Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/T1L2xNQ5FWmBTEN-iga4BBLHX_o.roa
File: T1L2xNQ5FWmBTEN-iga4BBLHX_o.roa (raw, json)
Hash identifier: C2tepD0wG6NzlSzPLJBn8pU7TSIIFSWS4bwVcoPMpjI=
Subject key identifier: 4F:52:F6:C4:D4:39:15:69:81:4C:43:7E:8A:06:B8:04:12:C7:5F:FA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183CA9853757CF1D49D8163A4F470A38B61
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/T1L2xNQ5FWmBTEN-iga4BBLHX_o.roa
Signing time: Wed 12 Oct 2022 05:08:43 +0000
ROA not before: Wed 12 Oct 2022 05:08:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:183:ca94:8bcb/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ca:98:53:75:7c:f1:d4:9d:81:63:a4:f4:70:a3:8b:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 12 05:08:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4f52f6c4d4391569814c437e8a06b80412c75ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f0:48:13:73:78:3e:74:3c:e7:a6:ff:52:3b:
07:39:47:f5:b0:dc:3c:19:75:13:c7:8a:72:be:b8:
91:82:e9:44:dd:d6:14:78:39:c7:4f:3a:b2:16:69:
83:e2:b8:53:c1:8a:5e:c7:65:32:fe:68:6e:33:89:
59:c1:92:7f:80:80:09:45:27:f6:70:53:eb:83:85:
95:b1:49:c0:46:d9:2a:8b:ed:da:72:f0:a1:71:eb:
a4:3b:35:2a:41:c1:61:48:49:33:fd:65:79:17:2c:
58:7e:63:54:13:c6:9d:fa:fb:e7:41:cd:9c:78:27:
e0:87:3a:f5:56:76:46:13:d0:2c:f3:6b:10:92:8b:
7f:b0:e7:06:56:54:80:45:b6:c4:bc:2a:29:21:8d:
20:59:d2:65:c8:70:3c:bd:0d:a6:0a:d8:28:37:b7:
3b:91:ad:e5:53:d6:d2:49:4e:a9:93:9c:e6:dd:a0:
73:b9:72:ed:8c:6d:b6:06:c6:d0:1a:d9:2f:be:c0:
5c:cd:1b:ca:5e:d5:67:f7:20:7c:94:a1:87:e0:fd:
4f:18:27:fb:20:81:6e:48:00:16:b6:12:49:cc:c7:
04:4d:f2:79:59:ad:05:d7:7b:4a:ee:68:bf:a3:7e:
f5:a2:01:cb:bd:09:39:a1:68:41:09:b0:67:3e:71:
ba:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:52:F6:C4:D4:39:15:69:81:4C:43:7E:8A:06:B8:04:12:C7:5F:FA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/T1L2xNQ5FWmBTEN-iga4BBLHX_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
50:d5:09:e8:fe:86:b9:f3:fe:18:f8:62:48:ed:1d:06:62:2d:
8c:6c:d4:a6:ef:71:7d:a7:bf:99:fa:89:58:04:0d:ad:51:ea:
bc:ca:7e:32:04:ce:0f:87:a3:9b:fe:48:3a:d9:91:09:bc:db:
d6:dc:71:5f:5f:ee:5c:dd:c8:ed:ab:c9:05:a1:16:fa:f8:52:
87:53:72:e3:07:34:de:0a:4a:f1:e8:16:83:0f:b9:29:2e:38:
6a:99:d1:d4:00:55:ab:01:91:c1:0a:f2:e7:c1:2b:1f:6c:b4:
cc:12:1d:5f:74:8e:95:8a:c1:20:9e:a1:03:95:ca:8b:1a:7b:
3c:79:8d:7d:af:d7:9d:8c:de:aa:4d:6c:2b:e2:0c:e9:d2:88:
1e:ad:01:ce:cb:55:23:9b:49:70:3f:11:ad:e6:b3:69:73:e3:
96:4d:1e:c7:d0:89:b7:22:2e:fa:f7:b3:13:63:19:14:3b:ed:
8a:7e:68:1c:29:c7:64:6d:9d:6a:08:b6:9d:da:56:7b:93:a6:
cb:9e:e3:71:33:8d:57:c8:65:99:a3:5c:94:4d:b0:b0:20:b8:
cf:1f:cb:31:da:90:a0:b7:3f:e0:46:e2:43:e3:28:11:e8:73:
dc:be:ca:14:fe:26:8b:0e:93:89:63:c6:91:ac:16:ce:e8:3f:
6c:06:40:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:07:40 2025 by rpki-client