Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7b4S3_dctqxnhie2_SZZNBdKKWU.roa
File: 7b4S3_dctqxnhie2_SZZNBdKKWU.roa (raw, json)
Hash identifier: ldJW9+SLXOSE+dPAIqEjLaKQAwEtFu3+oxsZvN5drM8=
Subject key identifier: ED:BE:12:DF:F7:5C:B6:AC:67:86:27:B6:FD:26:59:34:17:4A:29:65
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 703FCEEF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7b4S3_dctqxnhie2_SZZNBdKKWU.roa
Signing time: Sun 06 Mar 2022 16:10:21 +0000
ROA not before: Sun 06 Mar 2022 16:10:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1883229935 (0x703fceef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 6 16:10:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=edbe12dff75cb6ac678627b6fd265934174a2965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:58:05:71:97:23:f0:ff:45:6f:c4:d9:9b:3f:
be:60:08:fd:02:0b:fe:3e:4c:00:0e:03:0f:80:af:
71:66:4d:e6:5d:5f:0f:c7:19:53:b8:9b:0a:6e:f7:
4e:b6:dc:18:39:f0:80:fe:fd:29:fd:ac:4d:2e:9b:
52:66:e9:aa:bb:9a:bc:ca:eb:fb:96:52:71:da:8f:
ac:f2:21:4e:b6:82:97:3e:ac:11:11:ad:2a:73:05:
73:73:1b:fa:b2:24:8b:59:b6:1f:f3:90:25:55:04:
02:3f:94:74:26:e6:e2:1b:b3:02:bd:3e:aa:8e:64:
68:8b:60:00:f7:85:26:45:5b:fb:75:05:0d:14:12:
9f:ed:3a:2c:de:82:38:c2:ce:e9:4e:ce:e3:ff:20:
98:13:c1:05:13:d6:3d:33:19:b1:9d:84:10:02:f1:
c5:ed:66:fc:b0:cd:56:af:c6:b0:e6:be:ef:96:d2:
b4:85:7e:85:7c:a1:cb:c9:30:7c:66:84:39:8e:7a:
cd:41:5a:39:70:08:26:b8:06:e4:c6:82:4e:6f:e2:
c6:74:99:4d:e0:23:5f:12:3e:1a:d1:28:54:27:de:
52:17:c3:68:04:0b:23:a7:b1:f8:dd:71:46:08:74:
eb:c5:3a:bc:ad:90:bb:44:ed:9a:29:55:ce:77:c0:
db:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:BE:12:DF:F7:5C:B6:AC:67:86:27:B6:FD:26:59:34:17:4A:29:65
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7b4S3_dctqxnhie2_SZZNBdKKWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
58:88:72:e8:fe:c5:dc:c8:bd:96:13:86:80:5c:c7:1a:0a:2b:
78:3b:b2:60:17:68:d8:df:e5:46:d3:d7:8b:d4:3d:b2:df:6f:
bc:79:02:9d:d5:d9:77:29:70:a1:05:ec:4f:87:e9:cb:f3:ae:
e4:20:cb:9e:51:de:61:07:d1:f7:0e:37:db:eb:5d:23:9a:49:
f7:fd:a0:17:d5:3b:a1:c6:ef:30:cc:e1:54:04:98:b1:f0:8d:
d6:bc:3e:09:92:b7:d4:f1:70:f4:7a:dd:dc:c5:f6:6f:ee:1c:
8c:3c:33:e8:3f:7a:ae:07:69:9d:c2:11:5e:d2:8b:99:51:51:
55:1b:f5:da:4c:f1:b0:cc:37:be:16:6c:00:5b:ae:89:cd:74:
35:ee:e4:2b:ce:32:69:db:23:ed:96:f2:77:b6:f6:be:9a:b9:
49:a7:f5:9a:9c:5f:58:e2:c8:eb:d2:d6:61:62:af:42:c8:de:
86:8e:0d:55:5c:64:3d:69:01:24:f7:e8:47:d9:2e:aa:3b:4d:
6e:7a:ed:85:e3:b7:b7:f3:3e:08:ff:5b:f8:bc:ee:3d:c7:e8:
ee:13:67:8e:c9:45:0a:31:86:87:d2:dd:57:9e:fd:df:82:19:
f8:82:ef:52:8c:57:1e:fb:39:8a:1a:b3:4b:78:3f:7a:b2:34:
10:0e:d2:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:34:55 2025 by rpki-client