Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5044RDySYg5EUXK24ZnmX8I2r14.roa
File: 5044RDySYg5EUXK24ZnmX8I2r14.roa (raw, json)
Hash identifier: LnNsGv6heFxogFAcq5gMObXcpB/souAIrZZIVsO0KAE=
Subject key identifier: E7:4E:38:44:3C:92:62:0E:44:51:72:B6:E1:99:E6:5F:C2:36:AF:5E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6CF203BF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5044RDySYg5EUXK24ZnmX8I2r14.roa
Signing time: Wed 23 Feb 2022 05:18:32 +0000
ROA not before: Wed 23 Feb 2022 05:18:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1827799999 (0x6cf203bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 23 05:18:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e74e38443c92620e445172b6e199e65fc236af5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c2:c1:ba:39:ed:59:2a:7f:93:bd:87:7d:d1:
0d:23:ae:aa:51:a6:7b:82:64:b1:62:81:2b:dd:d0:
31:03:9e:e4:5b:17:6a:18:1d:05:74:45:6b:08:bc:
65:b5:08:10:c6:78:e7:86:32:d5:5d:21:60:1f:f8:
d2:4f:46:cc:08:29:bc:83:d2:1a:ff:2a:f4:20:95:
fd:5d:84:88:2f:b0:2d:93:c5:e3:f1:fc:c9:ea:f9:
34:2c:2d:a2:96:09:9b:7d:c5:23:49:5a:a3:7a:b9:
b6:dc:06:3d:7e:da:99:b8:ef:84:e1:19:c9:c6:7e:
25:d7:45:51:9a:29:dc:d7:5c:26:fe:82:f9:0c:af:
fb:71:4d:a2:24:a4:81:1a:43:d9:76:4d:e1:bb:f1:
c7:5c:5f:d6:f0:3d:f1:c5:0a:94:19:4d:2e:86:3a:
a2:be:4d:4a:aa:bc:81:2e:cd:52:db:04:d4:d2:1a:
87:4f:3f:aa:b3:ad:c2:fe:f5:f2:af:17:95:10:c8:
0a:35:ba:b3:e3:78:9e:6b:1c:cf:d1:92:f6:9c:89:
14:89:28:46:7e:96:c4:f9:ba:b2:ae:fc:e7:a7:8b:
18:0f:46:17:96:20:4e:4c:77:f8:d0:f5:9d:12:63:
07:15:3a:ec:eb:8c:fd:78:81:59:b8:f5:bf:b0:df:
e2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:4E:38:44:3C:92:62:0E:44:51:72:B6:E1:99:E6:5F:C2:36:AF:5E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5044RDySYg5EUXK24ZnmX8I2r14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
49:25:56:cc:bd:1f:14:76:f5:80:9f:86:63:d6:4f:c2:a7:f7:
b4:12:26:7f:ab:d8:96:d4:71:2d:cb:ba:39:2d:f9:fb:e7:06:
73:50:27:bb:9b:e0:6d:c2:3b:e8:27:c9:5e:27:de:ae:bb:92:
57:a0:72:33:16:58:7b:32:4d:71:97:2d:1e:aa:bb:df:d7:7f:
3f:6e:84:59:4c:46:8e:9b:9e:ed:c8:0a:9b:0c:71:5a:f9:59:
b0:3d:c3:d8:0d:d7:6e:74:68:ad:f5:26:98:03:c2:5d:e5:e2:
83:fd:aa:7e:60:7c:b9:d6:91:69:db:b2:2d:b9:77:27:ff:1c:
0d:77:1d:1f:a1:cd:e9:3a:b8:1d:55:3b:7d:a0:f2:e0:fa:5e:
3b:52:c5:3a:40:fa:2b:ae:ba:e0:17:cc:b7:ca:0c:4f:d8:eb:
36:93:0f:6c:3d:22:03:8e:21:d6:2f:cc:ea:1b:18:59:40:4d:
dc:fa:08:a0:da:f7:7b:b5:ff:97:3d:16:32:d3:59:60:73:92:
69:87:63:de:f0:4d:1f:13:77:64:12:7f:c0:45:62:25:e1:f9:
b5:29:05:9e:e0:ce:08:e1:aa:be:47:bb:49:24:fc:7f:d4:12:
04:e5:3b:59:32:27:54:31:e4:f3:00:c6:b8:6b:98:84:1d:91:
fe:31:bb:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 08:53:12 2025 by rpki-client