Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IudMtNst2yN7ezdWmxxJSTr4ROk.roa
File: IudMtNst2yN7ezdWmxxJSTr4ROk.roa (raw, json)
Hash identifier: dmRKOh7CMNvSz7+muA0F1UtsCB2siRg8O3ihCcyZfzA=
Subject key identifier: 22:E7:4C:B4:DB:2D:DB:23:7B:7B:37:56:9B:1C:49:49:3A:F8:44:E9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185179F02DA98191AB3198812AC12464557
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IudMtNst2yN7ezdWmxxJSTr4ROk.roa
Signing time: Thu 15 Dec 2022 21:09:34 +0000
ROA not before: Thu 15 Dec 2022 21:09:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:17:9f:02:da:98:19:1a:b3:19:88:12:ac:12:46:45:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 15 21:09:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=22e74cb4db2ddb237b7b37569b1c49493af844e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:81:4a:c0:ca:ce:39:c3:f4:5f:40:e6:7e:f5:
65:62:41:26:73:8b:55:7c:a8:cc:eb:cf:54:ee:cd:
39:b8:53:37:4e:34:9c:8c:32:52:fc:ac:4a:cc:25:
38:7f:37:fe:f5:d8:75:e0:d7:82:9d:59:76:51:80:
f9:70:70:8c:e0:91:e3:39:37:57:3c:83:a4:89:f0:
1a:25:05:fe:cf:ff:f4:e9:ab:b0:10:fb:61:4a:c4:
5f:ef:7a:91:6e:d3:2c:34:25:cd:39:90:35:15:80:
91:27:35:6c:8b:cf:10:43:2f:7f:29:5a:cf:a9:0a:
0d:f8:b3:94:21:70:a2:69:0f:72:7a:28:4e:85:58:
c2:69:cd:bb:12:ba:a7:d6:dd:fc:13:0f:02:b8:34:
81:d1:08:0e:de:00:e9:83:69:68:1f:2f:a6:9c:da:
79:ff:56:39:20:2d:f3:5f:8c:b5:64:25:70:d3:d9:
b1:5e:0f:d3:51:4f:bd:88:80:cb:85:26:da:39:d4:
2b:cd:17:9d:23:7d:32:77:6d:9f:61:3d:d3:32:d9:
83:ac:54:12:8c:30:84:d0:a8:ad:cf:16:3d:9a:d3:
aa:cb:aa:95:04:f1:b7:35:23:38:58:13:c6:45:0c:
ad:43:c2:e8:9b:bc:db:b2:a3:a2:7f:ba:a1:20:6c:
67:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E7:4C:B4:DB:2D:DB:23:7B:7B:37:56:9B:1C:49:49:3A:F8:44:E9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IudMtNst2yN7ezdWmxxJSTr4ROk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
00:47:4a:05:fe:6d:c5:06:8a:6a:bd:86:a3:7c:16:3c:a0:d3:
32:aa:f4:00:0b:02:e6:43:25:40:06:aa:56:30:2c:f1:ba:eb:
94:21:47:00:df:fe:23:24:ea:9e:29:13:aa:a5:b6:ea:72:9c:
09:9f:0f:8c:0e:88:dd:5d:91:64:38:0b:15:ab:40:88:f4:c5:
d9:75:04:d4:3a:90:7b:ed:95:e2:9d:e8:f7:56:01:ce:b1:8f:
27:10:25:e7:f0:fc:28:c0:2a:77:29:79:3e:46:1f:db:d6:4c:
8a:95:37:97:73:54:93:89:e1:dc:02:4a:af:05:7a:2c:37:70:
5d:aa:5c:ec:39:72:12:d9:2c:93:0b:aa:2a:02:69:0d:2e:68:
87:7b:d1:bf:73:55:41:c5:0c:b8:36:09:10:80:00:0c:29:f2:
da:dc:f8:ba:3a:b1:bf:31:52:b3:ec:e5:18:53:5a:e0:fa:c6:
a9:f1:41:74:eb:68:8a:5c:06:3f:55:d5:0d:17:54:60:6f:d1:
06:bb:2d:ec:1a:55:33:a1:0b:a8:9e:22:b9:89:11:a1:f8:af:
55:1b:86:a4:9e:36:1c:3b:30:00:3a:a4:5d:f9:de:8e:45:ad:
e4:f0:a2:8d:0f:46:c8:8f:6c:99:7c:01:b0:c0:de:0c:57:25:
f4:c9:35:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:26:15 2025 by rpki-client