Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d42xrx2QBrQtf11ZuwmATVgbucE.roa
File: d42xrx2QBrQtf11ZuwmATVgbucE.roa (raw, json)
Hash identifier: xTjxcyQztMT1OIdixp6aNRij/pzgabgWiufm7ftPev4=
Subject key identifier: 77:8D:B1:AF:1D:90:06:B4:2D:7F:5D:59:BB:09:80:4D:58:1B:B9:C1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018656E54B0F99FD6AFC0DB9F1C2D5D55582
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d42xrx2QBrQtf11ZuwmATVgbucE.roa
Signing time: Wed 15 Feb 2023 21:05:12 +0000
ROA not before: Wed 15 Feb 2023 21:05:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:56e4:8976/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:56:e5:4b:0f:99:fd:6a:fc:0d:b9:f1:c2:d5:d5:55:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 15 21:05:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=778db1af1d9006b42d7f5d59bb09804d581bb9c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cb:12:dc:c8:18:b6:32:3a:72:93:f9:8a:03:
c8:ff:af:42:16:ac:6f:f2:f3:77:50:1b:28:8a:ef:
32:02:41:65:9a:b5:04:1f:e4:84:6c:46:6f:a1:6a:
5b:5d:90:ab:9b:9a:95:1b:6e:a9:d0:15:f6:1d:06:
5f:8a:bb:1e:08:eb:fd:5d:b9:4c:47:91:22:5b:27:
d3:38:b5:8b:77:4b:d9:98:9a:88:d3:4c:55:92:52:
e5:cb:f0:0b:1c:98:bc:ba:37:7b:5f:3a:64:45:33:
9b:be:89:87:6e:45:ce:d0:96:a3:13:9f:36:4e:dd:
bf:bd:52:84:e0:bf:af:99:62:65:4f:a3:c9:fe:80:
b5:94:7c:ab:68:75:83:41:7c:ee:c0:7a:92:ce:36:
e3:f7:9f:c7:81:a1:7a:e6:cc:0a:e9:7a:3a:5f:c9:
50:1f:6b:8b:73:c9:45:1c:da:d8:8d:fe:3b:92:62:
12:6a:9f:b8:33:ff:27:a2:b3:2a:9a:41:e5:bd:4c:
0e:0a:a2:0e:cb:2b:19:cf:6b:59:52:bb:bf:eb:79:
72:bb:b3:c2:89:79:61:6c:45:40:46:ee:3b:60:11:
a2:ac:2c:7d:b7:8b:19:ff:1d:6b:37:59:0b:fd:40:
3e:52:e5:2b:ce:3c:d3:7e:9b:6a:00:35:13:bd:31:
1f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:8D:B1:AF:1D:90:06:B4:2D:7F:5D:59:BB:09:80:4D:58:1B:B9:C1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d42xrx2QBrQtf11ZuwmATVgbucE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5d:a2:c2:a5:59:b8:8e:50:35:be:0c:7f:b6:47:eb:33:5b:3e:
6f:42:f0:c9:89:80:f5:25:b1:81:87:2f:de:19:59:03:88:57:
2a:12:4b:0a:d5:b0:c6:87:18:88:e4:10:fa:74:ad:04:85:dc:
8c:14:b6:38:95:4d:8b:61:9c:2d:83:1e:ad:59:d5:9a:33:f1:
34:d9:2f:af:cd:e2:35:b4:23:dd:45:0c:9a:4a:23:5e:fc:b9:
c8:81:9a:fa:d5:27:bc:73:db:0f:c1:1a:de:72:1f:d1:9f:ce:
40:3f:10:3a:e7:b4:a0:dd:13:e7:9d:fe:f8:25:01:5c:ee:5b:
ad:9f:19:3f:e5:ee:09:d3:15:81:ee:2f:5f:66:94:cb:62:be:
24:9f:a3:d1:87:26:a3:a0:3e:58:c1:f5:c3:60:6a:8c:89:f4:
b1:f5:06:e1:68:d1:dd:f9:72:07:64:bb:7c:12:64:79:9f:6b:
b5:6a:90:54:dc:f8:03:60:12:d5:61:5b:7c:3d:d9:6d:0b:bc:
f3:ca:32:d1:d4:f4:7c:88:bf:55:ae:66:71:0d:42:66:8e:16:
d8:f0:75:72:f5:de:ad:47:10:f5:56:f6:c6:0a:5a:b2:23:e4:
5e:c7:ee:7f:75:99:8b:f7:72:b6:a6:71:8a:21:b7:56:7a:e4:
71:a9:06:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 04:12:56 2025 by rpki-client