Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_0YwKOnWYz-b7GptZz_BJsiHp3A.roa
File: _0YwKOnWYz-b7GptZz_BJsiHp3A.roa (raw, json)
Hash identifier: EHIRKf+4SBN1qv5njZ+QVVH7/vn3H1U8BYlRm+jTkro=
Subject key identifier: FF:46:30:28:E9:D6:63:3F:9B:EC:6A:6D:67:3F:C1:26:C8:87:A7:70
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185E11BDAE1D7F34565A17F6B8790E57C57
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_0YwKOnWYz-b7GptZz_BJsiHp3A.roa
Signing time: Tue 24 Jan 2023 00:09:37 +0000
ROA not before: Tue 24 Jan 2023 00:09:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e1:1b:da:e1:d7:f3:45:65:a1:7f:6b:87:90:e5:7c:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 24 00:09:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff463028e9d6633f9bec6a6d673fc126c887a770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a4:a2:c7:8e:e1:62:ee:a7:34:2c:30:ed:79:
80:c1:22:40:22:b3:f6:d1:88:29:59:0c:c9:06:73:
61:37:fe:f0:9c:cc:1e:55:88:a9:74:95:52:70:5e:
bb:eb:b0:dd:4e:47:86:7d:a1:6c:0b:7b:3c:1e:17:
ad:f3:10:bb:56:c9:b0:f3:be:00:f4:61:96:54:be:
3d:76:af:b7:46:7b:ac:51:bb:89:60:48:f6:12:8f:
9a:4f:c6:21:aa:82:68:18:92:4a:d5:0a:08:a7:9d:
2a:df:64:3a:8e:24:7e:51:ff:59:23:0e:6b:3c:80:
52:d8:51:53:2e:cb:2f:f9:d6:7a:c7:8a:17:63:48:
ad:5f:c1:cf:d1:24:78:f4:b1:db:5c:a9:01:63:0a:
a1:86:ac:7c:77:a2:d1:23:8b:69:8a:f7:b0:f7:72:
31:31:3e:bf:bb:2a:9a:8e:d1:44:68:48:04:92:3f:
b8:d1:a5:30:0b:b4:61:10:3a:41:a1:0a:71:8b:b4:
19:2b:fc:30:2a:5a:20:80:7f:4e:86:4c:38:66:88:
4a:47:27:8e:53:d0:ef:84:f2:d7:f6:62:2a:4f:90:
e9:06:95:ee:51:19:15:41:d6:73:c0:56:90:d0:a6:
82:26:30:c5:78:e9:31:db:b2:d5:ad:34:75:2c:b0:
db:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:46:30:28:E9:D6:63:3F:9B:EC:6A:6D:67:3F:C1:26:C8:87:A7:70
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_0YwKOnWYz-b7GptZz_BJsiHp3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b4:9a:f4:a1:0c:9c:07:f3:49:87:02:d9:f2:fc:73:e3:36:93:
5a:64:de:36:d9:65:19:3b:fd:87:26:c7:0e:52:11:57:a5:5f:
d4:12:06:78:e8:26:49:5f:eb:19:0c:b3:18:1c:37:6d:89:e1:
b7:03:73:f1:87:b1:e9:4d:35:ca:b8:17:5d:10:c3:46:ba:dc:
6f:ac:52:af:b2:fb:cf:43:7b:3a:21:c2:2b:c1:78:4f:6a:2c:
54:ac:49:70:3c:9b:fe:c8:c1:25:1f:d9:68:46:2b:bc:83:51:
af:02:17:56:8c:6a:a4:2f:f9:8e:04:a2:63:e8:d4:ef:f8:1c:
ae:88:cf:34:40:87:a2:77:62:96:f9:46:e5:0b:c4:6c:4d:b7:
ce:c4:10:58:56:bc:fe:32:14:2f:5e:50:37:ff:2b:76:0a:d4:
ad:c5:95:b5:42:19:d6:31:27:57:94:54:0e:74:ba:43:10:3e:
76:41:d6:41:81:07:9d:c4:3a:65:1d:f3:6f:e6:17:cf:3e:77:
1f:7e:00:e7:86:99:fc:75:80:21:7e:99:e8:eb:02:dd:06:6c:
f1:f5:6d:65:fd:7d:d6:14:ad:de:0d:c1:67:dd:73:e3:87:41:
7d:6a:d4:71:5a:01:73:ee:ec:c6:7a:11:54:87:96:9a:2b:4c:
94:a0:72:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:30:43 2025 by rpki-client