Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YDt0oNSDUkGx0nq_zeaT8Mv2uIs.roa
File: YDt0oNSDUkGx0nq_zeaT8Mv2uIs.roa (raw, json)
Hash identifier: T5EsaEG4FnBHz6Z6ixjVcMiyoV0bBr4CxYP3lYrIgo8=
Subject key identifier: 60:3B:74:A0:D4:83:52:41:B1:D2:7A:BF:CD:E6:93:F0:CB:F6:B8:8B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 70AEF6A6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YDt0oNSDUkGx0nq_zeaT8Mv2uIs.roa
Signing time: Tue 08 Mar 2022 04:05:37 +0000
ROA not before: Tue 08 Mar 2022 04:05:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:67b4:33ef/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1890514598 (0x70aef6a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 8 04:05:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=603b74a0d4835241b1d27abfcde693f0cbf6b88b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5f:7a:93:a5:26:25:69:c2:80:fc:4e:2c:0b:
ca:87:0b:c2:dd:08:63:7a:a2:d2:d6:e2:89:b9:f9:
ed:42:e2:0c:d2:af:9a:c9:26:d9:03:76:b3:b2:48:
31:30:1d:99:74:7b:78:11:05:d7:34:07:06:3c:17:
f1:5e:bf:75:28:38:f4:c9:08:c0:97:e8:f3:1c:91:
5d:1a:0b:1a:e8:05:78:4c:7d:b5:79:76:d7:7e:8e:
ed:b8:1b:e7:f0:32:04:7a:c6:a3:fc:50:aa:98:86:
96:cb:02:82:0c:8a:cb:b9:87:18:15:57:e5:0f:e6:
0f:19:cc:37:f3:ae:52:78:83:00:c8:32:3d:a8:8e:
13:c1:d0:78:de:9b:07:b8:cb:ad:1c:19:15:13:56:
91:4f:b5:8b:7d:d4:e7:ab:ae:b6:64:6d:00:8d:51:
01:f2:7e:e0:73:d4:1a:4b:22:ab:d2:86:2f:92:a2:
2f:00:9a:f5:66:9d:6c:d9:33:16:0f:1d:12:58:27:
fa:d5:96:4a:ee:85:69:14:96:03:f0:42:b5:b6:94:
47:c7:0b:03:9e:be:cc:01:9d:86:84:08:37:71:ba:
b8:95:5a:d5:de:fd:5d:c5:fe:e8:0c:91:82:bd:a7:
bb:9c:de:fb:85:aa:53:ad:1e:1c:a9:ce:ed:a4:69:
e0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:3B:74:A0:D4:83:52:41:B1:D2:7A:BF:CD:E6:93:F0:CB:F6:B8:8B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/YDt0oNSDUkGx0nq_zeaT8Mv2uIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
16:78:47:29:ca:c1:9b:dd:12:2d:fb:bc:13:38:90:6c:91:87:
d3:73:3b:0f:a5:70:af:0a:86:ec:a3:d5:a6:4d:7f:9d:54:77:
35:6f:56:42:bc:ac:aa:88:fd:06:a2:df:44:f1:dc:c2:85:bc:
28:fa:a1:b1:df:c7:44:aa:a1:0a:98:e4:0c:9f:9b:60:9c:d2:
62:0a:27:0d:4a:9c:51:1b:17:76:2a:9b:3d:3f:c7:db:ec:5e:
1b:93:c9:03:17:b5:96:1d:58:ed:da:13:43:09:4d:28:a6:5b:
99:6d:0e:6f:00:6f:9a:1a:37:af:e9:f9:8f:75:36:4d:b4:e5:
b4:57:2b:db:6f:70:63:d3:b2:3e:46:ac:b7:b0:e1:49:3d:c6:
7f:8a:ea:8f:9f:91:de:87:d3:06:e0:42:20:07:bd:f2:09:c4:
a0:81:b7:ae:fd:39:6b:44:03:75:14:bb:42:c1:cc:73:9d:a2:
b9:7f:2e:93:63:ca:49:9e:d9:4a:82:79:eb:55:1e:48:0d:d8:
8e:dc:a6:d5:d7:03:c0:0f:37:9d:37:02:39:6f:c8:14:b2:36:
00:a1:cf:3c:f5:76:2f:eb:d2:67:52:9e:27:29:29:9c:e5:c0:
8e:4f:68:25:12:da:a6:42:55:6f:7e:5a:03:6b:a6:2f:4f:13:
95:dd:ea:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:06:29 2025 by rpki-client