Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_4HaDCj0IYnOvcIEQQ0h7kDK85I.roa
File: _4HaDCj0IYnOvcIEQQ0h7kDK85I.roa (raw, json)
Hash identifier: ZSjg5yUTkGTvw9UYvBXVgt6h1C7wKXwSzayRGq/YVAk=
Subject key identifier: FF:81:DA:0C:28:F4:21:89:CE:BD:C2:04:41:0D:21:EE:40:CA:F3:92
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 68E24584
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_4HaDCj0IYnOvcIEQQ0h7kDK85I.roa
Signing time: Tue 08 Feb 2022 10:05:34 +0000
ROA not before: Tue 08 Feb 2022 10:05:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:d7ee:e040/128 maxlen: 128
2001:67c:64:ffff:0:17e:d592:92a4/128 maxlen: 128
2001:67c:64:ffff:0:17e:d600:60b0/128 maxlen: 128
2001:67c:64:ffff:0:17e:d524:ead9/128 maxlen: 128
2001:67c:64:ffff:0:17e:d7b8:3101/128 maxlen: 128
2001:67c:64:ffff:0:17e:d6a5:23ae/128 maxlen: 128
2001:67c:64:ffff:0:17e:d8cb:aea3/128 maxlen: 128
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17e:d826:2565/128 maxlen: 128
2001:67c:64:ffff:0:17e:d713:9aeb/128 maxlen: 128
2001:67c:64:ffff:0:17e:d55b:c264/128 maxlen: 128
2001:67c:64:ffff:0:17e:d66e:8559/128 maxlen: 128
2001:67c:64:ffff:0:17e:d85c:d348/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1759659396 (0x68e24584)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 8 10:05:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ff81da0c28f42189cebdc204410d21ee40caf392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cc:5a:7e:3f:a9:3f:f7:07:57:7a:46:38:7b:
6e:cb:ff:51:87:f6:f3:dd:6c:20:f7:a7:a2:e6:2b:
4d:99:52:59:c5:99:c8:c8:4b:82:f3:fe:ae:a2:5b:
7e:5c:20:f0:4b:e5:96:8f:f4:93:c7:d9:2d:cc:59:
7b:b9:a7:e2:9a:69:e2:27:18:55:5b:3b:62:fd:89:
a5:a4:51:8e:8d:a2:bc:8b:d4:26:aa:2e:79:6e:71:
4b:03:f7:a9:e8:a5:87:fd:e3:4e:6c:8a:7c:d8:57:
2f:83:e4:bf:a7:a5:ce:7d:6a:66:8e:27:de:fa:8e:
f6:42:c6:28:6d:84:50:d6:06:f4:8a:ef:68:bb:bc:
c2:9c:e8:42:94:1b:c4:1c:1e:a9:93:ee:1c:38:cd:
c3:f5:5a:9d:2e:0d:0e:94:79:f6:b8:3d:cd:a8:73:
35:0d:b1:63:af:08:15:a9:31:95:1f:98:e2:d6:c0:
34:9a:f2:13:cb:e2:cc:44:eb:ab:fa:69:7c:65:3a:
4c:99:08:58:b5:33:f6:ad:4f:78:d9:35:39:c8:0e:
97:43:f0:41:5a:77:7c:29:e3:ad:bd:c5:6d:2b:42:
1f:9f:c5:90:d6:6a:3a:85:e5:be:99:92:76:c6:1a:
af:02:66:8a:84:99:9c:cc:6b:dc:a7:55:cb:18:9b:
4e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:81:DA:0C:28:F4:21:89:CE:BD:C2:04:41:0D:21:EE:40:CA:F3:92
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_4HaDCj0IYnOvcIEQQ0h7kDK85I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
74:40:9a:7b:d7:58:50:1e:9f:a1:b1:2e:a6:3f:25:31:ff:62:
e3:79:42:58:ca:d2:36:1e:3f:af:79:7e:06:70:de:6d:1e:25:
eb:6f:f8:52:c6:12:56:61:8b:fb:24:d3:44:d0:59:04:5d:8b:
9e:8d:53:e6:9c:29:fc:0f:23:3e:fe:21:44:37:b2:b2:5d:68:
c2:bc:c4:d8:42:a0:a5:03:20:07:62:56:b7:78:db:6a:d0:8c:
e4:f4:86:a7:9e:2a:a9:b9:92:33:0a:93:e2:a7:0c:8d:de:f2:
85:64:9b:9a:e1:39:70:e5:a8:1e:a3:f8:5c:45:b0:94:2c:a9:
8e:4c:ba:bc:63:8d:84:f0:48:1f:05:5b:07:56:94:f3:29:c1:
3e:b8:56:bb:27:d1:af:70:6d:7b:30:63:3e:5d:87:c2:18:65:
fb:84:1e:0e:15:3c:f4:9f:ac:c8:b3:4e:26:bf:48:bd:90:92:
61:c0:14:bb:3a:9c:be:62:38:ba:91:32:29:aa:aa:fc:fc:10:
66:38:ee:1d:ef:e1:6c:de:9a:da:18:cb:c4:53:a1:97:e7:a3:
70:52:38:33:aa:61:c2:c2:e6:58:c5:5a:bd:95:ca:b2:c2:04:
8a:7d:8a:07:dc:9d:d0:7a:70:9f:23:10:12:cb:9b:3a:52:a8:
c0:0f:47:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 23:46:15 2025 by rpki-client