Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I4yQ5qRMjhIs-9jTbbIGwtiJa-A.roa
File: I4yQ5qRMjhIs-9jTbbIGwtiJa-A.roa (raw, json)
Hash identifier: ARcq4hDc5aHNrLwT3oM1cpC8V5V3wovPdWV8ytYuH3U=
Subject key identifier: 23:8C:90:E6:A4:4C:8E:12:2C:FB:D8:D3:6D:B2:06:C2:D8:89:6B:E0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7B85BA31
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I4yQ5qRMjhIs-9jTbbIGwtiJa-A.roa
Signing time: Fri 15 Apr 2022 15:10:30 +0000
ROA not before: Fri 15 Apr 2022 15:10:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2072361521 (0x7b85ba31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 15 15:10:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=238c90e6a44c8e122cfbd8d36db206c2d8896be0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8d:ee:a3:24:fe:1a:22:91:3a:7c:6e:b8:59:
c8:ec:8d:59:3b:35:a0:67:2f:e9:80:94:e6:37:c5:
1e:b6:df:e5:2d:d5:39:7f:8d:15:4d:fe:43:ea:6b:
d7:82:c5:1b:00:1d:5c:ee:91:27:d8:97:50:9c:4e:
19:3f:59:17:99:1b:f5:47:f4:24:e0:ec:7a:8b:84:
51:88:2b:38:2c:cb:a0:58:8e:98:2c:b7:bd:22:ad:
94:03:0a:cc:52:62:51:d3:29:29:03:22:3a:ef:05:
52:de:fe:53:97:6d:c9:de:5e:40:33:a4:f4:6a:da:
f3:f3:d0:32:5f:75:c1:7e:f6:ad:f2:82:ec:e6:9a:
6f:da:94:cb:d6:2c:8c:a1:16:95:d1:f3:92:a7:67:
05:7f:09:17:15:82:c9:4e:03:40:8a:8e:a6:e7:be:
3b:aa:e1:c2:3a:b5:7a:a6:e2:8d:18:38:ea:b5:f3:
fe:09:d7:e5:da:84:00:f9:93:97:bf:87:fd:5c:54:
b9:a6:19:e9:fb:45:c6:09:68:74:41:ec:6d:ba:99:
ed:dd:36:13:94:42:11:75:aa:a5:dd:ed:73:e2:5f:
fb:e6:58:8a:b4:6c:40:61:00:f8:d9:20:db:03:49:
ba:5b:e1:52:98:c4:04:ce:cc:2f:ec:13:c0:59:d7:
90:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:8C:90:E6:A4:4C:8E:12:2C:FB:D8:D3:6D:B2:06:C2:D8:89:6B:E0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I4yQ5qRMjhIs-9jTbbIGwtiJa-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6e:84:c3:da:37:ee:1a:6c:d3:e6:0c:8e:1c:df:4c:8f:6b:5f:
eb:fe:6a:e7:77:7f:a2:c5:e0:3e:38:3d:bc:e5:57:e9:7b:78:
c1:15:af:dc:41:31:c4:ba:d8:23:f4:70:2b:ad:d9:29:e1:1b:
9f:14:51:d9:47:55:55:be:9d:d2:98:81:69:4c:a8:15:21:8d:
d7:85:0d:1e:f2:86:e2:4a:c4:48:ff:a3:01:71:2d:89:29:e4:
56:a8:f0:4e:68:38:d2:73:46:d9:5b:7f:be:d5:ae:95:9e:9c:
7a:5a:c3:93:f0:bb:63:83:3a:46:3a:3a:f2:c8:a8:7c:7b:5d:
f6:3f:bb:41:e0:77:00:0c:10:be:e1:4f:25:70:f9:46:44:10:
d8:21:63:34:4e:46:c6:24:3c:70:3a:f1:bd:81:49:68:f4:57:
24:a0:20:f1:6d:7f:15:53:6f:60:dc:84:bf:aa:c3:7d:ea:24:
c7:46:f5:01:a2:4f:82:ce:2b:fc:9d:bb:c3:ef:98:45:3a:ad:
cf:c4:44:8c:52:be:c1:4c:01:39:96:5b:3b:1e:d6:75:83:fd:
d7:89:12:c2:ec:04:56:d1:88:af:49:37:2e:90:fc:1a:43:47:
40:c0:0a:21:07:4e:73:17:bd:00:1c:60:67:0e:c6:33:30:26:
5a:8e:e7:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 01:36:12 2025 by rpki-client