Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/S5XJ9zx7HYeXg9bNnvXQMI4v9dU.roa
File: S5XJ9zx7HYeXg9bNnvXQMI4v9dU.roa (raw, json)
Hash identifier: t3SCJKbDlU/Z/gX0Uhk06l8l5C2S0ibyQYGNoM9ie/I=
Subject key identifier: 4B:95:C9:F7:3C:7B:1D:87:97:83:D6:CD:9E:F5:D0:30:8E:2F:F5:D5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7AFC7CB7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/S5XJ9zx7HYeXg9bNnvXQMI4v9dU.roa
Signing time: Wed 13 Apr 2022 16:10:45 +0000
ROA not before: Wed 13 Apr 2022 16:10:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2063367351 (0x7afc7cb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 13 16:10:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4b95c9f73c7b1d879783d6cd9ef5d0308e2ff5d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a9:77:7a:91:4e:3c:5e:f9:59:05:e9:5a:21:
be:45:ac:3f:f6:de:8a:eb:93:df:ef:80:f9:fd:e2:
02:94:ef:54:a4:09:66:ab:77:8c:cb:e3:54:f4:13:
14:71:03:31:aa:85:c2:e5:96:b7:1b:56:2b:f7:bd:
cf:54:b3:31:9a:24:20:67:4b:c0:94:ba:f8:24:4e:
9b:ed:96:9c:07:5c:e6:63:6e:67:8b:20:ce:77:60:
89:10:ba:b7:72:c7:a3:d0:48:2f:98:ef:dc:ee:1f:
5c:a2:38:bb:72:e8:0f:ae:3e:b6:a7:34:7a:a9:b0:
11:2b:79:3c:5f:2c:a1:67:3f:4f:88:64:e8:22:c8:
bd:34:89:62:6d:26:82:e2:8c:30:9f:fa:36:38:a2:
ea:fa:1e:48:c9:f6:2f:d9:5f:9d:8b:20:c0:99:c7:
87:df:69:d0:7b:c1:30:e1:da:2f:45:bc:09:60:e2:
d9:6e:3d:ac:22:16:ee:68:d5:21:37:45:cf:3b:d6:
02:1c:ef:37:71:97:7c:36:8f:f3:61:a8:ea:97:cc:
af:97:13:77:b5:e0:de:f2:12:c6:6b:3b:cc:21:f1:
c7:f3:2f:03:a7:bb:55:c4:f7:da:7d:bf:07:a9:02:
f2:da:51:e3:05:47:9c:4d:e4:aa:b0:b2:f0:3e:cc:
97:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:95:C9:F7:3C:7B:1D:87:97:83:D6:CD:9E:F5:D0:30:8E:2F:F5:D5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/S5XJ9zx7HYeXg9bNnvXQMI4v9dU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8f:02:87:3c:a8:d3:0d:94:3b:ef:c3:a2:9f:da:e7:9a:7e:5c:
65:5e:b0:61:10:49:1c:dc:64:a1:37:b9:4a:ef:17:75:29:bc:
05:75:ba:4e:f4:07:cd:2a:86:62:bc:9f:6d:4c:f2:7b:34:0b:
12:88:9e:08:e4:71:5a:bd:9b:23:e1:ac:49:eb:33:ac:0e:3a:
21:98:74:1b:e5:ca:97:19:2b:68:a9:2d:ac:dc:9b:d5:8c:71:
df:86:34:76:e3:5d:5b:80:ac:83:5c:c7:b6:68:8e:b8:f5:98:
ef:00:62:12:14:dc:5d:22:77:bf:93:b7:98:de:08:e9:e4:18:
11:97:d9:bc:70:44:9b:80:6d:ab:cf:6f:03:e0:08:ea:5d:83:
05:b2:61:f3:c5:6c:1e:d0:c9:5e:69:f3:50:dd:30:16:58:f5:
c6:cd:aa:ff:71:6e:f2:82:e2:11:8a:f6:9a:a9:85:49:18:6d:
43:e7:72:95:7b:0b:b6:4e:34:ad:b7:6d:84:67:7e:46:22:ef:
b2:fe:0a:53:f3:64:4b:84:a6:ff:0a:8f:0f:0a:d9:93:dc:fa:
86:04:1d:a8:92:81:45:d8:ff:4a:26:f0:a5:c9:5c:c6:77:c0:
42:93:26:9f:e2:a4:5d:29:a0:da:9b:41:0a:36:a4:d9:d3:1b:
8f:7b:2d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:11:22 2025 by rpki-client