Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cA-4A-8qIwtnDhmogG6CXqfn4Y0.roa
File: cA-4A-8qIwtnDhmogG6CXqfn4Y0.roa (raw, json)
Hash identifier: mqZTF4Qfqcn9vlxJX38Ok6HqJn4qQq5bvYUasqdznwQ=
Subject key identifier: 70:0F:B8:03:EF:2A:23:0B:67:0E:19:A8:80:6E:82:5E:A7:E7:E1:8D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01821DE415B8E4B6BBBBEA1C29BD4D608A1A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cA-4A-8qIwtnDhmogG6CXqfn4Y0.roa
Signing time: Wed 20 Jul 2022 23:14:23 +0000
ROA not before: Wed 20 Jul 2022 23:14:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1d:e4:15:b8:e4:b6:bb:bb:ea:1c:29:bd:4d:60:8a:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 20 23:14:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=700fb803ef2a230b670e19a8806e825ea7e7e18d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:11:a8:28:eb:a2:f0:cc:e4:5f:7b:72:5c:7b:
61:97:ba:bb:e0:61:53:82:d0:62:30:07:1c:83:2b:
40:b7:58:4b:f5:9a:02:3c:1e:79:68:2d:26:61:93:
d2:6d:de:e5:e6:4e:aa:5e:7b:31:fe:cb:41:fe:96:
da:3e:c4:10:f6:86:9d:e1:61:89:20:a8:b4:ec:ed:
4d:17:38:88:ed:93:31:4d:91:6f:6d:cc:64:9e:5a:
25:90:93:5e:e3:5b:9d:68:9c:5b:61:08:70:1b:12:
ec:05:70:1e:dc:5b:64:51:ea:82:8d:e8:63:13:85:
01:21:bd:45:6a:1b:1a:e1:c4:f6:12:bf:c6:9c:f4:
4b:33:e7:e4:9b:ca:d7:c1:2e:60:90:0c:f0:5b:2d:
e2:bf:b7:13:0b:30:58:17:b0:31:3d:e8:6c:86:fe:
c9:7c:e2:20:e1:6f:29:0f:ad:ca:e3:de:6a:32:a4:
ee:98:30:5a:73:bc:eb:13:59:21:ad:7c:a3:20:eb:
d0:39:f1:27:d6:04:38:00:79:b6:00:38:7a:e8:34:
da:54:7e:02:ec:d1:21:8a:ea:0f:f7:47:f8:b3:eb:
7e:b7:70:3b:46:fb:fe:8d:0c:3a:81:28:ad:7e:91:
5f:60:0f:1a:90:b0:b7:a4:02:6c:0b:10:a8:e6:54:
4b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:0F:B8:03:EF:2A:23:0B:67:0E:19:A8:80:6E:82:5E:A7:E7:E1:8D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cA-4A-8qIwtnDhmogG6CXqfn4Y0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
61:34:7e:08:4f:52:c3:67:ab:2c:36:b4:4c:14:85:99:74:3c:
4f:19:67:aa:a2:a2:29:c6:3f:7e:33:3f:85:fb:14:46:bc:ff:
41:49:9f:a3:fe:8e:a8:de:61:50:85:e1:22:b3:30:d4:85:d2:
ca:49:f4:79:93:f2:3d:7e:c2:3b:fc:ab:42:58:93:46:be:2f:
aa:60:f8:b1:6d:d8:d7:4d:5b:0f:14:5e:fe:5b:89:5a:c1:53:
d0:3b:6a:59:3d:68:9f:53:76:15:7b:cd:60:1e:cb:56:23:bd:
dc:3f:d7:23:ba:be:3f:4f:b8:76:82:84:45:ed:3e:80:4b:0d:
46:0c:59:35:4c:11:d1:1f:b5:f7:8d:02:ba:5d:8e:c0:08:3b:
77:1f:c0:4b:8f:59:35:13:4f:2c:f3:3b:6e:d9:be:ff:ae:61:
0f:44:67:cb:0c:df:16:99:6e:6d:d3:47:f8:24:f7:b5:8b:62:
4d:c6:2d:2d:aa:7e:f4:0f:87:d2:45:4f:f9:12:3e:22:75:84:
b0:04:e2:79:6b:c4:b1:96:84:70:db:51:e4:88:f6:4e:40:d3:
62:d1:ef:14:d5:07:e5:ec:79:cc:5a:f3:22:18:8b:0e:85:94:
43:9c:0e:43:67:fc:49:60:20:f9:a8:94:3e:6a:62:95:8b:84:
c6:67:66:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:02:42 2025 by rpki-client