Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/F_2Oq6Pf0OuCJCLycRGqNNc8tBk.roa
File: F_2Oq6Pf0OuCJCLycRGqNNc8tBk.roa (raw, json)
Hash identifier: TrUn1YBkEAnw92F7N+MxCXj6V0prEtNNjX1uqy3M2Wk=
Subject key identifier: 17:FD:8E:AB:A3:DF:D0:EB:82:24:22:F2:71:11:AA:34:D7:3C:B4:19
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018301588790D3080FF6DB88BAC8C9623DAA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/F_2Oq6Pf0OuCJCLycRGqNNc8tBk.roa
Signing time: Sat 03 Sep 2022 03:15:22 +0000
ROA not before: Sat 03 Sep 2022 03:15:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:01:58:87:90:d3:08:0f:f6:db:88:ba:c8:c9:62:3d:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 3 03:15:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=17fd8eaba3dfd0eb822422f27111aa34d73cb419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ca:67:3f:90:fe:5f:2f:e2:db:d1:f4:4e:f7:
7e:29:41:80:8c:cf:82:a4:cf:be:a7:e1:e0:e2:f1:
a2:83:12:83:dc:29:59:3f:a0:de:7c:93:50:f8:4b:
ae:5e:22:e0:88:ad:55:ac:09:5e:6f:d1:84:1d:67:
12:6a:4c:af:1e:ee:8f:64:dd:6a:e7:44:98:68:84:
ae:ea:ad:00:f8:3e:89:02:fe:12:4c:14:88:90:b1:
bb:2b:69:db:d5:a9:4a:09:08:1d:64:a6:16:63:f2:
2d:3f:d3:2a:58:e2:94:77:9b:7d:8a:16:ee:45:10:
fd:98:fd:7e:0f:fd:f9:85:77:a1:3e:b7:ce:26:3e:
89:ce:7b:84:e7:84:f0:0b:c0:79:8d:3e:97:46:2f:
74:dc:7b:42:21:91:41:02:54:97:62:07:b7:0f:59:
70:39:26:c9:52:da:d0:67:a6:5b:34:e3:f4:30:29:
0c:3a:a4:85:f5:82:14:45:69:93:fe:60:5a:88:3f:
7c:c9:63:58:93:85:88:6b:68:31:57:24:bb:20:8b:
0e:e6:68:c8:08:f4:24:b2:3e:ad:38:47:f7:a5:c7:
fe:f9:7c:2f:37:de:de:5d:60:df:72:54:02:8d:11:
ac:1b:83:52:28:ee:fe:48:18:c2:9b:cf:37:e6:e9:
4a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:FD:8E:AB:A3:DF:D0:EB:82:24:22:F2:71:11:AA:34:D7:3C:B4:19
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/F_2Oq6Pf0OuCJCLycRGqNNc8tBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
30:72:63:45:db:0f:e2:e9:aa:c9:f0:59:e8:a9:b3:89:70:c1:
1e:3c:6f:ee:26:5d:e0:16:bd:64:00:32:c8:81:21:1d:e3:db:
ac:e1:13:ce:91:9d:d8:bd:00:81:a0:c7:47:f2:d4:91:af:77:
7c:6b:66:a4:b3:d8:6f:6a:20:b5:82:ee:38:b9:87:c3:6b:b6:
45:bb:c9:4e:0b:1b:67:d8:47:a2:39:42:79:d1:1f:b2:b1:86:
e9:d5:c7:70:fe:1a:9d:56:44:93:d9:66:1d:07:61:be:c6:d9:
78:54:38:e1:f8:c8:a8:f0:e6:68:74:a2:d2:b2:76:8d:7d:7f:
f2:a0:57:f9:9e:cf:2d:82:d5:dc:40:d3:26:85:e5:3b:d2:31:
67:63:32:22:70:d0:5f:c4:67:7a:27:40:14:f2:46:a1:e1:3b:
99:7f:ee:1e:2e:6a:cd:d9:75:b7:88:c8:36:8c:b7:93:30:61:
e9:42:74:d0:29:c1:21:01:09:6a:09:5e:1e:06:42:5f:4a:a3:
b1:8f:ff:d0:ae:5c:85:ee:66:f0:00:6d:25:92:77:15:82:58:
56:91:ac:6f:58:f5:7b:bf:6a:7a:90:8d:ff:43:b3:f8:c2:86:
ec:18:c0:af:03:d4:0e:30:fa:db:f1:d4:57:0f:6b:aa:c1:18:
9e:66:2b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:13:33 2025 by rpki-client