Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/c-j7WTtEbgKmtgiu-R1xdpTo_zM.roa
File: c-j7WTtEbgKmtgiu-R1xdpTo_zM.roa (raw, json)
Hash identifier: a27DyaKlqQ42h53xnlUoTq8L9/S7vr5Ph1v8kCpsJfs=
Subject key identifier: 73:E8:FB:59:3B:44:6E:02:A6:B6:08:AE:F9:1D:71:76:94:E8:FF:33
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01837DCB725CA7305F2912D73C724319C39E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/c-j7WTtEbgKmtgiu-R1xdpTo_zM.roa
Signing time: Tue 27 Sep 2022 07:13:48 +0000
ROA not before: Tue 27 Sep 2022 07:13:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:183:5f81:ab13/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:7d:cb:72:5c:a7:30:5f:29:12:d7:3c:72:43:19:c3:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 27 07:13:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=73e8fb593b446e02a6b608aef91d717694e8ff33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5e:f4:28:97:24:18:c7:f9:ca:f9:16:2f:fd:
4b:52:64:06:ed:9e:dd:09:62:72:ea:37:9c:26:e3:
67:46:58:32:c5:11:f4:8e:b4:f1:00:13:64:21:3e:
c5:43:ef:4b:fc:a2:e7:be:76:5d:86:e0:b5:5b:8b:
a8:59:b5:97:89:a9:65:73:3c:ef:54:12:93:94:01:
e5:fb:ea:92:4d:bd:aa:43:d7:e4:2a:4b:03:9a:96:
81:55:d9:75:af:36:6b:8e:01:dd:da:55:21:ab:dd:
c7:42:ff:9c:49:f5:40:fb:25:f2:36:2f:6a:cf:a4:
ca:63:d9:2b:97:93:31:4b:7c:d3:8b:98:d7:88:13:
32:a6:3c:9e:fc:2b:92:1e:ef:b6:59:45:fe:6a:5f:
c6:bf:75:ec:b6:c1:91:72:3c:44:4e:15:4b:1e:ee:
37:85:ea:e9:de:d4:c6:89:08:38:b0:e0:ff:fe:1c:
22:9c:f2:25:f5:11:d4:bd:8d:ca:b9:e2:66:0e:c8:
19:c4:ed:bd:9c:e6:0e:7d:98:76:9d:a2:24:fc:84:
7f:8b:3c:3b:38:78:c0:2a:2e:48:e5:6e:b4:3e:06:
a6:0c:96:7c:8d:be:c8:17:95:41:71:b6:27:4f:db:
0d:c7:58:db:c1:50:ca:fc:d1:3e:1e:86:ce:6f:13:
b0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E8:FB:59:3B:44:6E:02:A6:B6:08:AE:F9:1D:71:76:94:E8:FF:33
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/c-j7WTtEbgKmtgiu-R1xdpTo_zM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
10:36:74:5c:8a:53:b4:19:3a:29:29:ba:c5:8d:fd:fd:d9:2e:
b9:1f:dd:90:11:ce:9d:1d:58:e5:33:34:2b:9d:3d:86:1e:da:
c9:3a:64:b2:2c:3e:22:93:6e:fc:06:70:c1:75:98:00:9d:53:
b3:21:a9:c0:06:66:fd:3e:b0:64:7e:ee:0d:14:da:87:2d:f7:
ed:ae:a3:2c:1d:b8:ce:0f:b5:1a:0c:19:b7:8f:1f:ab:bd:7f:
76:a0:a7:e4:2c:4b:1f:7a:f0:73:16:3d:99:6d:23:30:7a:4d:
3f:60:7c:5f:04:4b:d2:d0:6c:c3:e6:40:1b:d6:dd:ad:34:53:
ed:4e:b9:11:d0:c4:10:b8:be:9e:8b:b1:7f:f6:2b:84:cb:ca:
18:3a:33:81:39:8b:63:d6:3f:84:cf:04:d4:1f:4b:9a:57:10:
f8:f8:8b:6f:49:ee:6b:c1:42:d0:31:a8:13:6a:58:6c:69:f9:
9d:7b:a2:15:e3:50:86:0a:e4:16:d2:b9:08:94:6f:55:56:06:
67:59:f1:ac:43:69:4c:68:bf:77:8e:52:e5:90:37:34:2d:8e:
75:b2:10:b2:8a:fe:03:83:74:a3:2e:0f:28:17:da:c7:8c:34:
a1:85:d9:2c:f9:8a:e3:f3:fc:82:53:6f:cd:57:36:89:e2:19:
8b:96:85:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:27:45 2025 by rpki-client