Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Us69MR5wTz61r2ls5psfaDr7zz0.roa
File: Us69MR5wTz61r2ls5psfaDr7zz0.roa (raw, json)
Hash identifier: 4w73OtmvlFJlb8/k77pUdOsMdoW28PBL8ks6XJnEKEY=
Subject key identifier: 52:CE:BD:31:1E:70:4F:3E:B5:AF:69:6C:E6:9B:1F:68:3A:FB:CF:3D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7A78BBA1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Us69MR5wTz61r2ls5psfaDr7zz0.roa
Signing time: Mon 11 Apr 2022 18:11:39 +0000
ROA not before: Mon 11 Apr 2022 18:11:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2054732705 (0x7a78bba1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 11 18:11:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=52cebd311e704f3eb5af696ce69b1f683afbcf3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b6:d7:58:a1:fc:79:43:73:c5:a0:5b:d6:00:
de:02:fd:5e:5d:ec:d8:60:19:81:bf:75:53:0a:2e:
d5:4f:b5:18:ad:39:9f:4b:2e:08:73:59:0d:82:3c:
5d:6c:5c:c6:e2:3b:36:81:3e:05:b8:83:6a:ea:26:
3e:d3:44:c9:77:74:9e:bb:0b:89:a1:d0:19:37:75:
cb:2f:e1:1d:f6:34:1d:7a:26:ff:6d:36:8e:5c:41:
c4:8f:a9:17:88:0b:d4:d1:43:32:d7:84:f1:39:c0:
6a:9b:d2:0f:a8:53:f4:35:3e:6f:b5:f9:42:f2:14:
1e:20:93:55:b8:9f:e7:db:99:5e:7e:23:41:5f:26:
f2:33:f8:4d:80:e3:02:ff:d4:0a:54:22:00:9f:55:
2d:d4:93:f0:76:a2:f6:75:68:7f:f1:7b:3a:0a:f1:
9e:d4:a7:e5:7d:63:fb:12:1c:9f:ad:8a:72:e8:d7:
21:69:f8:60:29:6b:44:41:03:7f:40:de:68:f5:c7:
03:ed:0c:dd:ab:e0:b5:dc:42:94:5a:15:40:bf:09:
61:83:60:35:66:c2:52:c9:48:ff:27:a8:39:3a:2f:
6d:51:b0:25:c2:6c:6b:de:27:8c:9a:a0:64:fe:42:
80:fc:da:5b:5a:a7:d0:13:ea:c0:9b:cd:1f:99:97:
55:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:CE:BD:31:1E:70:4F:3E:B5:AF:69:6C:E6:9B:1F:68:3A:FB:CF:3D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Us69MR5wTz61r2ls5psfaDr7zz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9d:db:31:c4:04:72:d8:08:05:0e:fd:bd:d3:0b:63:56:b1:fb:
96:3d:8d:a9:fc:6b:f6:0d:7d:90:c8:4f:16:20:f0:67:65:63:
7a:23:f1:73:53:2f:4f:2f:78:5f:fa:ff:13:75:6b:73:88:be:
1f:30:7c:e9:a4:4c:ed:c5:10:24:73:b5:e5:1c:2c:36:ee:1b:
3b:f0:af:5b:59:13:11:13:6e:4d:a7:13:14:6b:27:c4:5d:13:
63:ff:bf:17:ed:37:91:d9:0b:66:f7:4e:78:0b:0b:11:f9:29:
c1:d0:85:e6:ab:e4:f1:01:e5:2d:03:e0:69:3b:3c:d7:db:a8:
37:76:6b:eb:9b:df:60:e4:69:8d:43:d3:1d:ee:b9:3e:1f:c6:
9d:67:76:3e:c1:47:92:de:28:1a:6b:44:b3:6e:35:b9:1e:bc:
8c:62:6e:37:9f:a3:1f:5b:45:45:fb:8d:51:ae:b9:c8:a6:86:
1b:21:0d:07:23:15:70:cd:9a:e4:14:6d:36:26:7b:23:fd:31:
4c:4e:b6:46:3b:e5:49:48:02:43:cb:33:d3:1a:84:12:63:92:
d3:0f:bd:96:c1:5d:99:8b:b6:10:69:72:36:1a:18:11:1c:da:
80:81:22:ce:98:8f:06:f6:db:17:3a:30:f1:07:84:90:c4:48:
fb:d7:0c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 17:33:21 2025 by rpki-client