Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SdXvvrgTbcQK4PSa_dqnBCTh3v8.roa
File: SdXvvrgTbcQK4PSa_dqnBCTh3v8.roa (raw, json)
Hash identifier: lIFMexE2R74y7zXFA6ToD/GTZreMHOMTpBVBYSkpFxI=
Subject key identifier: 49:D5:EF:BE:B8:13:6D:C4:0A:E0:F4:9A:FD:DA:A7:04:24:E1:DE:FF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182BECA7AEF54D7F2D2CA8D67F90B7199F1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SdXvvrgTbcQK4PSa_dqnBCTh3v8.roa
Signing time: Sun 21 Aug 2022 05:05:16 +0000
ROA not before: Sun 21 Aug 2022 05:05:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64:ffff:0:182:bec9:8dc3/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:be:ca:7a:ef:54:d7:f2:d2:ca:8d:67:f9:0b:71:99:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 21 05:05:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=49d5efbeb8136dc40ae0f49afddaa70424e1deff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a3:b2:8f:22:9f:ec:6d:79:b2:e4:9e:8d:d7:
67:e1:5e:af:50:63:02:23:5b:70:59:85:55:10:24:
b3:ab:37:94:90:5e:39:69:16:71:18:7e:8f:72:34:
3b:42:a2:6b:b9:01:43:15:29:af:b8:4c:00:47:28:
72:77:64:da:09:90:dc:75:f7:75:5c:4c:92:bd:e1:
4a:7b:86:27:e5:9d:b4:ff:8b:43:2b:a6:da:4d:7a:
59:18:d5:f1:3d:ee:ae:47:2d:9e:15:32:14:5a:d4:
c9:cb:58:0e:ec:96:f5:ee:ec:18:75:ba:66:aa:d1:
fd:61:2e:aa:91:40:93:95:78:df:8f:05:e6:af:86:
47:e5:93:b9:0d:03:c0:e0:c5:71:1d:ea:d5:2e:06:
d1:85:be:7c:29:de:61:49:06:5c:0b:15:88:c9:11:
87:12:be:5b:41:8a:2a:40:2d:77:3a:0b:9b:10:84:
11:d0:1f:81:6b:21:7a:36:fe:f6:1c:d6:1e:3c:ea:
fa:f7:0d:0a:7d:47:cf:7e:90:fa:82:29:3f:77:33:
27:83:55:e6:ac:f0:94:2d:df:ae:9b:6b:3c:70:0c:
77:91:e6:de:81:92:34:08:01:5b:0d:c1:7f:93:7d:
fc:dc:27:dd:65:3e:e3:60:0b:98:96:74:d2:90:57:
8f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D5:EF:BE:B8:13:6D:C4:0A:E0:F4:9A:FD:DA:A7:04:24:E1:DE:FF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SdXvvrgTbcQK4PSa_dqnBCTh3v8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
78:4b:94:d6:1f:07:ea:c4:74:61:33:25:3d:33:fb:e5:f5:88:
de:83:fe:95:d3:85:0f:75:e2:92:28:25:42:e3:6f:11:34:db:
23:01:42:71:8d:22:7b:79:05:c4:82:14:2b:55:be:20:f4:f9:
24:ca:86:74:4a:72:34:75:12:fc:5d:6b:f0:43:30:26:a6:f6:
8a:3e:26:2a:50:32:26:10:86:48:85:fd:0a:54:66:6c:bf:ee:
a8:68:b1:84:29:cd:38:cf:3e:b6:a5:a0:c7:68:21:68:b5:3a:
61:e3:8e:39:04:f7:27:9c:ae:95:fe:07:a3:6d:77:14:f9:10:
03:3f:1e:36:38:fb:62:8f:38:31:e9:1e:d6:01:01:56:7f:ce:
9b:8e:de:6a:ae:2a:32:b6:4a:42:41:56:8c:a6:24:91:79:bc:
9e:13:3f:89:e1:40:48:5b:c7:70:45:31:e2:ae:af:ff:a8:d0:
3e:69:78:19:cc:77:d3:4d:bb:4c:e3:88:12:e8:de:65:f9:e5:
60:06:53:4d:90:41:da:5e:9c:b5:53:d4:f9:1d:7a:08:27:6c:
6d:45:98:fa:f3:ba:58:44:9f:8d:f2:59:55:a8:e6:cb:b4:5a:
4b:45:7d:33:12:98:65:cf:b6:65:14:69:11:e1:34:59:66:2c:
2a:ba:14:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:08:27 2025 by rpki-client