Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/S-uEb_mAsYVsHa_K0v2A7W2G744.roa
File: S-uEb_mAsYVsHa_K0v2A7W2G744.roa (raw, json)
Hash identifier: w/MnDVuTtUr8FIfuBDkHUAe3GEOLhV2EMbwGZP6q1yY=
Subject key identifier: 4B:EB:84:6F:F9:80:B1:85:6C:1D:AF:CA:D2:FD:80:ED:6D:86:EF:8E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01852824C013C675B1D86FD720FA6F104574
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/S-uEb_mAsYVsHa_K0v2A7W2G744.roa
Signing time: Mon 19 Dec 2022 02:09:35 +0000
ROA not before: Mon 19 Dec 2022 02:09:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:28:24:c0:13:c6:75:b1:d8:6f:d7:20:fa:6f:10:45:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 19 02:09:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4beb846ff980b1856c1dafcad2fd80ed6d86ef8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a2:00:fa:78:24:d2:1a:a2:9f:35:48:8c:06:
fc:6e:f1:f1:fe:9b:e0:c9:08:e8:cd:7a:1a:84:26:
03:98:c5:90:bf:01:f6:f7:be:35:5a:cf:21:04:49:
da:cb:ee:f9:29:65:9b:d8:23:db:21:1f:84:af:86:
66:d6:f9:e3:3e:e5:bb:d3:b3:bb:02:5e:3a:63:53:
ee:d2:ad:9d:96:83:6d:35:9f:19:35:b3:65:7c:9a:
a5:75:f8:40:14:1f:67:a7:b1:76:34:ff:f9:5d:d3:
f3:6d:bd:9d:dc:02:a6:eb:9e:96:67:02:68:b1:1c:
8d:ea:a8:1c:ca:5e:d1:a3:76:0e:08:f7:2d:89:2e:
a2:23:99:76:96:a3:03:eb:68:23:2a:c8:67:06:e1:
4f:d5:a9:30:f0:16:72:05:d7:38:f8:67:8a:48:5d:
fc:25:56:3e:af:de:df:76:24:62:d1:a0:e4:52:09:
ff:c7:93:9f:ec:0b:af:e3:cb:c6:5b:ea:4c:1e:19:
a6:6b:e9:59:59:a7:c2:1a:79:7d:ea:55:3f:ca:12:
4b:5e:5d:37:cd:7a:22:bd:73:56:3f:43:9b:fa:c8:
28:3f:e1:9a:fe:23:42:6b:ff:90:d4:8a:ae:11:6c:
7c:62:e2:c8:3c:a3:82:a6:85:b0:dc:72:0a:0c:df:
22:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:EB:84:6F:F9:80:B1:85:6C:1D:AF:CA:D2:FD:80:ED:6D:86:EF:8E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/S-uEb_mAsYVsHa_K0v2A7W2G744.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2b:6f:2b:68:37:30:9a:b8:da:57:9d:4d:9e:46:34:0a:f2:90:
8e:51:c7:fb:05:b2:21:31:17:c3:0f:3a:b5:0e:3c:54:9f:2c:
cc:65:dd:eb:99:fc:ca:0d:3f:0d:e8:a2:9a:0e:2f:43:ca:ee:
cd:ce:3e:55:47:df:ed:a4:f0:c6:33:e7:32:2b:19:bc:c2:4f:
41:8a:ca:96:97:53:75:7b:a3:84:e3:ac:78:ec:92:75:6f:a6:
60:1f:15:fc:c0:4c:46:45:52:48:80:e4:90:e5:a7:10:e8:f2:
c2:64:27:58:ff:c5:db:2c:ca:a1:8e:64:0d:26:36:2f:32:15:
9c:91:8f:c2:0a:e3:15:a4:44:ca:30:8c:6e:9f:c6:01:29:d8:
3d:25:d5:81:80:c1:50:59:36:06:39:e1:cd:23:8b:84:4f:bb:
01:00:23:87:b6:09:d9:68:2d:16:ab:fd:b3:12:c0:b6:4f:fb:
90:7f:de:77:ff:a6:e5:c6:6c:e5:a2:0b:85:95:97:10:ea:14:
e6:db:7c:dd:29:b2:85:fd:c5:b0:cd:46:46:32:2a:85:6c:8a:
3f:a4:a4:95:12:56:c7:13:64:5b:ac:ef:fa:0f:6e:ee:4a:e6:
b1:50:d0:8b:f8:cf:ee:14:77:85:ba:70:fa:d8:56:c5:2c:1e:
10:cb:8a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:18:05 2025 by rpki-client