Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ADSNlfTA9XIBl155Oykr0zFJVME.roa
File: ADSNlfTA9XIBl155Oykr0zFJVME.roa (raw, json)
Hash identifier: Yoe4RbKrdA7b2CMSvK1dkDscgBEXs5UCjPh4Ct4kbfg=
Subject key identifier: 00:34:8D:95:F4:C0:F5:72:01:97:5E:79:3B:29:2B:D3:31:49:54:C1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 76513D1A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ADSNlfTA9XIBl155Oykr0zFJVME.roa
Signing time: Mon 28 Mar 2022 02:11:28 +0000
ROA not before: Mon 28 Mar 2022 02:11:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1985035546 (0x76513d1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 28 02:11:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=00348d95f4c0f57201975e793b292bd3314954c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:94:0a:1a:64:1e:f6:69:ff:cd:cc:a7:8a:9b:
6d:31:f8:bc:cc:63:c8:e6:49:b4:dc:4a:c6:fd:b8:
b8:99:7f:bf:2b:39:4f:e8:32:ef:1e:46:3b:c0:6b:
91:9d:7e:20:65:df:12:a3:00:f4:ac:c5:ff:7e:32:
19:17:40:8f:d5:c5:07:85:9e:30:39:ad:f7:0d:fc:
aa:26:aa:2c:01:cd:6f:07:31:c7:7c:f3:dd:1e:e5:
94:ec:60:5c:a3:bb:2b:5c:5e:4b:25:27:91:d0:d5:
f2:45:78:eb:4b:f3:0b:d0:e4:84:f1:96:d3:35:5b:
5b:70:3e:91:56:dc:09:f1:c0:e6:ee:96:90:1f:1c:
12:e5:ae:4f:d1:a5:81:2d:c7:60:4d:c4:d0:fc:d2:
5f:46:99:20:0e:c2:de:33:41:bf:c7:6e:db:76:82:
16:b4:15:98:df:24:13:9e:1b:84:58:54:39:40:ef:
93:bb:48:00:d9:48:e5:8e:51:3d:f6:08:22:f1:87:
aa:cd:c6:82:a9:89:2f:a8:ba:3b:de:7c:cf:24:ce:
00:51:23:6a:f4:e7:91:6e:d3:bc:b9:04:9b:c0:ab:
8a:a8:47:ae:81:97:bf:43:e8:66:45:6b:7c:13:4f:
cf:f2:36:e6:0f:b2:58:27:47:a7:b8:1d:d1:3d:3e:
91:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:34:8D:95:F4:C0:F5:72:01:97:5E:79:3B:29:2B:D3:31:49:54:C1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ADSNlfTA9XIBl155Oykr0zFJVME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4a:59:79:be:a9:9a:1a:81:c4:9a:6f:b1:f4:43:13:c3:17:f6:
b2:c9:5b:ae:e9:df:3f:ee:b2:f6:32:7d:1c:57:d5:7b:c9:1c:
fd:ba:40:de:c0:01:39:85:25:c0:00:a6:ab:9d:78:81:df:d6:
ff:b1:1f:a5:23:4b:60:3b:5d:b3:02:db:68:0b:c5:df:16:70:
72:7f:2f:4f:10:e2:46:47:75:9c:56:68:3a:7c:84:e3:aa:4b:
2f:07:18:bc:3a:21:48:e3:f4:0a:66:2d:dd:96:71:de:21:c7:
7b:14:b0:d8:70:59:6c:8d:7f:aa:b4:81:1a:63:9c:fb:62:7d:
3c:59:6c:db:7e:92:6e:47:36:df:99:13:41:03:aa:26:a0:e9:
45:af:c6:be:cd:fe:ac:73:41:96:94:5e:5d:71:df:ad:e5:18:
04:47:49:7e:12:f2:e0:de:5c:09:9d:98:32:f3:1d:76:ef:13:
5f:5e:c4:2f:f2:63:63:46:85:02:6f:79:b0:16:69:96:9d:90:
11:bb:06:f0:ed:55:93:70:8e:8c:30:24:77:5c:a0:52:04:07:
10:a3:26:fa:16:42:5f:54:82:24:cd:21:82:a2:0e:cd:6b:9c:
e9:4e:8d:fd:df:46:9f:cf:24:86:29:25:d1:57:a7:32:00:a6:
ab:82:33:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:14:18 2025 by rpki-client