Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Or9-k9IvP0YqqxepLUYaAiUmpv4.roa
File: Or9-k9IvP0YqqxepLUYaAiUmpv4.roa (raw, json)
Hash identifier: tpJzytPXW/L3cUzRmPe+8yEO8tZkLGqV55qP0LITiO8=
Subject key identifier: 3A:BF:7E:93:D2:2F:3F:46:2A:AB:17:A9:2D:46:1A:02:25:26:A6:FE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8631491C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Or9-k9IvP0YqqxepLUYaAiUmpv4.roa
Signing time: Sun 22 May 2022 01:12:29 +0000
ROA not before: Sun 22 May 2022 01:12:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:ddb5:bc5/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:e0ec:efe1/128 maxlen: 128
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2251376924 (0x8631491c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 22 01:12:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3abf7e93d22f3f462aab17a92d461a022526a6fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:86:cf:f6:cc:26:e1:0b:fb:b2:59:9b:4a:73:
ad:6a:f6:d0:8e:78:d4:aa:98:fa:b5:ba:e8:96:16:
9a:8c:3c:40:34:95:2d:99:a9:b8:50:bf:1c:f6:39:
5b:ac:ae:1b:9d:51:4a:b8:91:50:ed:17:8d:af:1b:
57:11:b3:9b:9b:bd:05:c7:6e:d6:0a:ab:f0:94:c0:
7e:02:b0:cd:2c:00:df:78:1c:af:6e:f9:cc:90:46:
06:e4:e6:50:78:22:8a:e0:88:79:4c:6e:43:f1:7d:
46:73:cf:fb:96:b5:ef:74:f6:3b:ed:5c:47:68:5f:
60:f7:f0:35:54:15:d6:bd:df:f3:86:5a:d7:6f:27:
7d:f7:a9:9b:dc:01:31:69:65:a7:56:09:de:bf:4c:
b2:7d:85:09:92:55:f0:31:08:b8:92:5c:98:d6:b4:
c0:53:0a:83:b8:01:33:2c:88:cc:12:b1:1b:1c:20:
43:92:56:a9:8b:93:eb:a7:8f:59:b6:42:de:46:69:
82:82:69:59:0c:93:a0:ee:61:e8:7e:e3:54:9d:7c:
4f:14:84:5f:fa:34:72:e0:c8:d8:14:e0:8c:1f:93:
38:ac:a0:2b:9a:a4:8d:cc:11:e7:26:61:4c:2a:02:
8c:7f:38:be:18:8e:26:18:9d:e0:90:cd:7c:8d:0b:
f3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:BF:7E:93:D2:2F:3F:46:2A:AB:17:A9:2D:46:1A:02:25:26:A6:FE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Or9-k9IvP0YqqxepLUYaAiUmpv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2e:04:71:a2:b1:52:40:98:ce:6c:99:b0:59:b1:15:42:65:e4:
74:93:09:9e:42:15:3b:ba:9d:8c:77:04:d7:3d:a0:97:0d:97:
be:1c:a2:44:73:2c:09:37:5d:04:93:e8:de:6b:41:15:08:ff:
f1:a4:c9:a8:dd:32:e9:4b:8a:8a:34:07:bc:25:d9:4c:03:25:
ba:25:b0:84:97:15:ee:c4:49:17:13:d7:c4:c4:8b:ae:31:a8:
04:a9:e4:b1:d4:7d:82:0b:f0:75:53:d1:d5:14:15:9f:51:03:
39:bb:7c:67:5e:fa:4a:37:f5:58:3c:1f:d6:ed:ce:b8:82:20:
5e:7c:f9:9a:5e:b9:c7:c7:b9:4e:c0:79:1f:8b:a6:aa:3c:2e:
00:66:6c:85:c7:67:68:59:28:a1:64:76:41:8c:09:55:72:14:
2c:73:20:a1:f3:5e:94:84:a6:da:cc:d3:f5:53:10:95:81:13:
af:30:9b:2b:a1:2a:50:a4:b3:1e:59:a6:62:a4:1c:d8:2c:75:
6c:d7:77:c3:f7:45:b2:74:d8:35:fb:43:c2:57:3a:b5:53:80:
9d:41:40:89:38:68:64:5b:55:af:8c:a9:38:cf:fa:7b:53:20:
b2:ae:21:d4:8f:8a:05:95:45:e9:bc:0b:1a:db:cf:77:c5:93:
ad:66:89:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:44 2025 by rpki-client