Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5qkb7LHMdZMN9NQ409FwV0oS7mg.roa
File: 5qkb7LHMdZMN9NQ409FwV0oS7mg.roa (raw, json)
Hash identifier: ZZtxnE3XFXXPFqKLjSuyRcGPlTqX+PMlIRCIzHPmEPE=
Subject key identifier: E6:A9:1B:EC:B1:CC:75:93:0D:F4:D4:38:D3:D1:70:57:4A:12:EE:68
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 82F8C90E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5qkb7LHMdZMN9NQ409FwV0oS7mg.roa
Signing time: Wed 11 May 2022 04:15:02 +0000
ROA not before: Wed 11 May 2022 04:15:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2197342478 (0x82f8c90e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 11 04:15:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e6a91becb1cc75930df4d438d3d170574a12ee68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6e:fa:fc:73:32:a9:94:c5:a0:95:39:f3:8c:
d9:24:70:00:8f:e6:da:c9:a0:89:f2:d4:d5:07:36:
80:f9:8f:63:11:f8:ae:6f:aa:c4:1f:f5:a9:f8:a9:
a3:7c:51:c0:56:96:2d:53:d4:a3:30:3b:d3:87:e1:
fc:d4:e2:6b:1f:9b:dd:6c:a7:ed:12:fa:7b:58:21:
51:04:91:cd:9c:77:04:e1:2b:4f:aa:0e:75:b8:77:
38:35:10:c9:01:3e:1c:39:37:6a:5b:1c:69:fe:4d:
36:b1:b1:02:44:7c:cd:72:d4:1b:c1:f6:c5:00:1f:
72:f1:c2:94:10:1b:29:70:23:da:9f:20:76:0f:a1:
d2:96:74:0e:a4:c7:19:1c:31:83:2b:53:86:e1:e9:
92:f5:d4:54:b3:43:4d:7b:44:4c:5e:1e:62:9b:53:
b7:17:86:a3:cb:d9:df:cb:f8:c3:ab:82:a8:c0:17:
70:1d:91:00:cd:33:cd:9a:04:da:e6:ac:2c:06:78:
c8:07:78:68:e5:0a:7e:04:e1:39:96:3d:60:39:20:
8d:a9:b1:33:d6:d2:b3:99:f2:a0:80:f7:99:a5:fd:
62:83:93:24:9e:36:f5:ce:30:88:c6:a9:fd:31:09:
04:c6:00:d8:a7:cf:5f:04:c7:5b:45:09:c0:4c:30:
44:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A9:1B:EC:B1:CC:75:93:0D:F4:D4:38:D3:D1:70:57:4A:12:EE:68
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5qkb7LHMdZMN9NQ409FwV0oS7mg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
02:75:22:30:81:74:68:15:32:0b:4c:3c:fe:fb:30:2b:3d:26:
cd:ca:d2:9e:9c:aa:05:b8:c3:b4:30:9c:a5:c9:29:9d:0c:56:
48:7e:38:dc:f0:53:8a:90:e5:ac:95:36:87:69:5b:1d:df:62:
60:f1:ff:41:ba:30:08:fb:cb:de:ba:f3:ef:da:8d:70:ff:7a:
45:30:dc:c6:90:a3:e8:33:97:d0:be:7a:44:0c:a6:ec:14:bc:
b6:a7:1d:81:aa:f4:02:22:0d:2f:32:88:79:a0:ca:01:5c:07:
13:82:c7:2b:54:1b:fb:58:89:df:3d:8d:d0:b6:46:56:be:05:
48:4b:dc:7b:e7:64:4c:8c:39:a5:50:92:9f:91:72:c8:93:d4:
df:56:1c:73:02:42:cc:ad:48:39:b8:11:2a:c2:b4:ca:fd:c0:
af:cc:22:85:fc:32:12:a9:ba:a6:40:ed:bb:47:07:0c:1e:ee:
93:54:19:b5:33:fa:d3:1c:20:66:c4:23:b6:10:fc:92:15:a6:
e9:af:95:78:cf:c7:d5:5a:33:f3:43:e3:eb:ff:39:aa:5f:b7:
39:cf:0f:90:96:e8:60:07:e9:17:6c:a5:76:aa:2b:8a:fc:21:
69:03:dc:00:85:14:e4:5d:18:bc:54:ed:8a:f0:24:2d:ed:da:
a3:7b:a2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:24:02 2025 by rpki-client