Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RzdgBsMf-4turryu9aFMoOqRPeA.roa
File: RzdgBsMf-4turryu9aFMoOqRPeA.roa (raw, json)
Hash identifier: jXW484xPloTuKmt9vIlD4X/iy1c7QuJ9vzffqFXhvWI=
Subject key identifier: 47:37:60:06:C3:1F:FB:8B:6E:AE:BC:AE:F5:A1:4C:A0:EA:91:3D:E0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7027A916
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RzdgBsMf-4turryu9aFMoOqRPeA.roa
Signing time: Sun 06 Mar 2022 08:12:22 +0000
ROA not before: Sun 06 Mar 2022 08:12:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1881647382 (0x7027a916)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 6 08:12:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=47376006c31ffb8b6eaebcaef5a14ca0ea913de0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cf:1e:d8:68:2a:29:5c:85:33:f2:e9:d8:67:
42:6d:67:ac:ff:79:06:6f:e9:a7:c6:bd:bd:9f:5c:
18:5c:18:88:ed:35:f1:f1:b9:56:fc:7c:b2:ad:ce:
46:a8:7e:9d:23:67:b9:8a:19:34:2e:09:88:31:16:
c2:23:44:69:48:e7:b2:f6:0e:37:47:e1:97:36:3b:
d0:c9:86:41:bc:92:fd:d7:0f:05:d7:5e:79:66:f6:
f7:98:68:6b:23:f5:e1:27:4b:7c:7c:cd:e0:17:d6:
26:45:fa:27:8c:a0:36:6b:d0:28:fe:af:77:65:fa:
dd:06:4d:ba:9f:87:7e:f3:6b:c4:07:c1:ea:d0:81:
ec:20:fb:40:e8:c4:0d:12:e7:fa:8b:8a:1c:4e:fc:
4e:95:2e:2c:38:74:0a:b0:42:ce:b0:96:0f:fe:19:
55:a7:51:04:77:5c:ed:e7:e6:ea:14:b8:d8:41:19:
45:90:40:5a:ee:ab:64:bd:25:82:bd:3b:ee:81:8d:
5e:01:27:61:e3:57:d0:3b:49:4d:e9:e2:bc:24:89:
ad:92:d1:aa:b5:e3:38:1f:a7:5b:45:9f:24:6f:e7:
3b:d6:44:ba:9a:2b:25:39:29:25:57:3a:a0:e3:1f:
2e:be:94:fc:b1:6a:a8:73:58:fd:e4:da:2a:d7:cd:
4a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:37:60:06:C3:1F:FB:8B:6E:AE:BC:AE:F5:A1:4C:A0:EA:91:3D:E0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RzdgBsMf-4turryu9aFMoOqRPeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
42:ba:62:86:be:4e:78:1d:ba:c6:55:32:56:42:1f:32:08:51:
00:01:8f:45:2c:75:f0:03:77:a0:f8:9f:74:c1:42:32:2b:5b:
92:8f:4e:29:18:47:43:50:ac:c4:d9:e7:bb:06:8d:89:43:24:
cc:b1:ff:6a:53:2d:ab:fc:8a:a2:50:4c:94:6e:76:69:ed:cc:
cc:a4:5e:7f:8e:13:54:cc:1c:49:4a:44:b4:5e:ae:ca:30:c4:
d6:00:41:f6:92:b3:99:7c:9f:7b:7f:21:41:18:a9:59:ae:a9:
51:27:7e:69:c4:ab:d3:fe:8e:b9:39:47:1f:a8:8f:e9:85:cc:
c0:96:a1:68:7f:43:49:76:e8:2b:43:68:f3:67:56:e8:8b:fc:
37:01:82:c6:28:3e:8c:10:27:00:5f:a7:96:3a:9c:95:12:9f:
5c:0f:7f:df:14:08:5e:85:c7:d0:f4:9c:04:71:a0:5c:a7:a7:
db:15:bb:cf:9c:7e:90:75:89:96:bb:2d:13:99:ed:df:0a:46:
7f:e9:1c:21:83:9d:36:07:d3:6b:67:17:05:60:24:f9:31:b3:
ef:66:b3:34:c6:72:5b:b5:8f:4e:98:10:ec:1f:3c:b4:2a:92:
92:a7:cf:e6:0b:75:b8:4e:f3:0a:c3:59:6d:a5:5e:51:5e:38:
87:88:2f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:15:13 2025 by rpki-client