Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E3BUtBu9QEr35BSVhGrfV_6mP3Y.roa
File: E3BUtBu9QEr35BSVhGrfV_6mP3Y.roa (raw, json)
Hash identifier: LymozD1FxMuA6gOAq1rM1kmcNi078RwRhyjwGDnRii0=
Subject key identifier: 13:70:54:B4:1B:BD:40:4A:F7:E4:14:95:84:6A:DF:57:FE:A6:3F:76
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7F4813C9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E3BUtBu9QEr35BSVhGrfV_6mP3Y.roa
Signing time: Thu 28 Apr 2022 15:11:40 +0000
ROA not before: Thu 28 Apr 2022 15:11:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2135430089 (0x7f4813c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 28 15:11:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=137054b41bbd404af7e41495846adf57fea63f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:01:e9:68:ff:67:f4:10:83:c8:44:18:be:c7:
31:af:47:33:77:0f:2b:08:da:35:3e:d4:7a:e2:a6:
0f:08:0b:e0:d9:67:fd:ad:ae:59:18:e7:22:ec:d4:
b4:a6:26:dd:74:25:36:05:bd:cc:ec:c4:8a:f5:d3:
6e:eb:00:ba:7d:a8:54:4b:80:42:3b:b0:14:ce:e7:
25:8b:af:72:63:3e:82:0d:b0:4f:64:a4:bd:37:87:
80:64:b1:ee:6c:48:23:2f:d5:55:c1:5d:38:79:ea:
0c:09:a0:79:71:32:d1:51:01:76:05:63:67:77:2d:
58:d8:30:13:25:ac:d2:80:3b:48:41:9e:d2:08:82:
21:d5:03:f0:77:dc:fc:11:ca:dc:49:33:e6:da:4c:
ab:46:42:b1:31:23:c3:19:02:b4:d9:af:4d:5b:41:
80:b3:9a:dc:63:39:03:ff:7d:ab:48:f3:89:f1:a4:
1c:29:65:e3:be:2a:66:e9:0c:41:64:58:dc:5f:d6:
e4:52:21:4c:31:94:d9:39:68:3a:94:f8:0c:2e:b1:
d8:b6:66:58:b6:7d:f2:42:bc:dc:19:d2:85:19:ba:
11:8f:0d:4d:e7:85:21:32:f3:8f:95:05:1f:aa:72:
47:9a:7f:60:2c:9b:a4:f1:4a:e8:aa:5c:bc:ca:78:
a2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:70:54:B4:1B:BD:40:4A:F7:E4:14:95:84:6A:DF:57:FE:A6:3F:76
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E3BUtBu9QEr35BSVhGrfV_6mP3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
17:ea:0c:01:75:21:b3:d4:13:37:fb:bf:b2:a0:2f:43:30:67:
8a:2f:81:85:79:0a:72:7b:e0:53:a4:48:d4:ac:a6:72:6c:69:
ff:db:63:c2:79:ef:bb:f4:a5:c8:e5:b9:56:55:f5:dd:4e:0d:
ad:ed:e7:f2:ad:c2:37:a8:c3:39:2b:eb:47:82:96:d7:0c:30:
f2:09:46:c6:9b:4c:8a:86:2c:79:d6:c9:92:59:25:b7:99:05:
02:a7:d4:07:a7:67:ec:59:41:19:67:ff:ff:f7:53:c5:1c:0e:
12:5b:a6:c8:eb:13:29:2e:f9:ff:bd:70:5b:d0:29:b5:90:9f:
0b:10:17:a9:4e:78:aa:8f:4f:61:78:c3:2b:05:ea:28:b2:1f:
0f:ea:77:89:30:e6:85:b8:84:7e:1d:0e:25:95:d2:3d:7e:60:
e2:cc:4e:e6:c8:74:dc:89:4b:0b:4f:c8:7c:0f:48:21:24:b0:
d0:80:04:23:b6:f7:a1:97:8a:af:7b:6e:11:4e:8d:33:e0:49:
0c:4f:4e:14:6c:5a:63:d4:0c:e6:7c:80:75:80:b6:f1:07:bd:
93:e4:68:6f:00:b2:30:c3:09:4d:2d:7e:19:21:6e:ae:fc:d5:
e8:b6:6f:34:a1:eb:85:44:c8:4f:2b:bb:ae:c4:1d:15:3b:0a:
ea:7a:6d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 20:16:30 2025 by rpki-client