Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9IiZtHAGw3EpqF7DCmG3GhYLII4.roa
File: 9IiZtHAGw3EpqF7DCmG3GhYLII4.roa (raw, json)
Hash identifier: dJiexoMK1r0B7RLdJHrzXrxH4UN9NriCx1HTHODj3Wk=
Subject key identifier: F4:88:99:B4:70:06:C3:71:29:A8:5E:C3:0A:61:B7:1A:16:0B:20:8E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 75A51BE9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9IiZtHAGw3EpqF7DCmG3GhYLII4.roa
Signing time: Fri 25 Mar 2022 19:10:38 +0000
ROA not before: Fri 25 Mar 2022 19:10:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1973754857 (0x75a51be9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 25 19:10:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f48899b47006c37129a85ec30a61b71a160b208e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b8:ce:13:1f:97:00:87:c1:26:80:1f:5c:22:
3e:a4:e6:4b:2b:68:39:c0:1e:20:f0:0f:11:49:fe:
3d:22:be:19:57:21:6e:0f:02:43:f6:d3:d3:d7:e6:
44:74:60:d0:ef:13:7e:c2:6d:3f:a4:fe:2c:2f:dc:
d2:0d:0e:13:f6:98:44:b1:b2:b6:8d:20:08:21:bf:
c8:9e:39:a8:9d:70:a6:a7:25:b9:4b:b8:7f:92:b7:
2c:67:b1:c0:19:74:10:cb:50:39:ec:42:b4:9d:a9:
55:6d:36:52:e4:f6:c8:ea:a8:54:4a:ff:8b:37:bc:
d3:79:45:c8:25:36:51:10:07:b2:dd:36:60:38:66:
1e:f5:0e:1c:42:9a:b2:4a:05:fa:28:ac:40:c3:31:
2c:5a:81:69:b5:cf:67:f5:4c:41:1f:4f:89:31:a2:
c2:9f:78:f6:57:7c:1a:6f:1a:1d:c6:df:ca:97:83:
68:f8:33:e0:3d:4a:59:c6:3a:ed:96:74:a8:ab:61:
dc:b7:b8:a7:91:f0:5f:8e:85:de:79:e0:df:c5:a6:
62:f7:8a:c7:7c:23:f3:ed:34:e4:07:82:23:6e:dd:
b6:89:52:04:bb:7d:81:ea:bf:af:2f:da:58:df:92:
03:38:73:cc:3b:5c:21:ab:87:9e:7f:76:3c:80:f4:
e4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:88:99:B4:70:06:C3:71:29:A8:5E:C3:0A:61:B7:1A:16:0B:20:8E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9IiZtHAGw3EpqF7DCmG3GhYLII4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7a:29:34:25:27:6a:6c:86:e3:8d:bc:e0:01:0a:1d:c1:75:13:
4d:98:a3:c5:8f:4d:eb:75:2f:54:a4:dd:ad:dd:99:51:a5:b8:
95:ec:5f:9b:e1:a9:47:ab:24:e4:47:fb:db:91:d5:29:86:c1:
84:d9:10:04:7d:57:fe:4a:74:f4:ba:7d:84:59:72:ba:c0:c1:
7d:27:3b:9c:6a:ba:e5:d9:f6:0d:c8:4c:fb:c9:19:b2:86:b7:
42:f3:ec:86:99:e3:87:b1:48:30:42:41:f0:a6:e5:92:82:1a:
7a:d7:62:ac:6d:c5:6e:0d:cc:ff:0b:a2:cb:92:63:da:a6:1c:
93:31:d9:bf:10:2b:c6:51:22:dc:8b:72:41:7b:47:93:0b:8a:
a2:45:cf:0d:c0:97:bb:f0:36:fd:74:3d:31:32:fc:7d:74:49:
b3:4a:59:92:28:48:62:48:ed:f9:60:95:fd:e5:c5:ba:75:7f:
cd:b0:55:5a:08:d6:6c:d8:7b:89:da:ba:58:80:9e:8f:47:61:
16:6d:a7:ec:d0:63:a8:00:38:df:52:ba:ca:63:ee:cb:a0:51:
51:c0:c3:74:de:72:df:ca:23:6e:81:0b:f3:b5:87:55:44:12:
2d:bc:eb:7b:2e:60:ef:3b:ad:4e:f2:60:0d:7a:b0:71:07:6b:
f1:80:0a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:38 2025 by rpki-client