Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/S4ZCGIk4aK0dsOHvGkjllxbvzGo.roa
File: S4ZCGIk4aK0dsOHvGkjllxbvzGo.roa (raw, json)
Hash identifier: zygWYCcEV7KBVtyBDWvbnnWz1ho7uiy8uIJgXHNA2Og=
Subject key identifier: 4B:86:42:18:89:38:68:AD:1D:B0:E1:EF:1A:48:E5:97:16:EF:CC:6A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6FA35A96
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/S4ZCGIk4aK0dsOHvGkjllxbvzGo.roa
Signing time: Fri 04 Mar 2022 16:17:24 +0000
ROA not before: Fri 04 Mar 2022 16:17:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1872976534 (0x6fa35a96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 4 16:17:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4b864218893868ad1db0e1ef1a48e59716efcc6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:09:ba:26:02:19:47:4c:80:ab:81:4c:e8:06:
24:fa:f2:1c:df:09:68:57:b1:f9:26:f4:ba:60:38:
ef:6a:03:72:e2:b7:65:11:53:08:3b:b2:9f:cc:a5:
6d:2f:2c:1a:00:ea:da:9b:27:23:a5:1a:85:84:29:
d3:4e:5f:4e:e0:a6:28:db:6b:d5:23:99:d0:7b:95:
d6:e8:52:9d:28:c8:b7:70:75:46:db:00:e2:ef:2d:
df:1d:b0:51:98:4b:ea:e0:00:75:1a:67:88:30:22:
3d:0a:d8:aa:7f:bc:96:dc:7a:28:b0:28:55:b1:10:
57:26:ca:e0:39:a5:40:27:4a:61:36:ef:fc:0c:14:
88:3a:ac:9e:8a:52:cc:58:28:52:88:bd:4d:56:93:
be:8e:b8:fb:51:f5:29:2b:ed:ee:87:49:3f:e7:04:
dd:b1:64:f4:07:9c:a8:4c:52:f6:ff:20:fb:09:fe:
83:84:a6:23:33:9b:bf:e5:eb:92:ac:69:2f:7c:1e:
18:d3:63:3e:52:8a:fc:09:5a:d7:b5:c0:46:76:49:
f1:0e:f2:5c:27:79:fd:a9:1c:05:7f:30:87:84:af:
88:85:d4:c9:93:38:70:f2:27:10:ea:3a:32:11:58:
af:e0:04:d5:71:d2:95:77:e9:90:86:33:ba:a9:68:
e8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:86:42:18:89:38:68:AD:1D:B0:E1:EF:1A:48:E5:97:16:EF:CC:6A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/S4ZCGIk4aK0dsOHvGkjllxbvzGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7b:7e:0b:73:e7:13:46:80:44:1b:78:96:45:c7:32:30:63:a2:
0f:5d:68:5f:1a:26:32:a3:e5:bc:d9:a5:cb:2f:ef:7d:bd:26:
6b:d2:ac:fa:97:6c:d0:96:19:e9:69:56:32:40:74:3f:ae:50:
33:a6:1a:52:69:18:b1:78:0a:59:63:76:d3:1f:5a:76:98:be:
d9:5c:12:6f:46:e0:f8:7b:a4:d9:62:25:f6:75:9d:a6:f6:59:
b7:f2:23:da:c0:e5:eb:46:0b:f2:2b:e7:53:38:f8:73:ab:cf:
ea:d6:5d:3c:b0:f3:2e:79:70:16:13:81:89:a7:84:7f:be:bc:
dd:53:77:0d:c0:82:db:f9:95:40:09:ba:b1:03:ec:e6:dc:f4:
94:1b:b2:eb:dc:25:1e:76:7e:ce:27:21:81:d1:f1:fb:38:ec:
fc:9e:e1:d4:2d:54:0c:9c:81:c2:6e:9f:b0:25:f6:38:55:4a:
1d:45:f7:43:3a:c2:29:09:08:d3:42:d8:56:3c:c2:a8:28:f2:
38:33:3b:01:4a:f6:a8:d3:1a:b1:3d:3e:1f:13:c2:49:3e:8f:
56:ac:1f:7f:54:01:a9:c2:35:01:00:13:30:12:3b:ed:69:be:
05:e1:e6:f7:45:3a:2b:85:67:bc:59:fa:f0:df:f2:5c:a7:0b:
1f:55:5c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:03:01 2025 by rpki-client