Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_pj4xpDp69m5fDy0lzoWxtnSx84.roa
File: _pj4xpDp69m5fDy0lzoWxtnSx84.roa (raw, json)
Hash identifier: H0A1oyaUHIpMTuWL0go20u8zhDlWypkKm2K7PwoAWPA=
Subject key identifier: FE:98:F8:C6:90:E9:EB:D9:B9:7C:3C:B4:97:3A:16:C6:D9:D2:C7:CE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184CC50D6DABEEFA9D6850B74CBBFC9DC54
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_pj4xpDp69m5fDy0lzoWxtnSx84.roa
Signing time: Thu 01 Dec 2022 06:12:40 +0000
ROA not before: Thu 01 Dec 2022 06:12:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:ae77:4719/128 maxlen: 128
2001:67c:64:ffff:0:184:9f03:9814/128 maxlen: 128
2001:67c:64:ffff:0:184:bdea:9abb/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:cc:50:d6:da:be:ef:a9:d6:85:0b:74:cb:bf:c9:dc:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 1 06:12:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fe98f8c690e9ebd9b97c3cb4973a16c6d9d2c7ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:22:f8:5a:13:b9:bc:30:4d:66:93:bc:ed:00:
4a:24:d0:21:4e:5b:d7:f4:30:b4:6f:a8:96:ad:13:
d8:af:49:67:f0:1a:af:2c:fb:27:54:83:d4:ff:be:
aa:f0:57:68:4d:9b:f8:df:e6:16:4d:93:d2:52:1c:
a8:55:8e:45:44:4c:98:be:2b:7d:8c:9f:a9:bd:ff:
52:94:3d:af:56:3e:c7:20:ec:72:0b:84:16:10:ce:
13:c8:a1:7c:f1:ad:ff:3f:cc:61:49:76:bf:f0:96:
46:7f:c0:c9:a4:e0:6e:bd:ab:87:fa:fb:16:a3:af:
0e:7f:6e:5a:e3:95:ef:7f:7a:4b:86:6b:2e:b7:30:
62:4e:58:92:27:4e:74:a6:3c:d0:77:7b:bc:85:6e:
2b:6d:55:18:65:5d:7b:44:e7:e6:49:13:b6:e0:9d:
df:7b:b3:79:e6:86:ca:31:04:75:5c:d6:06:0f:3f:
f3:aa:9e:1e:d7:0a:95:20:2a:01:73:95:a0:51:a8:
24:71:0e:d4:fe:cb:b7:4c:d4:ee:81:9a:93:c2:9d:
b8:64:dc:46:29:b3:2b:58:c2:8a:9a:57:3e:46:40:
b9:02:c9:11:92:36:cc:15:a6:f6:7d:aa:27:8a:6e:
f6:cd:00:67:fd:8d:7f:d0:2e:8c:6f:0f:53:16:13:
24:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:98:F8:C6:90:E9:EB:D9:B9:7C:3C:B4:97:3A:16:C6:D9:D2:C7:CE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_pj4xpDp69m5fDy0lzoWxtnSx84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
61:c6:63:d9:d6:02:9e:68:fc:02:a6:58:56:fa:d8:fd:b3:e2:
73:42:77:c8:db:e7:60:11:c6:e1:f3:af:05:c0:d4:0d:f2:26:
33:37:9f:22:6a:d0:6e:0c:30:3e:b4:ef:f0:ca:b4:6c:e9:65:
10:2e:28:2f:1a:19:6e:30:37:47:ba:57:65:14:67:e8:fe:11:
1a:da:eb:38:68:cd:47:0c:49:ad:ce:aa:39:0d:19:2f:cc:33:
bb:0c:c2:d1:75:08:93:a5:84:d1:8a:f0:84:95:bd:28:c1:3a:
b6:91:89:6b:76:aa:59:c3:44:31:35:6b:5c:01:e2:4a:3f:f6:
e9:a6:18:32:0c:62:c2:74:e2:66:24:6d:8e:22:ae:52:2f:9c:
04:88:92:39:f7:39:9e:de:9d:0c:51:2b:1f:a7:b9:ae:ad:9f:
0b:a5:9a:5c:c6:13:75:a6:ff:75:47:55:e9:02:32:e0:c5:96:
0e:00:a3:75:94:66:f7:af:da:f9:2f:50:9f:02:77:d9:8b:20:
6d:ca:14:e0:8d:a6:1f:ac:38:69:b6:93:85:e4:e0:77:cc:68:
44:7e:1a:d0:8e:55:18:67:26:aa:ad:32:5a:4a:d0:1d:14:be:
e7:00:ab:34:29:53:0f:a5:6e:30:57:6c:18:a2:95:85:f5:1c:
4f:cc:19:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:47:33 2025 by rpki-client