Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/73N5sPZ-zA4ucCBk-wLfDDCeUAI.roa
File: 73N5sPZ-zA4ucCBk-wLfDDCeUAI.roa (raw, json)
Hash identifier: PSdZ3R67IW+bRA2hUFWtA9HNLhG5EHLYBSsMgRdXwI0=
Subject key identifier: EF:73:79:B0:F6:7E:CC:0E:2E:70:20:64:FB:02:DF:0C:30:9E:50:02
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6FADE540
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/73N5sPZ-zA4ucCBk-wLfDDCeUAI.roa
Signing time: Fri 04 Mar 2022 20:16:36 +0000
ROA not before: Fri 04 Mar 2022 20:16:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1873667392 (0x6fade540)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 4 20:16:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ef7379b0f67ecc0e2e702064fb02df0c309e5002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:99:81:4a:c4:77:b8:bf:d7:6e:85:84:fa:bd:
0b:eb:4a:0e:f3:37:db:17:81:6d:6e:a7:2a:32:b7:
ba:c2:0b:7e:ca:4d:4e:d6:f9:a5:3c:54:3c:f6:6c:
c1:a7:84:db:16:99:14:0a:22:78:2b:28:4e:ee:9d:
f2:b2:03:a5:e5:f4:80:05:6f:41:4f:0d:76:79:59:
ab:a9:45:d3:d6:91:8f:ac:cd:49:15:2e:26:9e:f6:
91:dd:ed:31:dc:27:c2:c2:98:08:29:a5:a2:84:a6:
6e:d8:f6:c8:43:5e:6b:76:58:22:92:71:09:89:55:
e8:8f:24:8f:89:28:96:a3:04:e8:a3:71:11:4b:4c:
47:64:07:09:9e:1e:68:56:28:1d:c1:4d:b3:79:02:
b2:e6:18:c6:dd:ce:ce:06:ea:34:95:d1:9c:22:1c:
39:ae:08:b8:8c:23:68:82:ba:f7:b2:b0:5d:79:58:
46:64:90:d5:90:6f:c8:f8:8f:21:ec:6a:08:c3:9b:
b8:40:12:8a:eb:52:7b:c9:74:70:5b:ac:cd:89:8f:
2b:fe:ef:2e:49:44:e9:6b:35:0b:25:69:d7:0d:6b:
6b:4b:83:18:a1:3b:c6:7f:fa:16:e3:f5:94:d5:71:
8a:46:72:ae:19:e5:8f:f0:dd:0f:e7:ed:db:db:04:
1c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:73:79:B0:F6:7E:CC:0E:2E:70:20:64:FB:02:DF:0C:30:9E:50:02
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/73N5sPZ-zA4ucCBk-wLfDDCeUAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
48:d8:ed:76:fe:57:b4:b3:f1:31:f3:57:ca:f3:81:f9:02:ac:
34:37:c1:18:87:51:24:2d:0f:66:d1:af:a3:49:ba:ea:25:e5:
ff:14:5d:4c:10:ff:9b:fe:75:96:a4:97:8a:26:85:fb:aa:0c:
91:79:ee:85:27:de:d4:0f:a4:bc:dc:eb:46:46:1b:03:8b:1b:
19:2f:a3:a3:9e:b1:83:f2:28:9e:e1:bb:76:a6:f2:47:af:2c:
1e:98:26:ed:66:16:26:a4:75:58:86:79:98:fe:01:70:e4:85:
6a:36:63:9c:96:f6:b7:ae:57:6d:b7:ba:88:ac:ec:5c:10:07:
93:1f:a1:35:46:db:e4:5b:85:2a:6c:b4:a5:91:8b:cb:ea:ce:
07:13:ba:58:1e:f1:f3:19:dc:bc:8d:02:a7:ac:5c:70:58:7c:
e7:16:6d:0a:f2:86:40:1a:af:20:a4:2b:d2:ea:a0:f4:09:11:
05:1a:35:13:9f:74:93:b5:d4:fa:d7:71:3d:b9:f5:a5:07:fc:
bf:d4:4f:5c:fb:a1:63:4b:4b:0a:9e:08:81:29:35:ff:24:c0:
75:0c:ce:e1:d3:7b:ee:68:ce:0b:93:94:d7:93:7b:8e:49:d2:
02:a3:21:9a:4e:5a:4a:9d:09:5f:2f:d7:90:bd:20:40:ec:a2:
c6:c3:0f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:35 2025 by rpki-client