Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7r1EQlq6X8sQHfueBCKuOAq_kdo.roa
File: 7r1EQlq6X8sQHfueBCKuOAq_kdo.roa (raw, json)
Hash identifier: T76WKu42Vdl8f1m0sLxK3h0l2Iu+dFpx9so8EWjniSQ=
Subject key identifier: EE:BD:44:42:5A:BA:5F:CB:10:1D:FB:9E:04:22:AE:38:0A:BF:91:DA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 66AFA5AE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7r1EQlq6X8sQHfueBCKuOAq_kdo.roa
Signing time: Mon 31 Jan 2022 17:04:15 +0000
ROA not before: Mon 31 Jan 2022 17:04:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17e:b118:1cbe/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1722787246 (0x66afa5ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 31 17:04:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eebd44425aba5fcb101dfb9e0422ae380abf91da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d9:16:17:05:24:f3:3c:cc:05:5d:fc:5c:2b:
35:69:fb:f9:0e:72:01:2b:b3:61:74:90:74:23:98:
92:5a:60:d3:27:21:50:f1:e2:55:9c:5a:52:df:55:
d3:6c:cb:bf:f3:ec:44:05:ee:07:bb:d1:86:54:37:
e6:56:3f:07:3c:49:74:ef:fb:db:09:e4:b4:91:12:
62:4e:94:fd:cf:48:76:19:13:80:82:06:72:91:87:
58:92:23:69:3d:ac:6a:c4:90:62:20:f3:ff:15:98:
b7:bd:55:f3:a2:3b:9e:60:5a:fc:c2:44:36:e0:b2:
39:2d:29:76:3e:bc:e7:48:7d:46:1a:3a:4d:ec:66:
44:92:65:91:7c:d7:fc:03:fb:92:eb:92:25:c0:3c:
2e:a0:89:29:39:c2:78:7d:54:aa:52:30:fd:44:7d:
22:18:b0:dc:6e:1b:9e:23:ab:1f:a9:d7:c7:af:2e:
84:9c:fa:b6:bb:01:e0:5a:2d:29:96:21:7b:10:79:
d2:20:50:8e:1b:59:16:fe:77:b0:9d:62:57:90:3c:
80:98:0a:01:21:ce:4d:5a:a4:27:4b:3c:ec:6c:a5:
f3:4b:f3:73:eb:ff:92:01:6f:64:86:5d:95:9e:f3:
de:79:4a:e5:24:40:7f:b1:3e:9a:4f:69:88:f2:11:
b2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:BD:44:42:5A:BA:5F:CB:10:1D:FB:9E:04:22:AE:38:0A:BF:91:DA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7r1EQlq6X8sQHfueBCKuOAq_kdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4a:6d:0f:b6:43:81:a4:33:15:78:77:5e:0a:94:2f:53:f7:ed:
88:7f:1e:c3:df:84:5e:f6:de:92:80:74:4b:6b:06:7c:34:0d:
52:49:29:07:30:4c:75:ed:f6:ce:eb:a4:0a:ed:08:b5:a2:99:
a7:0c:09:ff:b7:61:1b:80:05:7f:56:10:70:ae:15:dd:74:ad:
c6:81:08:6e:c3:57:d9:c1:6d:7e:49:22:72:4f:96:2a:31:88:
c1:6a:78:01:56:36:a6:f4:97:47:af:62:77:bd:0f:ea:8d:05:
53:21:c7:6a:d1:f2:79:8d:ec:54:22:9f:fe:4b:9d:a1:35:6f:
a2:b8:ed:0c:80:d6:ee:40:64:e1:3c:a1:d8:49:3f:56:dd:83:
21:23:76:6c:a0:0d:02:86:5a:ae:69:9f:33:39:4c:d4:c7:8d:
3c:97:18:4e:0d:3d:76:99:10:ae:d6:5b:d6:f6:41:75:21:39:
45:27:08:6f:8a:3d:46:5a:44:0a:f6:35:d2:ce:98:a2:95:2b:
23:57:14:ad:ef:cb:51:89:b0:a7:8e:9f:9a:c4:1e:fd:b7:bb:
02:a9:cf:ec:91:2c:ee:8a:69:f0:4d:50:7e:67:ed:82:9a:05:
4d:04:4f:99:79:3c:f7:bd:c6:2d:12:3a:a1:cd:70:2f:2d:ab:
0b:b0:05:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:08:43 2025 by rpki-client