Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ror-p6JjJOTkQUToE5cAl314npk.roa
File: Ror-p6JjJOTkQUToE5cAl314npk.roa (raw, json)
Hash identifier: YMHD1eshvz1YcOtIRhCStxCkh+D5xiaMJ5rhNPURC0Y=
Subject key identifier: 46:8A:FE:A7:A2:63:24:E4:E4:41:44:E8:13:97:00:97:7D:78:9E:99
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01854DEAA8ACFB60C13D1BB8F5FA9903DDDF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ror-p6JjJOTkQUToE5cAl314npk.roa
Signing time: Mon 26 Dec 2022 10:11:42 +0000
ROA not before: Mon 26 Dec 2022 10:11:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:4d:ea:a8:ac:fb:60:c1:3d:1b:b8:f5:fa:99:03:dd:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 26 10:11:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=468afea7a26324e4e44144e8139700977d789e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:68:49:93:74:e5:d7:8a:a5:dd:60:ee:7e:99:
55:70:05:00:22:06:50:46:08:b7:d5:33:f8:19:40:
12:ad:fe:f8:c6:8a:26:aa:54:73:fa:79:12:44:89:
71:26:b4:9e:86:d6:bf:8b:21:7a:06:f6:ad:fd:0f:
b6:45:5d:b2:71:14:bf:66:8e:bb:44:15:27:17:11:
7f:6a:ea:38:86:cf:9b:96:1c:17:80:10:88:a2:47:
f3:f6:16:bb:16:60:02:43:d6:23:12:e2:73:ec:31:
69:55:b5:b9:55:13:cc:4b:3f:1d:84:e8:3c:52:23:
56:72:bf:e0:0a:a1:75:84:d1:bf:6a:62:1a:b9:4f:
59:a4:84:37:71:92:55:b5:08:48:45:35:88:dd:f4:
ec:ae:ff:8b:76:ba:58:36:82:f7:60:10:d2:14:c3:
35:67:e9:dc:ca:76:ed:84:f5:54:6e:32:a8:2c:f1:
ca:15:83:be:91:43:75:0a:bd:74:86:e0:ee:2f:b5:
06:10:f2:8d:2b:2b:ff:9a:fd:e8:b6:f4:52:44:48:
50:6a:6a:83:b3:09:50:94:4e:80:df:9d:8c:c9:ec:
fe:74:9d:4d:65:b1:4c:1b:5a:ff:83:1a:77:d8:6e:
15:bb:0d:55:d3:c1:c8:64:c6:86:66:df:7d:35:8d:
b8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:8A:FE:A7:A2:63:24:E4:E4:41:44:E8:13:97:00:97:7D:78:9E:99
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ror-p6JjJOTkQUToE5cAl314npk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
55:c0:b6:05:15:c5:91:7a:71:90:16:96:52:88:da:6a:b6:98:
ca:1f:05:45:01:a8:fb:1b:c2:1f:f8:c8:ff:c8:63:ff:b3:52:
40:50:16:a1:bf:b3:cc:e2:c1:1b:74:71:7d:20:0e:f4:a5:8a:
fa:48:8c:30:88:d1:de:c3:5b:45:bb:45:11:4d:e6:c7:1a:7d:
0c:53:d2:c9:12:79:e1:bd:a3:ce:97:bd:3a:33:78:30:91:86:
70:62:a8:06:3b:e0:fb:22:2b:fc:1f:7c:4f:15:11:26:95:85:
5b:b1:8e:e2:33:4f:55:56:b6:9a:3a:f5:91:2f:0f:37:61:32:
e6:e7:30:9f:00:43:a4:8f:13:56:f1:26:e8:cc:cb:68:cc:a8:
0e:71:bb:9c:dc:3c:bc:20:af:3a:8e:0a:df:46:0a:e2:4b:d7:
52:2d:91:12:f7:e6:62:3d:46:65:97:7d:6f:7b:2e:13:27:8b:
52:6d:59:dd:84:b5:01:9b:a4:41:f2:18:d8:6f:4c:d3:8c:89:
07:87:d6:9e:cc:6b:3b:bd:cd:88:29:05:67:0f:3a:2f:ec:10:
eb:50:02:d3:79:00:e3:1a:e9:3b:38:19:1a:1e:1a:12:9d:8b:
e9:1f:ad:e1:cc:63:4c:f6:7e:07:53:7b:5e:8b:aa:75:a9:29:
53:07:7a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:34:36 2025 by rpki-client