Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5fotKJvH1UpMAsbnqRrpypaYmwg.roa
File: 5fotKJvH1UpMAsbnqRrpypaYmwg.roa (raw, json)
Hash identifier: qEv6Oc7z/KxJSR2atSBtIb8ikIBeaL1mf+fgs4ORb58=
Subject key identifier: E5:FA:2D:28:9B:C7:D5:4A:4C:02:C6:E7:A9:1A:E9:CA:96:98:9B:08
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7D1ACBD0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5fotKJvH1UpMAsbnqRrpypaYmwg.roa
Signing time: Thu 21 Apr 2022 01:10:38 +0000
ROA not before: Thu 21 Apr 2022 01:10:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2098908112 (0x7d1acbd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 21 01:10:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e5fa2d289bc7d54a4c02c6e7a91ae9ca96989b08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:60:4a:23:2e:d0:c3:a7:65:af:7d:5f:e7:aa:
b0:cd:7b:1f:f0:58:10:22:4a:2d:23:53:43:a8:36:
06:54:2c:41:64:44:61:6f:ec:ab:af:8c:17:d9:eb:
d9:7f:74:f9:1e:bc:65:7c:a8:d0:68:e1:06:a8:1d:
82:9a:93:ed:87:c8:7e:84:a5:91:3a:31:66:78:30:
17:e7:d2:6b:f2:14:00:49:ff:ba:82:88:e5:02:95:
90:84:b1:13:e0:5d:76:d1:09:11:49:09:7f:94:36:
e3:92:d9:13:cf:31:37:6a:a8:82:24:2e:be:06:04:
59:7c:8b:89:e4:5d:13:31:d3:8e:05:3c:6f:77:0d:
c4:70:68:fa:82:ff:f2:0b:f8:c7:5c:e8:01:f3:64:
4d:89:76:10:f0:53:1a:22:8d:29:58:69:b1:76:df:
63:0b:4c:7b:c5:b6:a3:c0:de:0f:07:30:79:ca:29:
e5:23:52:b8:83:a0:3f:0d:6e:e3:1b:b1:ea:32:33:
0a:40:cb:af:80:01:e7:97:58:31:4d:84:58:aa:dd:
b9:ab:cb:95:b1:93:10:b5:45:68:40:f8:c2:32:28:
16:e2:ce:cc:b9:8c:3f:6a:ed:e6:70:d0:72:2e:c4:
6f:45:be:1e:48:31:60:93:ba:d0:66:10:cd:d7:61:
dd:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:FA:2D:28:9B:C7:D5:4A:4C:02:C6:E7:A9:1A:E9:CA:96:98:9B:08
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5fotKJvH1UpMAsbnqRrpypaYmwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
69:93:93:8c:ef:72:cf:3d:c3:58:9d:41:95:ba:4b:be:5a:67:
ba:6f:09:94:bb:d7:fc:a9:f1:5b:8f:28:7e:ae:0c:e8:ad:65:
20:ca:43:26:64:bd:36:41:41:38:68:49:12:fc:88:a9:0d:33:
e1:79:0d:b1:8d:14:a4:40:90:ed:95:16:b5:cf:7e:26:5b:f6:
31:3e:75:90:81:a1:f7:13:b7:27:37:7b:20:40:07:0d:8f:2a:
a6:12:bf:34:13:77:7f:10:12:7e:d4:a9:0c:13:57:e0:e1:71:
de:c5:1e:88:fb:49:b4:9a:8e:53:08:b5:4d:e4:f0:ad:1e:96:
97:bc:2e:f9:e5:55:2d:cf:66:e6:35:87:3e:e9:b3:72:c4:e3:
50:5f:3f:86:b6:2c:6d:3d:5c:6a:11:94:aa:b5:35:40:b0:0e:
e8:44:46:b3:d1:9f:bb:5f:b9:26:f6:14:fb:1f:27:c7:be:f8:
85:f8:c7:0f:db:77:66:64:2b:29:d3:f5:c1:71:84:cb:6c:ff:
7a:fc:07:7f:2b:7f:cc:29:82:c1:3c:e0:55:29:68:27:65:92:
be:12:d7:c9:57:8e:8b:20:e3:8e:09:b0:bd:c7:fb:9a:7d:57:
cf:d9:ee:59:49:ab:b7:fa:12:42:9a:9b:21:60:82:3b:a5:77:
e7:67:2d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:42:15 2025 by rpki-client