Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RNtirmx1ElgaMsJkW7PcnDy03HA.roa
File: RNtirmx1ElgaMsJkW7PcnDy03HA.roa (raw, json)
Hash identifier: 0ljwxx4khHx2fFsFdDbFn6bBw648oWRvrLp4XKrCK1w=
Subject key identifier: 44:DB:62:AE:6C:75:12:58:1A:32:C2:64:5B:B3:DC:9C:3C:B4:DC:70
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183E9E8CD57E90CBF2F3660701BE4367F05
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RNtirmx1ElgaMsJkW7PcnDy03HA.roa
Signing time: Tue 18 Oct 2022 07:04:51 +0000
ROA not before: Tue 18 Oct 2022 07:04:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:e9e8:5bc7/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e9:e8:cd:57:e9:0c:bf:2f:36:60:70:1b:e4:36:7f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 18 07:04:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=44db62ae6c7512581a32c2645bb3dc9c3cb4dc70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b4:cf:8c:8a:4c:50:68:05:c0:13:56:ad:09:
2b:68:6b:32:ce:fc:15:26:8b:bb:20:30:5f:e4:47:
85:70:63:5b:6e:84:6e:36:4a:d8:c9:15:e5:72:a3:
62:29:e2:3e:c1:f3:00:e9:3e:e6:1a:5d:d8:5d:e7:
6a:57:60:21:59:cb:ed:43:8a:c0:54:13:17:19:30:
8a:2a:b9:02:2b:08:22:24:4a:e5:f7:7c:ce:fe:42:
43:67:56:e4:c4:fb:25:27:8e:2a:2f:2f:81:b3:57:
b8:c2:7d:4f:25:28:a1:34:db:8c:f4:f1:62:51:73:
a6:70:15:53:57:98:db:bf:72:48:c3:d6:05:aa:6d:
56:d6:9b:96:b4:5b:bb:8a:ca:c0:12:14:b8:6f:cc:
54:ae:d2:09:de:1f:44:0e:cf:0f:ae:be:24:dd:31:
88:de:b3:9c:57:3e:be:7b:42:d1:a3:45:c4:0a:ff:
a0:88:26:81:2e:d0:7f:69:9d:35:91:7e:7b:8f:1a:
eb:84:7e:12:fa:07:f4:5f:67:96:5f:74:63:7e:82:
f9:f6:e9:e4:6b:43:02:21:36:29:aa:05:da:97:6f:
24:59:73:c5:5f:9a:c4:70:eb:a5:46:a4:1c:80:e5:
1f:1c:3f:f9:10:0a:fe:34:c6:43:d7:8a:91:49:f5:
55:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:DB:62:AE:6C:75:12:58:1A:32:C2:64:5B:B3:DC:9C:3C:B4:DC:70
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RNtirmx1ElgaMsJkW7PcnDy03HA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
35:54:7f:6d:0c:32:f6:4d:eb:b1:90:3e:ac:1d:bf:1d:ec:b5:
f9:ca:fb:48:82:ee:12:f9:02:3f:ce:9c:8d:56:fd:92:b9:41:
17:1d:72:b6:19:b7:02:6c:1f:46:ea:18:ee:66:61:b9:46:e4:
62:73:a1:00:00:ec:12:30:7c:e3:e8:99:58:f1:9c:64:e3:9e:
7f:2f:eb:44:29:d1:36:dc:9d:13:e4:50:60:29:f9:9a:5c:45:
e4:74:a9:eb:82:b2:85:88:0c:85:4c:81:72:04:63:95:d2:18:
b5:8b:45:6d:0a:af:0a:88:ce:78:ea:89:7f:75:7b:3a:af:ff:
e1:b9:f8:54:60:ec:86:82:cf:2e:d4:e7:cf:f1:2e:19:7f:ae:
af:60:96:12:31:1c:60:fc:47:99:ac:cc:3a:28:77:81:c6:1a:
a4:3f:13:a5:62:42:e2:2a:38:83:a3:fd:30:ac:d0:e0:97:d5:
4e:82:d9:c2:ae:73:63:be:82:f5:02:ef:14:d7:74:90:ab:ff:
83:89:c7:fa:28:9b:ca:3c:16:5e:bd:d7:f4:f1:9a:15:bf:a8:
8e:85:bd:dd:1f:5b:b0:56:39:a7:33:7d:4f:44:c8:d5:23:dd:
ea:e1:d4:d5:74:d5:09:57:42:05:7a:c8:a7:a2:09:5a:81:8f:
8b:b9:6c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:17:11 2025 by rpki-client