Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/509SvRTWzf4mjCCBfqrQM5FOD6M.roa
File: 509SvRTWzf4mjCCBfqrQM5FOD6M.roa (raw, json)
Hash identifier: aS+iYK1Z1CfgAg1/D6t2RAF/k3WKOujZXP5nIYCAg7U=
Subject key identifier: E7:4F:52:BD:14:D6:CD:FE:26:8C:20:81:7E:AA:D0:33:91:4E:0F:A3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 81C5EFB2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/509SvRTWzf4mjCCBfqrQM5FOD6M.roa
Signing time: Fri 06 May 2022 22:11:42 +0000
ROA not before: Fri 06 May 2022 22:11:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2177232818 (0x81c5efb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 6 22:11:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e74f52bd14d6cdfe268c20817eaad033914e0fa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:35:58:b6:a2:3c:a7:a5:8b:51:ca:62:ed:8b:
65:dc:d3:32:e8:57:e2:ea:66:4e:52:c7:ff:2e:3f:
78:3b:0e:b7:73:fe:e9:eb:f8:3e:4f:bb:58:63:9d:
1c:5f:d2:75:fe:53:82:67:98:b8:47:3d:83:69:c3:
99:3f:fa:ed:f9:8c:0d:80:23:60:2d:44:31:a4:aa:
48:1b:ab:ab:fd:e3:96:c9:c7:3c:b6:8d:ea:2e:3a:
38:ff:de:46:12:1a:8c:82:9a:9f:69:b4:fa:53:6e:
b9:a2:6a:d3:81:a5:14:2d:fb:77:73:d1:b0:d7:f7:
db:77:57:f6:9e:ff:85:d9:cb:0a:4e:ca:74:6c:81:
f5:e9:4c:e5:32:d2:b8:da:74:41:6e:34:d1:b9:55:
a5:13:e1:76:ae:03:a6:2a:54:03:75:54:1b:e7:dd:
d1:be:9f:55:91:8a:37:29:99:41:05:42:78:47:99:
b3:cb:da:9f:ed:aa:6b:d5:04:b2:a8:01:8d:9b:6a:
92:9e:bf:3b:a6:74:85:11:cb:de:e0:4d:36:f2:71:
c7:84:6e:4d:7e:47:e0:e0:63:7b:f5:ec:66:dc:ee:
f7:1a:2f:8c:b3:c7:6f:0f:62:a3:c2:b1:64:4f:e0:
96:95:69:0b:67:14:f1:af:68:eb:15:8a:12:05:45:
82:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:4F:52:BD:14:D6:CD:FE:26:8C:20:81:7E:AA:D0:33:91:4E:0F:A3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/509SvRTWzf4mjCCBfqrQM5FOD6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
63:70:0f:69:a2:50:88:44:da:0f:8f:08:71:03:b4:ba:1b:11:
05:a8:7e:a5:7c:6e:7a:89:b6:84:2f:7d:85:4e:3f:25:b6:4e:
a0:2c:93:21:3b:df:fc:81:bf:cb:26:e8:a7:74:61:14:39:09:
5e:4a:17:02:9c:0d:c4:b0:93:5a:3c:4a:8f:00:d0:bb:2d:23:
85:59:75:3b:ac:87:7a:5e:fd:b6:b1:d2:8e:df:a8:cf:a0:12:
10:c9:38:fe:05:92:5a:83:d2:52:72:6e:22:cb:2e:ff:a9:82:
9d:3e:b1:60:d1:f4:2e:0d:06:32:9a:f3:c0:fc:70:38:e1:f1:
09:5a:38:8e:ff:38:07:c7:28:32:06:f6:e3:44:e6:5c:b3:ab:
29:02:2c:34:52:f0:32:96:61:44:9e:55:d9:9c:d9:02:a6:a9:
5b:ed:f2:76:a5:33:4f:0a:43:14:48:47:e7:14:7b:c4:05:d3:
45:a1:fe:40:73:bd:11:73:ca:c9:05:a7:6b:c6:5e:fe:45:83:
fa:3c:68:bb:57:6f:a2:eb:bd:e5:59:9b:fa:77:65:c8:39:82:
04:4a:b6:a0:d8:5b:8c:7e:75:9d:40:ac:04:90:37:67:25:b5:
4c:41:52:6b:c6:27:a4:67:a5:68:51:da:6a:b4:9a:f0:93:44:
97:5d:e8:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:43:41 2025 by rpki-client