Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dUjSZt1EGVQGt1V0KvHVVEP0xwg.roa
File: dUjSZt1EGVQGt1V0KvHVVEP0xwg.roa (raw, json)
Hash identifier: Ndq68s5Y2JJt1+WoWc4QZvz1dZfqY7+j+9YzvsDlZO0=
Subject key identifier: 75:48:D2:66:DD:44:19:54:06:B7:55:74:2A:F1:D5:54:43:F4:C7:08
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 891C0E0B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dUjSZt1EGVQGt1V0KvHVVEP0xwg.roa
Signing time: Wed 01 Jun 2022 21:10:20 +0000
ROA not before: Wed 01 Jun 2022 21:10:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:180:ff9c:1e7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2300317195 (0x891c0e0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 1 21:10:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7548d266dd44195406b755742af1d55443f4c708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:33:68:5d:b5:85:d4:27:15:1f:3d:cf:56:e2:
de:8a:ef:e1:d1:a0:56:1e:ad:21:c3:9b:64:49:14:
20:94:77:c9:5c:f7:8a:71:46:ad:a6:f8:4c:08:ad:
6c:a0:1d:9c:76:e5:36:46:68:f4:42:31:27:2f:99:
07:48:29:51:fb:e0:16:60:fe:5e:d0:46:cc:6a:ca:
36:f2:3e:b9:04:5e:f5:31:c1:c6:88:64:e1:88:3a:
f6:4d:f5:cf:85:6c:ec:55:68:8f:94:03:6d:20:89:
c0:f5:63:0d:bc:56:6a:c4:97:ab:62:9f:be:c5:3c:
a6:cf:41:aa:42:f1:dc:32:71:e2:79:4b:3f:eb:d9:
ba:69:3e:b1:ee:35:f3:06:43:e1:2f:51:6e:54:34:
91:e6:e4:b3:65:0d:5f:7f:6e:70:2a:f7:da:ad:28:
74:1c:22:33:5f:4e:c5:01:5d:fe:44:9f:de:74:0b:
4b:a5:13:22:54:d9:72:d4:b8:18:bc:94:f0:87:62:
eb:f9:64:ad:68:c3:69:09:1e:e6:58:f3:e4:bb:1b:
43:b5:95:4a:d2:03:3d:20:92:47:6a:d8:fa:5b:a9:
b4:3c:fb:50:bb:dc:5c:dd:ce:bd:12:19:56:29:cb:
18:c0:8a:3c:dc:8f:c1:85:fa:79:10:4f:7e:6f:22:
88:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:48:D2:66:DD:44:19:54:06:B7:55:74:2A:F1:D5:54:43:F4:C7:08
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dUjSZt1EGVQGt1V0KvHVVEP0xwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
89:ef:76:4e:6f:b6:8b:58:fc:d2:3a:b3:7b:46:df:8c:85:09:
45:2f:c4:b1:ca:48:aa:08:c5:b0:76:2c:0e:35:cb:35:f7:81:
65:23:8a:b4:a6:b4:94:1b:9f:9b:33:cc:10:69:90:49:c1:f1:
17:17:f4:2d:c4:dd:5b:bf:46:e8:78:a8:a2:4e:16:c2:b2:4d:
6c:2a:89:bf:ce:6e:a5:63:b4:88:76:fc:d2:f7:48:27:27:b6:
22:f6:6c:a5:00:47:f0:00:bd:12:82:28:e9:cd:85:0b:92:27:
1d:f5:c7:50:83:ec:64:e2:0e:c4:3c:ea:27:0e:e0:9b:d8:7c:
35:75:66:20:85:5a:5f:ba:fd:33:a0:eb:38:b3:76:d1:0a:11:
79:90:af:e3:22:a5:83:79:91:5a:8c:34:9f:ab:7b:77:37:32:
14:af:fb:ed:3a:61:6b:32:f6:34:91:7d:59:dd:44:f8:3c:bd:
e1:be:8a:d3:20:c3:05:60:0c:cf:a8:90:08:f0:e9:b7:32:7c:
c0:13:fb:29:01:95:15:48:49:7b:d9:c9:b1:00:74:eb:a0:2a:
bf:18:ac:2f:09:e9:6c:dd:17:a1:3d:2d:35:14:96:f5:2c:8d:
9e:d2:84:83:52:27:d3:ce:4d:8d:f7:f0:02:c1:b3:22:f8:60:
80:82:1b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:16:19 2025 by rpki-client