Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cx82Er68m0J1O2pB_hiDvU7KKUY.roa
File: cx82Er68m0J1O2pB_hiDvU7KKUY.roa (raw, json)
Hash identifier: lxzX8i36T/2w+RCGwNKWYFJ4Y3raM8qW2nH21D5UBAs=
Subject key identifier: 73:1F:36:12:BE:BC:9B:42:75:3B:6A:41:FE:18:83:BD:4E:CA:29:46
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 74A628E0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cx82Er68m0J1O2pB_hiDvU7KKUY.roa
Signing time: Tue 22 Mar 2022 04:10:59 +0000
ROA not before: Tue 22 Mar 2022 04:10:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1957046496 (0x74a628e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 22 04:10:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=731f3612bebc9b42753b6a41fe1883bd4eca2946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c0:0c:69:46:00:38:16:70:98:52:43:9e:2b:
f8:18:78:cb:2f:d6:d0:fd:42:32:16:1d:31:65:c9:
3a:78:69:ba:b7:b8:d4:fd:92:a2:87:06:ab:00:19:
fb:a7:07:a4:59:9b:35:fd:50:fd:41:0b:b2:de:b6:
42:7b:16:b7:60:8c:d8:aa:f6:a5:9e:97:f2:8b:af:
02:99:f8:8d:5d:2a:87:18:0e:47:1f:57:09:c5:c7:
e4:81:8e:aa:1b:7a:0f:a1:05:74:6e:c1:4a:09:f2:
68:3f:fe:c2:40:d0:b6:40:4a:ff:12:b5:55:04:0c:
82:d3:5a:b5:26:98:fe:4c:54:8d:4c:2c:75:1d:9e:
de:4c:1e:77:26:06:b1:ac:96:97:d6:ea:d8:21:55:
73:fb:6f:d5:d8:86:8e:49:48:a7:3c:7f:4b:8f:18:
9a:b0:fd:72:44:a0:b9:48:5f:78:3f:c4:c1:98:f0:
ca:7e:c2:04:d1:93:d4:57:d0:52:a0:79:4f:13:71:
02:90:54:66:7f:93:8d:ce:ea:24:35:08:f1:64:70:
53:92:64:55:b9:e6:71:97:ce:f1:f1:4f:a0:4c:ed:
ae:0b:b5:54:eb:79:1d:fa:b4:db:a6:13:bb:4a:74:
38:7e:7a:ec:ab:d0:ad:7e:61:09:0c:7b:e8:b4:10:
7c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:1F:36:12:BE:BC:9B:42:75:3B:6A:41:FE:18:83:BD:4E:CA:29:46
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cx82Er68m0J1O2pB_hiDvU7KKUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
25:b0:fc:73:0f:7d:7d:5e:4e:2b:e5:43:01:c9:b3:b7:12:7d:
86:2d:94:92:a1:ef:8c:ef:5d:cc:33:3e:2f:87:c0:19:0f:c3:
96:aa:07:bd:03:07:d8:a0:28:9b:8d:e5:5b:b6:db:76:c0:de:
b9:f2:e8:d6:83:30:78:51:32:64:64:c2:17:0f:2c:0d:a3:3b:
f5:81:12:f9:fd:34:f5:b1:39:5c:59:0d:26:04:a4:1f:26:87:
51:67:70:ba:3f:93:58:97:bf:76:c9:1e:ca:d5:ee:42:7f:5a:
fc:ee:7a:5e:28:db:ef:56:51:31:06:dd:b4:2d:66:68:5c:a6:
4e:ef:f9:98:2f:1e:73:77:0e:90:9c:2c:a8:1c:04:03:6a:ee:
3a:f8:37:9f:d3:b8:07:15:07:53:ea:ce:06:b6:b0:ff:d3:03:
ec:ab:e5:43:a1:28:05:b1:34:a8:1d:ea:2a:c7:c3:8b:24:41:
fa:34:de:65:91:fa:1b:2d:0f:f7:11:fc:3d:be:d7:85:18:e6:
f9:7a:4b:7d:00:45:bb:9e:7d:11:0e:53:85:14:f4:97:d9:90:
f0:98:da:f7:1b:fd:c0:77:ea:6f:f1:ff:bd:09:26:0a:9f:7c:
06:c7:d3:8a:0c:af:50:c4:c7:db:53:e3:b1:b0:db:e2:9e:c5:
a5:37:ee:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 13:52:10 2025 by rpki-client