Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eQI6Ze8pVKThdT1dZ3v_Ohh-we0.roa
File: eQI6Ze8pVKThdT1dZ3v_Ohh-we0.roa (raw, json)
Hash identifier: lZZTXsG/eWxfMzO0k1wTlhyQwEBJF6hYgWnaEn1miAs=
Subject key identifier: 79:02:3A:65:EF:29:54:A4:E1:75:3D:5D:67:7B:FF:3A:18:7E:C1:ED
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182D3D915DDF1E30E9FA23E6ADB678713F5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eQI6Ze8pVKThdT1dZ3v_Ohh-we0.roa
Signing time: Thu 25 Aug 2022 07:13:15 +0000
ROA not before: Thu 25 Aug 2022 07:13:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d3:d9:15:dd:f1:e3:0e:9f:a2:3e:6a:db:67:87:13:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 25 07:13:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=79023a65ef2954a4e1753d5d677bff3a187ec1ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f7:6a:73:ea:3d:a4:3d:3e:c6:5c:0b:13:e5:
91:bd:0d:a2:41:6a:82:0b:a3:a8:94:d5:74:e3:2d:
c9:11:91:cf:fc:a3:7f:1b:87:d7:01:5e:78:73:57:
94:d9:4f:b7:bd:79:70:95:35:ec:16:1f:24:28:e3:
f1:18:29:d5:f6:b6:99:be:d6:ec:b6:51:02:5f:98:
76:2b:10:70:3f:16:a4:b7:50:44:6e:a5:54:ae:73:
59:df:bb:95:4e:ee:4f:ee:a9:24:1f:05:a2:f1:90:
67:3e:4a:66:c1:65:b7:89:30:0e:04:1b:9e:eb:b7:
0a:30:1b:8e:5b:ec:f1:46:64:80:6f:c5:1e:02:56:
6a:1f:24:f1:fd:4a:b5:f4:af:06:c6:25:c9:f8:e2:
53:62:64:4e:2f:74:6f:c9:30:85:33:52:1b:d0:d8:
2d:4e:3f:58:6d:4e:d6:87:18:e7:e3:ab:0c:14:d1:
df:21:5a:7f:5e:c7:e1:c4:57:b5:af:70:04:0a:ac:
78:ee:8b:83:a5:c2:08:7e:df:a9:00:5d:c6:24:65:
9e:56:40:f1:21:ac:56:06:4c:e1:3d:17:29:b6:a1:
fd:f3:ec:71:d7:04:b5:68:09:6a:fa:fe:cc:3e:0a:
5f:72:b4:7e:0c:f7:ee:60:96:64:03:9b:49:d9:47:
c1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:02:3A:65:EF:29:54:A4:E1:75:3D:5D:67:7B:FF:3A:18:7E:C1:ED
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eQI6Ze8pVKThdT1dZ3v_Ohh-we0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b3:ec:d4:84:7b:cb:b0:11:73:6c:cc:57:8d:db:ea:6f:24:7f:
a4:7f:5e:76:47:9e:d0:8b:19:a2:63:f2:85:f9:fd:fb:71:41:
1a:df:c7:5f:85:dc:ff:d6:4a:89:a1:0e:1e:7d:67:44:57:51:
7e:c0:69:f9:6e:29:31:4c:0a:29:49:8e:1e:17:a8:41:b5:d5:
99:fd:0b:c8:e8:ac:af:32:53:eb:c3:e5:f2:be:c1:58:f3:b6:
56:8e:39:fd:90:c6:ba:b2:ea:13:72:38:e3:a5:ef:6e:ef:a8:
94:6a:14:8f:d3:71:2d:26:b4:cf:9b:bc:26:41:7f:ac:58:89:
f2:92:34:2a:e1:9d:f7:1c:f4:7f:3b:54:b3:49:0e:1f:ae:9d:
8a:51:b1:14:9f:ba:37:ee:5b:bc:f8:6a:dd:0c:7b:ce:52:b3:
66:a2:fb:68:c8:36:06:c6:e7:63:f0:2c:62:e2:01:e3:31:93:
9d:ed:5d:26:fb:c4:fe:41:52:6f:00:ab:85:ff:10:a4:73:1c:
11:51:0c:4a:7b:c0:70:e9:36:b2:21:76:aa:e0:c9:6c:91:f7:
eb:10:29:70:cf:b4:a2:1c:82:dd:3a:65:c4:fe:3c:94:2f:04:
9f:38:b6:70:33:dc:9e:7d:54:1a:d0:09:f4:1a:f8:7a:f0:78:
fc:93:df:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:08:10 2025 by rpki-client