Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/S1zXrgBqgoIgbqtg1aQ3NseY5vQ.roa
File: S1zXrgBqgoIgbqtg1aQ3NseY5vQ.roa (raw, json)
Hash identifier: MFnX+NlIMncCcGvLj5oVPTh7aTpi8HCdL7W/X8/ZIoc=
Subject key identifier: 4B:5C:D7:AE:00:6A:82:82:20:6E:AB:60:D5:A4:37:36:C7:98:E6:F4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01854C2CC9BE92606AD79C31B1F7CFBE821F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/S1zXrgBqgoIgbqtg1aQ3NseY5vQ.roa
Signing time: Mon 26 Dec 2022 02:04:41 +0000
ROA not before: Mon 26 Dec 2022 02:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:185:4c2c:bf35/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:4c:2c:c9:be:92:60:6a:d7:9c:31:b1:f7:cf:be:82:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 26 02:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4b5cd7ae006a8282206eab60d5a43736c798e6f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:32:ec:20:75:b0:84:86:b1:12:1c:8f:c8:88:
a4:65:00:80:9b:7d:95:32:bf:fa:da:c7:38:e7:4d:
33:ed:0d:7e:35:14:5c:4a:ff:98:6b:31:f3:96:fb:
31:c3:40:b9:a3:36:01:b4:6f:2a:92:04:b1:ef:35:
4b:c0:dd:3d:68:66:f7:56:d6:42:28:75:78:fe:08:
7c:f1:d6:0f:e7:40:b2:e0:4f:b1:e1:67:ae:57:43:
1c:ce:b7:2d:86:8a:8b:8b:c9:e1:bf:28:af:a1:6c:
55:37:38:ba:d3:1d:3d:2c:bf:89:b6:c4:b6:b6:8a:
06:af:0c:3e:2f:24:c7:2a:27:80:9e:22:23:d4:66:
a0:ae:64:e3:1c:12:4e:12:88:06:ed:c2:19:93:92:
0f:33:09:e4:46:19:92:e4:5b:bf:b2:ea:a5:06:09:
9c:c8:90:b4:03:b7:6c:4c:db:c5:34:b4:27:e1:5c:
c3:d1:d1:fc:5f:3e:8c:44:b1:b7:ac:b0:d9:34:9b:
83:9b:94:1b:a9:48:c0:cc:dc:16:1a:48:f6:d4:a3:
66:bc:a9:fd:a7:6d:0d:43:44:f2:41:1f:93:12:91:
18:4d:7d:11:fb:72:22:57:8f:cb:10:f0:c1:a1:cb:
a9:71:75:d6:be:90:ec:d9:31:25:a7:56:0e:d3:24:
45:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:5C:D7:AE:00:6A:82:82:20:6E:AB:60:D5:A4:37:36:C7:98:E6:F4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/S1zXrgBqgoIgbqtg1aQ3NseY5vQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
12:bd:bf:95:63:1f:4f:fa:d4:97:da:dc:2b:9b:f2:6b:19:0e:
d8:19:cf:d8:04:06:e3:46:86:4e:b1:7b:f1:34:f4:f2:b8:ca:
eb:be:6d:63:85:ec:30:52:3e:dc:a8:5b:d1:74:f1:4d:8a:80:
47:3e:9c:01:18:4b:ad:92:80:fc:3a:27:e4:c0:60:f3:a9:37:
68:05:5c:08:5b:1e:dd:70:b3:09:b9:42:88:61:6b:91:4e:ca:
5b:37:ba:09:d6:81:96:2e:0d:31:2c:ae:06:74:6e:0f:66:3c:
24:94:c4:60:fb:b0:0b:c5:7b:92:d4:5e:91:85:6f:9b:fc:21:
10:75:bb:f0:92:f7:1b:5c:db:6e:ce:95:5d:a4:4f:f4:4d:f0:
8e:79:9d:37:c0:7d:9b:19:b5:36:a1:29:05:91:37:47:af:18:
66:e4:2e:9c:c5:bd:5d:22:90:74:60:3e:84:c5:b6:2a:a8:1f:
62:c7:f2:92:12:8b:46:6c:e3:ce:1b:bc:0a:5f:4a:37:46:14:
b1:7c:80:ac:e6:00:a0:de:42:fd:db:30:da:b9:fd:a5:2f:f3:
27:54:13:b8:0e:11:bf:65:8c:50:04:3f:e6:6f:25:65:9e:aa:
68:87:e9:9f:8e:66:d8:f9:5f:b1:f8:56:4d:04:ea:84:cf:4d:
5c:1c:02:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 20:27:34 2025 by rpki-client