Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/N54b5VjqqeF9BbAJpQA6p_5p7qE.roa
File: N54b5VjqqeF9BbAJpQA6p_5p7qE.roa (raw, json)
Hash identifier: Ahg+hirVJAYA/9cVz/nu90i5mBPAWByVUUop5YsOnT0=
Subject key identifier: 37:9E:1B:E5:58:EA:A9:E1:7D:05:B0:09:A5:00:3A:A7:FE:69:EE:A1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6E04CEB7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/N54b5VjqqeF9BbAJpQA6p_5p7qE.roa
Signing time: Sun 27 Feb 2022 01:07:32 +0000
ROA not before: Sun 27 Feb 2022 01:07:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1845808823 (0x6e04ceb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 27 01:07:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=379e1be558eaa9e17d05b009a5003aa7fe69eea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:37:b6:a2:e8:a8:0d:6a:e8:3f:5b:44:b9:d5:
7b:9f:ae:35:36:28:fc:1f:d9:89:ba:e3:b2:fa:f2:
d8:71:f4:f4:0a:51:91:dc:d5:7e:e4:e3:42:55:4e:
95:75:54:4e:3d:94:f2:8e:e6:91:09:24:eb:c0:f0:
0d:11:08:5b:6f:9c:0e:a9:58:5c:fa:e9:e7:e8:5e:
85:fc:95:83:76:a8:ed:6f:81:be:8b:4c:3d:8c:70:
cc:af:9e:cc:97:02:28:0d:16:b9:f0:c4:0b:af:7e:
91:b7:ec:89:ea:8c:cf:bb:70:2c:cd:9a:9e:7f:a3:
41:f5:7e:71:4c:94:38:e2:ed:4b:ed:70:c7:3d:ac:
ff:1b:f8:71:77:59:86:89:f1:53:8f:20:6b:75:0e:
0e:fd:06:9e:8d:bc:c4:c4:a9:9a:28:35:54:15:d0:
84:e1:2e:cf:f5:3b:5b:b5:8f:1f:de:60:bc:a3:85:
08:74:9b:98:d6:87:89:9d:c6:31:45:f1:7f:dc:8d:
f8:92:54:a0:3c:45:bf:4a:d4:74:ea:ac:49:63:c8:
73:63:7a:61:44:fc:7c:1f:03:cf:0b:f4:84:a6:93:
07:11:fd:9a:12:10:0e:50:c1:9b:57:eb:8c:58:b4:
58:c0:01:d9:29:c6:2d:52:a4:40:75:46:14:e4:e9:
57:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:9E:1B:E5:58:EA:A9:E1:7D:05:B0:09:A5:00:3A:A7:FE:69:EE:A1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/N54b5VjqqeF9BbAJpQA6p_5p7qE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a4:5f:b9:43:85:73:d0:f5:d5:fa:ec:da:8b:6d:59:97:72:c6:
53:63:cd:a2:36:be:2c:1b:51:99:d7:89:95:1e:c2:a6:2b:ee:
a9:53:97:7e:4a:42:b1:6e:17:8e:56:80:9d:4d:dc:dd:cc:a6:
7c:04:09:60:e4:2a:89:97:60:f8:38:47:8e:1f:e0:29:8b:ba:
65:29:06:55:52:46:01:f2:2d:83:a6:c9:19:2f:e0:07:13:f6:
17:b7:71:24:6f:78:fd:34:be:d1:55:22:6b:64:21:91:47:3b:
87:7a:d0:a9:47:a0:7b:de:1a:37:a3:31:5e:48:75:56:3a:2d:
c0:b3:2f:53:80:89:30:c5:58:8b:55:c4:99:a9:1d:37:02:82:
bc:c5:47:f9:42:7c:c7:20:13:24:91:48:06:c8:3a:fc:a1:45:
5b:15:de:18:e4:cc:e5:bd:d0:78:99:00:80:42:b0:f6:0f:54:
87:d7:86:84:23:00:23:89:a6:5a:e1:7a:0f:e9:b3:1e:98:e8:
46:49:45:84:ac:8c:b2:56:1e:1b:97:60:fd:b5:fd:d8:e6:ec:
6b:1b:86:d6:f5:2f:6d:36:25:5a:91:53:2c:ed:4c:d4:93:4a:
71:41:b7:85:6c:ec:40:6a:69:2c:af:dd:7e:8b:46:1a:a4:48:
ac:ce:57:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:24:43 2025 by rpki-client