Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eiKiztpWCSfFftN-1fJ2biFv6HI.roa
File: eiKiztpWCSfFftN-1fJ2biFv6HI.roa (raw, json)
Hash identifier: bugnWyQWHARAas8AtESWsPZAU80Hy1nWG/1vCDgZiH8=
Subject key identifier: 7A:22:A2:CE:DA:56:09:27:C5:7E:D3:7E:D5:F2:76:6E:21:6F:E8:72
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 72127BB9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eiKiztpWCSfFftN-1fJ2biFv6HI.roa
Signing time: Sun 13 Mar 2022 02:09:30 +0000
ROA not before: Sun 13 Mar 2022 02:09:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1913813945 (0x72127bb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 13 02:09:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7a22a2ceda560927c57ed37ed5f2766e216fe872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a1:6c:f6:63:24:ec:1c:51:ce:42:34:a5:05:
92:9a:46:fb:61:93:68:69:be:12:2b:37:fd:ae:bb:
1e:02:a0:fc:41:17:50:90:ab:b0:62:79:e1:f2:2a:
b8:b1:c1:ed:e4:c5:fc:fb:48:c6:58:e6:a1:01:99:
61:95:06:13:96:30:25:3a:ce:14:4d:e7:c7:56:8f:
5a:36:ee:51:69:00:14:db:51:03:2a:8f:11:4b:55:
6f:c3:95:a3:e9:ff:d5:07:37:a0:d5:f5:97:35:11:
ee:4b:33:32:20:55:f5:1e:94:60:25:b8:7c:a3:28:
f2:e6:4e:3f:49:3f:b9:7b:6b:e1:4d:7a:40:13:ac:
7e:97:23:c0:1b:8c:ca:b8:35:67:bd:f0:0c:b7:60:
23:03:3d:4a:34:e4:a4:7c:72:44:5f:36:07:7f:42:
f9:5f:d8:6c:e5:60:40:5e:5e:1b:54:d7:eb:93:92:
99:54:16:59:c7:99:0c:a8:bd:8d:2a:37:96:ad:4a:
a6:58:53:b8:8a:ee:97:19:8b:a0:a2:18:9e:21:0a:
61:ab:7d:cf:45:39:e2:c0:b1:d7:51:80:e1:bb:cc:
a8:68:30:c8:69:82:b2:8d:fe:51:61:64:19:7d:c8:
d9:b9:96:06:39:8b:9b:37:02:84:06:a5:c4:8c:06:
6e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:22:A2:CE:DA:56:09:27:C5:7E:D3:7E:D5:F2:76:6E:21:6F:E8:72
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eiKiztpWCSfFftN-1fJ2biFv6HI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
07:2c:9b:fa:91:72:b9:98:ea:68:93:2e:8b:01:ef:24:ea:07:
e2:47:d5:17:59:88:72:d8:a7:34:75:56:ce:70:1e:4d:81:05:
a5:fb:29:2c:1d:17:65:39:70:77:7f:e1:ea:cb:c5:ff:6a:75:
28:bf:ab:eb:d6:02:5b:4b:11:3f:e6:9f:e5:94:88:a3:84:d8:
dc:30:f3:3c:46:d5:a3:59:bc:da:30:21:c1:51:4a:e6:15:33:
92:1e:8a:58:b1:db:89:ef:d8:eb:aa:82:fc:47:02:0c:b1:b8:
02:e2:c6:66:41:50:68:88:a5:fb:9d:e9:2c:ea:3b:c8:2c:e4:
04:c6:d9:50:a6:45:78:2a:61:cc:1c:c2:88:2a:31:05:10:b1:
ed:e9:51:16:5c:f1:1c:6f:8e:31:60:3c:67:64:40:c1:50:e4:
43:3c:39:f4:34:71:cb:c1:cb:94:45:a3:f9:eb:1f:fa:7f:a0:
08:cd:bd:b9:08:35:08:4f:62:d4:e4:3f:1c:64:e5:00:02:e6:
4f:46:12:1d:79:47:8c:67:a2:18:5a:fc:94:3c:f9:04:04:2e:
87:1a:55:85:30:eb:de:29:17:41:18:0c:1f:41:1b:21:73:56:
de:02:36:dc:1b:f4:9e:cf:21:1d:35:e2:85:71:ad:c2:e2:43:
34:00:3c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:44:48 2025 by rpki-client