Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Sx1dNEdQv0FOYqadqhxwoYWG7iI.roa
File: Sx1dNEdQv0FOYqadqhxwoYWG7iI.roa (raw, json)
Hash identifier: K/UK7QATbaZj2fC5ZWzS4vW7DBXowJF67ufDqpnPc2I=
Subject key identifier: 4B:1D:5D:34:47:50:BF:41:4E:62:A6:9D:AA:1C:70:A1:85:86:EE:22
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181D1B59A710CE320EF7BF619F1DBEDBBFD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Sx1dNEdQv0FOYqadqhxwoYWG7iI.roa
Signing time: Wed 06 Jul 2022 04:12:28 +0000
ROA not before: Wed 06 Jul 2022 04:12:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d1:b5:9a:71:0c:e3:20:ef:7b:f6:19:f1:db:ed:bb:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 6 04:12:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4b1d5d344750bf414e62a69daa1c70a18586ee22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e4:d2:59:8b:2c:2d:9f:43:f2:f1:18:eb:1a:
45:3d:fb:7b:3c:24:34:70:20:64:ee:8b:aa:ee:12:
d0:97:a1:6e:ee:a7:b8:4e:23:a9:09:50:df:b3:61:
7f:af:bf:05:ba:c7:30:33:e2:c8:28:d9:9f:f0:80:
64:9e:93:f2:d5:99:ef:79:67:a5:44:1f:db:9b:0c:
3b:61:3d:b5:f8:87:59:ed:ae:47:bd:15:34:cf:4e:
22:07:a5:a6:15:d6:eb:ee:32:a3:3b:ac:02:26:44:
97:9c:b8:4d:54:f7:f3:ed:bd:15:a2:d4:aa:19:07:
1d:6f:a8:30:d4:a9:83:5e:4f:a5:bc:5b:b0:6d:40:
30:5d:cc:24:3f:1a:50:d4:da:e2:bd:9a:2d:e3:34:
92:97:56:db:23:00:af:c5:2b:08:38:96:bf:99:c1:
bf:37:ee:43:d1:95:e2:5f:4c:a2:db:ab:af:76:0d:
7e:90:60:42:40:f8:20:48:92:89:c3:3e:b5:6f:1d:
85:23:48:b5:60:d8:13:a2:a5:a0:22:28:5c:ba:a8:
c0:76:47:77:58:42:94:6f:44:5c:b0:c9:a4:c4:07:
65:39:2f:d5:df:30:2c:de:92:39:26:23:65:4a:be:
a1:52:77:7f:07:42:00:e7:19:60:bd:df:2f:15:0e:
28:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:1D:5D:34:47:50:BF:41:4E:62:A6:9D:AA:1C:70:A1:85:86:EE:22
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Sx1dNEdQv0FOYqadqhxwoYWG7iI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0c:39:c6:ab:ee:7f:24:20:c8:19:b0:01:b5:3b:3b:4f:94:0c:
49:67:0b:3b:9c:25:82:0a:5c:73:38:ee:35:3e:6f:af:63:26:
96:b0:3b:51:d9:ce:11:89:59:27:b9:61:9d:07:4b:02:1a:c4:
08:58:0d:82:71:f7:87:8a:b4:5f:aa:e0:b2:45:04:ff:8c:9b:
f8:ab:1d:ab:0a:6f:d4:41:cd:d3:c7:b7:24:6b:c6:96:e5:dc:
43:fa:2b:f5:c1:d0:4c:9a:8c:f8:7a:ff:51:48:0f:9e:c6:d9:
33:a8:4c:01:b8:e5:3e:38:0c:64:27:4f:e6:31:a0:dc:b5:ff:
08:9e:63:6a:7e:46:f2:6b:fc:12:9f:3e:b7:b1:45:f3:d1:b4:
eb:1b:39:88:46:3d:e2:0d:92:6a:10:6d:96:ae:5a:2f:27:33:
96:e5:df:36:60:42:eb:c9:94:ff:e9:6b:e6:14:47:4e:a8:e8:
b0:84:3b:91:5a:e5:d2:e7:b3:cd:48:dd:d7:e2:a0:b5:b5:52:
03:54:90:aa:94:78:1c:80:67:86:09:bf:fa:d9:0b:b3:e7:64:
8e:f3:4d:f4:a8:d1:c1:3f:cd:f7:8c:30:01:38:a2:a6:30:ee:
59:de:ca:d5:eb:a6:0b:b9:ab:b4:d9:7d:81:d6:60:ed:4f:43:
ae:cb:71:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:34 2025 by rpki-client