Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R_ehamyDNiaZ9H7RHg5-ymGslEY.roa
File: R_ehamyDNiaZ9H7RHg5-ymGslEY.roa (raw, json)
Hash identifier: L4ZqSwV0m9xvvAqPvMS21pOaOZVo7xniRuV3TSdJJso=
Subject key identifier: 47:F7:A1:6A:6C:83:36:26:99:F4:7E:D1:1E:0E:7E:CA:61:AC:94:46
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 710775FF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R_ehamyDNiaZ9H7RHg5-ymGslEY.roa
Signing time: Wed 09 Mar 2022 12:10:47 +0000
ROA not before: Wed 09 Mar 2022 12:10:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1896314367 (0x710775ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 9 12:10:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=47f7a16a6c83362699f47ed11e0e7eca61ac9446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cc:71:cb:bd:70:c1:ae:b0:86:b6:d6:74:59:
da:c3:18:95:71:b5:bf:be:c1:2f:70:83:31:3b:98:
cb:39:01:1e:4b:c3:40:d4:68:f6:69:10:17:f8:6d:
41:68:e6:fb:61:13:3d:76:ef:f5:a8:42:f9:e0:69:
44:16:7e:49:18:d0:48:4d:e8:04:22:8e:9d:6d:d7:
e6:d3:5e:b6:f2:a2:52:f1:f4:16:01:ff:4a:81:22:
7d:80:05:38:13:64:71:a1:10:ff:41:a4:01:fc:01:
68:5d:62:41:c4:6b:37:87:ec:6d:c6:74:2e:85:c7:
d6:6b:d4:20:da:d0:c1:95:cd:0f:e4:3d:a8:9e:b7:
2a:df:cd:78:c1:29:9f:be:90:74:c4:31:ef:03:ea:
59:24:3f:a4:f8:e5:3b:0b:ac:15:95:37:90:54:88:
f3:48:c7:98:3d:4b:e4:a3:a3:93:75:30:2b:c1:9e:
fc:61:e0:f9:f0:d6:a8:09:7a:e3:c4:89:14:c5:39:
d9:45:6f:97:a1:38:2b:21:e9:cd:ed:59:80:7a:6e:
87:0f:a8:f0:b6:ed:d9:c9:f5:f6:a7:3b:4e:df:24:
57:b6:8e:07:1d:f8:55:d4:f6:c9:9e:75:8f:3e:8f:
ae:79:3a:23:d3:e1:c8:e4:0a:4b:82:59:98:21:6c:
e4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F7:A1:6A:6C:83:36:26:99:F4:7E:D1:1E:0E:7E:CA:61:AC:94:46
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R_ehamyDNiaZ9H7RHg5-ymGslEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4b:bf:47:b6:2e:02:8d:ab:61:41:de:ce:d2:6a:65:22:32:d7:
09:de:24:5e:e9:05:48:dc:4a:ef:45:30:5c:63:09:dc:38:8d:
92:78:41:79:36:1e:e8:f2:70:c2:d6:ca:54:09:16:ca:05:ce:
02:96:2c:4a:6a:cd:da:cc:61:74:51:e8:d0:f7:d3:59:24:52:
1d:17:59:22:3a:ea:d3:97:ef:30:0b:2c:cf:71:71:c3:1d:db:
3a:8b:78:99:e7:bc:77:c1:e4:0d:b7:ed:85:53:db:67:c8:50:
f6:1a:f6:95:b4:36:c6:ad:de:17:24:d4:41:7e:f7:36:8d:29:
29:60:69:66:28:62:92:2d:1a:24:6e:d8:50:75:8e:2c:fd:93:
cb:1a:8a:70:f4:a2:bc:8c:ee:31:b8:bf:ff:44:72:7c:82:1c:
4a:bd:27:22:d0:df:a2:98:29:db:51:07:74:10:43:a7:68:15:
83:9c:7c:96:54:17:41:43:81:f9:f5:e1:66:ce:37:4c:75:cd:
b2:65:3c:40:95:0f:d2:7a:28:e7:f7:e2:96:41:ea:f1:ba:f7:
cf:5c:1c:ee:64:6a:94:ab:72:fb:42:ac:54:aa:c2:73:ca:d3:
e6:5a:b8:80:b9:ae:b7:d3:ed:0d:41:86:b5:66:6b:88:73:7f:
28:4f:d7:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:53:15 2025 by rpki-client