Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d2rOH13uMh-x8dRnp6N79x6b6rY.roa
File: d2rOH13uMh-x8dRnp6N79x6b6rY.roa (raw, json)
Hash identifier: deYndb4TpFg45hJaEStp35rxnnl5Up4ebBHg5jOmgFM=
Subject key identifier: 77:6A:CE:1F:5D:EE:32:1F:B1:F1:D4:67:A7:A3:7B:F7:1E:9B:EA:B6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8CDACD50
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d2rOH13uMh-x8dRnp6N79x6b6rY.roa
Signing time: Wed 15 Jun 2022 05:17:46 +0000
ROA not before: Wed 15 Jun 2022 05:17:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:56ba:5b78/128 maxlen: 128
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2363149648 (0x8cdacd50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 15 05:17:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=776ace1f5dee321fb1f1d467a7a37bf71e9beab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7d:34:e8:fd:4f:1d:66:24:4c:31:e8:ec:0c:
f3:c8:f0:fa:5f:44:2c:b4:84:98:83:e6:88:0b:f0:
6a:51:0c:b7:cb:47:2a:cf:9f:92:18:b8:ab:94:d2:
48:f4:3f:86:dd:2f:63:8b:e4:df:37:a2:0d:f7:80:
53:48:a1:58:1d:8e:7c:db:d1:34:08:9c:c9:12:6a:
b9:53:2b:49:7d:2d:95:4c:d5:cb:ee:c2:cd:34:b5:
24:db:29:0b:09:6a:05:9d:0e:94:0b:f3:20:47:5a:
ea:23:2c:e1:ed:11:35:d2:a7:b6:97:63:12:28:86:
80:14:da:7e:bd:9e:dd:fb:fd:29:09:f7:19:58:93:
25:d7:35:bf:0b:d0:ed:6b:55:00:61:cf:38:44:d9:
84:51:1d:cd:fd:70:bd:08:11:d9:78:e0:a0:8b:30:
b1:0e:e0:c6:05:a4:d1:8a:27:a6:31:71:81:aa:dc:
0b:51:e8:6c:46:7e:d0:a4:99:17:b5:18:f5:d0:32:
13:eb:ec:db:39:7e:83:73:7e:0c:d7:59:7e:15:b6:
8e:ca:f7:01:07:2b:4b:e8:98:73:2d:ee:f2:e6:d4:
89:dc:f1:f2:75:04:95:3c:f5:e8:05:56:4a:b9:c8:
bd:87:02:0f:5f:96:79:ff:6e:9f:a4:6b:3c:78:00:
0a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:6A:CE:1F:5D:EE:32:1F:B1:F1:D4:67:A7:A3:7B:F7:1E:9B:EA:B6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d2rOH13uMh-x8dRnp6N79x6b6rY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7b:e4:ab:8b:d0:d6:2d:42:04:45:25:fe:7f:35:a2:53:56:82:
ba:a5:29:0c:16:14:69:cc:6f:f2:7c:29:9f:43:26:b8:02:04:
70:bd:b4:9c:ce:5e:97:5d:e5:ce:5e:06:0a:27:e2:e3:e4:5b:
2d:d1:55:3b:74:c0:56:27:57:a8:ff:bc:1a:67:b6:fb:6e:78:
ee:dd:82:ba:64:3e:03:21:4f:e6:78:77:10:0d:0d:4a:2f:5b:
ba:e7:83:89:c7:28:27:41:da:26:30:66:ee:7a:00:14:1c:dd:
a6:3a:bf:5a:a4:2c:34:30:86:90:e1:85:c5:5c:5e:cd:06:76:
ec:e4:2e:66:b2:7a:a3:1f:e6:25:59:f3:4e:8b:f1:43:7d:7e:
0e:f8:c8:e5:5f:60:73:30:ec:3f:38:f9:36:07:ff:5a:04:a3:
68:2e:98:99:10:33:65:cb:15:48:fd:4d:cf:e2:fe:4d:0b:b0:
a9:e8:0d:02:b3:d1:8b:23:23:ac:95:48:8e:a7:c4:08:20:b0:
1d:f6:e9:05:80:f9:db:ce:0c:db:64:4f:59:cb:1a:b2:53:3e:
c8:36:30:f6:20:01:08:b8:77:3e:a5:05:4a:48:aa:33:d0:73:
03:c2:57:10:f2:89:f3:58:aa:d0:b9:1b:fd:d9:66:bf:89:8f:
4f:98:9a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 11:41:41 2025 by rpki-client