
dc:7e:de:5a:2e:32:8d:90:cf:2d:07:1b:19:5f:05:
f7:07:ae:72:fa:95:08:7f:04:9e:f1:91:d4:c0:e5:
4d:79:82:3f:a0:53:f3:df:49:48:9c:b3:8a:68:6d:
ca:3a:b5:b0:27:9b:85:24:b2:45:4f:af:b1:e3:4f:
29:7c:72:77:d7:a0:c7:35:e1:6c:bb:1f:e4:68:ff:
06:e9:e5:69:3f:9a:a9:f0:49:c3:60:ff:e7:6b:5a:
ed:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:AE:7A:CB:AB:FE:01:12:EB:FB:BC:CE:E5:83:FC:10:4A:85:D9:36
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4q56y6v-ARLr-7zO5YP8EEqF2TY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7b:22:15:9c:62:76:13:da:9f:9a:0c:f5:68:55:bc:0e:f3:62:
80:ed:bb:38:a5:4d:c1:c4:33:f0:53:fc:b9:eb:73:2d:c3:71:
1a:14:d1:55:e8:a6:3e:0d:1a:e9:d8:e9:ca:6c:f3:58:da:0a:
3a:5f:79:96:38:73:86:87:c8:e6:3a:18:6c:aa:a4:c2:f9:73:
f6:c3:7a:63:91:d8:45:61:e9:52:c1:16:8e:ea:b8:5d:6e:f9:
b8:8f:f2:ac:29:0c:ef:ab:4c:04:1d:c0:15:d7:10:d7:b2:a6:
d8:84:b2:46:35:6a:c1:22:a9:44:91:8b:ea:06:51:10:92:85:
7b:fd:83:84:e9:0f:79:1e:3a:1a:14:e1:71:2b:d5:3a:32:28:
cf:3a:02:59:5a:8f:4e:00:54:ae:97:da:91:a5:a4:41:18:44:
96:94:91:1f:b3:e9:e8:09:35:b1:c7:72:2f:30:16:88:0b:fc:
7f:5e:cd:ff:c4:41:e7:c9:51:4d:3a:7c:c0:2f:05:07:4f:60:
38:21:bc:b5:de:13:32:bb:20:d6:cc:d4:23:b9:3d:9d:93:0f:
f1:61:13:35:d8:4b:36:d1:89:70:af:f4:9f:34:f8:70:19:c0:
12:a5:b0:c5:ef:fb:f1:de:87:c1:7a:47:96:8b:f5:9e:01:a8:
35:97:d6:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:52:44 2025 by rpki-client