Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/97gLsTL46RrmxR7rPwnzMtFuIy8.roa
File: 97gLsTL46RrmxR7rPwnzMtFuIy8.roa (raw, json)
Hash identifier: uxjgcUAHpBzJwd+cc5Ctdgwp47e4x2YxFvtQGXBA8Ak=
Subject key identifier: F7:B8:0B:B1:32:F8:E9:1A:E6:C5:1E:EB:3F:09:F3:32:D1:6E:23:2F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6A770BAA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/97gLsTL46RrmxR7rPwnzMtFuIy8.roa
Signing time: Mon 14 Feb 2022 06:08:42 +0000
ROA not before: Mon 14 Feb 2022 06:08:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1786186666 (0x6a770baa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 14 06:08:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f7b80bb132f8e91ae6c51eeb3f09f332d16e232f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:dd:34:8f:e4:f9:ab:e7:29:d2:e6:a5:22:5a:
ea:34:1e:59:26:97:1c:09:ae:cc:15:07:27:98:3e:
3c:05:e6:4c:11:9a:06:88:7e:18:29:9e:b9:bc:c3:
9a:43:a9:c2:ba:eb:2d:00:11:a3:17:fb:13:c2:de:
0e:dd:c1:85:00:c2:62:5f:79:a2:4b:cf:eb:d1:07:
64:06:88:af:49:37:e0:8f:31:a0:ac:4c:de:c7:41:
3f:01:88:96:fc:8d:4b:ef:dd:42:eb:64:6e:c3:7c:
fb:05:bd:29:e8:ed:f6:0c:68:72:0f:33:94:a8:c2:
ff:e5:24:7e:3a:c1:00:2d:b8:38:8c:8a:0f:7f:c5:
1b:51:65:30:fb:24:b9:97:a7:4c:ef:31:02:03:6d:
db:1c:86:e4:f8:0f:4c:92:09:6f:ec:74:27:81:41:
34:75:33:bb:ea:1c:a3:79:9b:52:89:05:36:ce:9b:
4e:f2:9e:1b:49:80:f7:34:b6:33:13:17:f2:58:7a:
9d:94:a1:5c:46:01:09:bb:9b:7f:93:30:25:7b:a4:
0f:78:f3:de:ba:32:26:5c:0b:82:34:03:f2:5a:da:
cd:de:6a:f0:8c:1e:c0:09:b5:77:a5:7e:ef:d3:63:
d7:41:77:ef:96:e4:fc:3e:c3:45:13:53:35:6e:81:
fb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B8:0B:B1:32:F8:E9:1A:E6:C5:1E:EB:3F:09:F3:32:D1:6E:23:2F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/97gLsTL46RrmxR7rPwnzMtFuIy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
18:84:f1:40:fe:6f:18:34:48:6b:80:4e:c3:d7:00:a4:b1:89:
56:c0:ed:d8:fd:a6:cc:92:43:01:3a:57:3a:5d:f1:97:15:6a:
94:56:08:aa:5e:71:bf:6c:36:11:77:b1:3d:44:71:32:fe:04:
3d:1c:80:9d:48:4c:77:99:5c:d8:98:7d:e5:ae:41:06:5f:57:
3d:6d:25:5f:b2:1f:1e:cd:13:04:13:6b:30:56:45:8c:67:a8:
90:8a:0f:8d:2d:84:61:1a:c7:3a:0f:11:18:5c:ef:92:9d:26:
a4:8e:de:3c:85:c8:64:f1:e8:8c:d4:d4:77:6b:15:4c:15:54:
a1:4d:98:38:9e:f0:ae:72:37:92:36:42:a7:34:ad:d6:3d:1a:
c4:5f:3a:5c:a1:0d:a9:ef:35:cb:64:a8:a6:31:77:68:be:08:
af:86:69:c5:5f:f7:42:7f:c9:06:80:54:17:33:85:cb:16:cd:
2b:85:a4:74:b4:3d:c1:b9:e7:73:a4:71:36:bb:76:ac:95:c1:
2f:ec:4b:96:b0:10:db:ac:1a:40:f7:f3:c1:8f:b6:b9:3e:32:
ab:fb:1c:7e:ea:80:58:6e:6e:3e:5d:f9:cb:69:5d:c3:81:9d:
80:3e:c6:67:85:b8:67:63:21:3c:11:ce:47:1b:88:d0:ad:fb:
38:68:a1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 10:45:05 2025 by rpki-client