Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/a7a9VmaUB2NIcD6Eyx7ytnBXt6A.roa
File: a7a9VmaUB2NIcD6Eyx7ytnBXt6A.roa (raw, json)
Hash identifier: MgQd5Y6JT8eIdDHlKpXXWVS4qMIZucxM7xtvbj0xWls=
Subject key identifier: 6B:B6:BD:56:66:94:07:63:48:70:3E:84:CB:1E:F2:B6:70:57:B7:A0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 71253E93
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/a7a9VmaUB2NIcD6Eyx7ytnBXt6A.roa
Signing time: Wed 09 Mar 2022 22:09:45 +0000
ROA not before: Wed 09 Mar 2022 22:09:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1898266259 (0x71253e93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 9 22:09:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6bb6bd566694076348703e84cb1ef2b67057b7a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c4:66:61:43:1c:38:de:fb:eb:ff:23:9b:0b:
6b:59:54:f3:66:1c:70:63:1a:ea:1c:3a:fb:60:01:
4f:a9:bb:af:2a:6f:76:ab:e1:c8:72:a3:6b:e6:28:
c8:73:f1:bd:73:a5:60:de:5f:44:68:80:26:2f:e8:
4f:65:7b:ce:65:dc:e8:2f:7e:69:e2:70:42:80:fe:
dc:1b:db:96:c0:4c:e5:f1:e9:d2:ee:cb:3a:a5:78:
49:8f:3d:ce:e0:c9:32:9a:3c:48:b7:35:c7:4b:31:
a3:d2:84:ad:36:55:49:d7:25:b4:8e:36:29:a2:d0:
30:03:11:e8:2d:97:27:bb:3b:7d:9f:0d:83:0c:2e:
d6:90:b0:a8:83:4b:9d:e9:6c:75:c9:f4:15:e4:b8:
7d:e9:76:34:3a:07:f7:3b:0e:97:ba:05:26:0f:b5:
22:10:36:47:de:18:36:b9:a8:ef:ff:61:b7:c3:be:
eb:62:13:f5:05:1e:35:96:e4:8a:f8:c2:a3:12:80:
5c:45:e0:a2:2d:e8:41:22:ba:2f:ca:02:b0:82:2c:
04:d1:af:05:fd:77:c4:7d:72:6e:54:98:4a:93:ce:
37:64:26:55:1a:66:f4:64:a0:7c:29:34:a4:da:24:
c3:aa:07:93:33:92:98:d6:62:5c:c9:b5:f7:bc:61:
5c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:B6:BD:56:66:94:07:63:48:70:3E:84:CB:1E:F2:B6:70:57:B7:A0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/a7a9VmaUB2NIcD6Eyx7ytnBXt6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
06:65:08:17:0b:fd:48:7c:4b:ff:27:ad:39:78:81:fd:ed:e1:
71:be:f2:dc:c7:da:a1:c7:94:af:cf:98:bb:34:b5:1e:3b:b6:
cb:92:58:50:14:c5:59:c3:2c:74:59:11:98:b2:81:67:49:56:
2d:87:52:f9:47:95:95:6b:06:4c:a0:48:d9:fc:e0:05:fd:a2:
bb:b1:b5:96:cc:36:b4:21:11:3f:12:12:da:ac:c6:e2:ae:12:
94:47:93:8a:ff:5f:57:5f:88:dd:49:32:ce:12:d6:65:41:14:
f5:9e:d8:dc:84:de:02:9b:89:2d:6b:eb:64:f9:a1:45:46:a7:
60:4e:aa:a6:0d:20:9e:53:8e:2f:2a:c6:7a:bb:c9:e3:58:5a:
08:f0:46:b8:9d:96:94:dc:68:62:3a:78:ef:a0:5e:e2:cd:ad:
45:01:ce:04:97:5d:a3:99:96:c1:8e:0b:ef:84:c5:60:26:5a:
be:a2:0e:c6:b6:6e:5b:83:50:1a:9b:84:55:c5:7e:a8:bc:49:
ee:40:23:fd:52:b1:16:b6:30:6a:7c:e5:bc:ee:8a:34:26:60:
13:3b:c8:38:13:4a:f0:8b:f9:4c:f0:d8:04:66:65:45:09:0c:
f6:02:a3:87:6f:1b:62:f4:b0:bd:3e:f3:b1:01:38:07:8e:c0:
e0:4a:41:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:11:38 2025 by rpki-client