Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Dr53UgGXyChvQUoHR3zbHNmOSoo.roa
File: Dr53UgGXyChvQUoHR3zbHNmOSoo.roa (raw, json)
Hash identifier: mq2NAeUNVtwH4hOWB+zE9d/28PH9hZ3zmz+iyYXu20I=
Subject key identifier: 0E:BE:77:52:01:97:C8:28:6F:41:4A:07:47:7C:DB:1C:D9:8E:4A:8A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6D3E4A63
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Dr53UgGXyChvQUoHR3zbHNmOSoo.roa
Signing time: Thu 24 Feb 2022 06:24:38 +0000
ROA not before: Thu 24 Feb 2022 06:24:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1832798819 (0x6d3e4a63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 24 06:24:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ebe77520197c8286f414a07477cdb1cd98e4a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:07:c1:3a:a3:43:02:95:ef:fe:b7:0b:5a:2d:
d5:5d:30:41:3e:eb:3f:b6:af:08:52:b8:64:be:b2:
fb:e5:74:0e:90:c8:c1:66:1e:2e:d0:71:72:65:3e:
da:e7:40:9e:96:87:79:9a:86:b5:26:2c:57:2c:e4:
47:08:9a:e5:77:70:66:35:3b:c3:c3:98:81:62:d5:
94:92:ef:b4:63:6f:15:a7:02:be:a0:1c:3f:73:7d:
1e:24:71:ad:27:eb:64:af:48:b1:dd:03:22:34:ef:
5d:9b:99:78:7d:f3:9d:11:94:3e:83:b2:c5:c9:fc:
62:4f:50:35:cc:c8:92:1b:51:91:f5:0f:e5:02:d9:
3e:59:06:05:d2:13:e1:82:53:b9:51:d4:c6:67:d1:
ad:c6:62:71:b9:71:f5:ae:15:d3:9c:1c:f8:45:c8:
4a:39:c8:dd:54:16:6b:2f:68:85:b0:35:df:4a:4e:
a9:7b:ee:85:2e:fe:82:10:a3:a5:92:8d:ff:11:a2:
ab:7c:25:a9:63:8a:ac:8f:68:75:97:58:7f:32:2d:
fa:8e:97:0b:ca:1a:8f:96:0a:f9:83:69:49:db:9b:
02:91:7c:e6:e2:bf:7f:87:97:a8:9b:f1:80:6e:6c:
1a:1d:35:95:96:6d:e7:e2:d1:e3:55:e1:82:75:43:
e8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:BE:77:52:01:97:C8:28:6F:41:4A:07:47:7C:DB:1C:D9:8E:4A:8A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Dr53UgGXyChvQUoHR3zbHNmOSoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
44:30:6d:c6:02:d8:fb:85:61:e5:09:0c:08:8c:14:48:df:51:
ca:ab:3a:41:63:60:fc:7a:bc:0d:47:f3:72:f6:25:16:13:34:
b2:62:32:b5:6c:35:02:82:fe:3d:cb:7f:da:f5:8c:c6:ec:7d:
0b:b6:1a:d9:95:1e:bd:38:1f:6b:a7:74:9c:ca:f1:f1:0a:b3:
87:97:0e:cc:b1:9f:1d:06:87:d6:2f:ae:7c:c8:b5:4b:85:52:
56:36:a0:7a:1e:db:bd:2f:59:36:4f:09:9d:3d:77:4d:b9:c9:
5b:1d:7b:54:35:9a:86:07:49:67:a2:f6:7c:15:fe:95:0c:93:
93:58:1b:2a:3a:53:64:a3:fc:84:b5:8c:6b:b4:06:ba:2a:a6:
5f:3e:79:b6:2d:9b:ee:e7:c3:9c:de:1e:3f:ef:9f:e8:59:8f:
2b:69:95:81:3a:06:c7:32:ac:d9:a5:ea:8f:9c:fb:27:36:56:
2d:d5:70:23:dc:6b:2e:90:67:3e:fc:77:bc:c6:e3:d6:ff:47:
87:6c:89:6d:fe:57:1f:e4:25:7f:54:21:2b:3c:24:b9:ae:72:
d7:bb:be:20:f0:d3:ac:01:c4:36:5a:05:70:e5:97:09:80:fd:
ee:62:86:48:65:90:28:71:f7:e4:c9:cd:6b:d2:6a:0b:c3:92:
6c:9c:81:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:31:46 2025 by rpki-client