Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/P4YuMjKas9UopDiM9Qkv-g4pWbQ.roa
File: P4YuMjKas9UopDiM9Qkv-g4pWbQ.roa (raw, json)
Hash identifier: zT7v/eZPiigOAnKErVmQLuanNOp18SILk6UZ5M6YX6I=
Subject key identifier: 3F:86:2E:32:32:9A:B3:D5:28:A4:38:8C:F5:09:2F:FA:0E:29:59:B4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185C8A1146265243A709D1D63C7A8578A28
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/P4YuMjKas9UopDiM9Qkv-g4pWbQ.roa
Signing time: Thu 19 Jan 2023 06:04:37 +0000
ROA not before: Thu 19 Jan 2023 06:04:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:185:c8a0:da77/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c8:a1:14:62:65:24:3a:70:9d:1d:63:c7:a8:57:8a:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 19 06:04:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f862e32329ab3d528a4388cf5092ffa0e2959b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:56:d1:85:fc:b1:9f:38:51:03:a0:ca:7a:81:
c9:c2:be:74:4e:01:6b:2d:81:17:2a:99:65:f1:d3:
c6:b9:73:d3:23:c7:d7:05:49:b2:a6:71:d6:78:f7:
86:68:6b:70:22:a9:c1:61:9a:fc:fa:0a:0e:85:95:
89:6c:f8:68:c4:81:c6:9b:9a:31:14:4b:bc:ee:c6:
d8:f2:72:35:7b:38:67:66:63:5f:f6:4e:d6:c7:e1:
a7:c2:9c:79:07:45:de:96:90:de:d0:a8:0e:73:ec:
e2:21:f5:c8:6d:a8:c2:b6:45:ea:24:4f:a6:c0:4d:
bc:10:76:42:1c:e7:3d:2d:77:c3:58:de:4d:ed:5a:
98:04:af:87:65:58:fd:61:c4:43:81:8f:44:98:a4:
6d:50:c8:63:f9:4d:76:87:8f:d8:64:b5:00:6b:ac:
72:79:5b:eb:f6:dc:99:11:65:f4:af:76:5d:dc:20:
71:e9:54:bc:34:78:38:08:6f:e2:6e:41:be:6d:f2:
11:72:80:b4:84:c6:31:a9:5b:24:a5:5a:9d:46:66:
27:14:59:ad:3b:87:4a:9d:a6:9c:77:17:ea:24:cc:
50:27:8a:9f:f2:a8:e4:fb:e9:45:88:2d:c2:d9:0e:
00:f2:82:e6:03:4d:c3:1d:96:53:1f:00:d3:d3:7d:
61:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:86:2E:32:32:9A:B3:D5:28:A4:38:8C:F5:09:2F:FA:0E:29:59:B4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/P4YuMjKas9UopDiM9Qkv-g4pWbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
24:3c:11:2a:b0:c6:c9:c1:67:2d:a4:18:f1:a5:8d:18:bf:43:
6c:0c:be:4b:9b:a3:99:67:70:43:8a:7e:1c:cf:0a:3c:14:4f:
c0:81:8a:4e:a7:e9:14:ea:76:75:69:3e:03:96:ea:ba:df:22:
a6:f4:eb:1d:59:28:58:76:dd:e8:4e:a4:16:05:07:41:cd:31:
82:1a:36:f7:c4:3c:f2:39:19:60:23:e5:0a:f7:3e:82:59:20:
cd:e7:f2:c7:70:76:76:47:16:f9:e6:dd:45:a5:85:91:2a:a7:
4a:b5:00:ad:96:78:67:5e:57:e3:56:30:10:15:83:cd:9f:f2:
d7:06:37:51:fd:11:f1:ae:9a:8a:5e:d4:75:72:e8:fb:c8:9c:
01:1c:d7:52:65:4a:f5:82:cf:06:a3:cf:2d:1b:0b:25:02:c5:
68:92:01:08:09:1c:f3:b9:41:94:b2:8d:f0:67:b1:44:ce:fd:
33:da:c5:aa:fc:4d:71:81:b4:f4:a2:df:29:a9:a0:77:06:d8:
e4:6e:7a:c7:7b:53:4c:4a:f2:fd:95:78:fd:48:28:d3:c0:be:
d6:8f:54:02:c9:99:f1:a5:3f:cd:8d:57:f3:73:78:e0:ee:8a:
10:89:a1:4b:9d:ef:ad:89:7d:da:c3:e5:00:9e:a3:32:f6:39:
06:35:65:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 16:46:41 2025 by rpki-client