Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ewAVECOhT3IwM7uyOoSbK3yjyAQ.roa
File: ewAVECOhT3IwM7uyOoSbK3yjyAQ.roa (raw, json)
Hash identifier: FCnjBcOHdgJPVuKr7IZrT8kXr5a8ld6lWOkqTU8ahXg=
Subject key identifier: 7B:00:15:10:23:A1:4F:72:30:33:BB:B2:3A:84:9B:2B:7C:A3:C8:04
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 725DA34D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ewAVECOhT3IwM7uyOoSbK3yjyAQ.roa
Signing time: Mon 14 Mar 2022 04:13:05 +0000
ROA not before: Mon 14 Mar 2022 04:13:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1918739277 (0x725da34d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 14 04:13:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7b00151023a14f723033bbb23a849b2b7ca3c804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7c:f4:f1:8b:9d:58:e6:c3:d1:d3:89:e0:6d:
d2:e9:93:b1:50:15:57:38:65:f5:5e:38:48:4f:12:
6e:06:ea:d0:60:c3:c7:8b:1e:98:f5:cb:66:d2:63:
0c:3a:49:b5:74:db:f9:f4:75:b4:f1:73:c6:93:ba:
04:c4:d6:d1:0e:c6:a5:84:d8:c9:96:3e:78:14:61:
ed:da:ae:04:d5:a6:f4:d3:ed:fc:2b:1a:a7:ac:27:
60:c1:29:d8:d5:31:44:f7:61:fb:c6:89:fd:fe:5d:
43:a3:2e:d2:41:b2:45:4f:57:88:a7:2d:d0:09:cb:
85:39:92:c5:09:dc:18:be:72:47:5d:e3:17:97:0c:
fc:69:fa:8e:95:2a:b4:06:cc:56:8c:81:8d:01:03:
ea:68:4b:24:ea:04:cd:6a:07:2e:ed:97:43:36:48:
dc:45:d4:19:b5:ab:38:f9:cc:e2:dc:43:2c:08:f0:
4f:49:da:5a:c6:8e:d0:54:53:6c:c8:8a:29:42:ea:
72:86:a0:42:72:6c:29:65:3d:0b:55:8f:34:81:6f:
a4:18:ac:09:4a:2b:a0:13:74:93:7e:b9:b7:bf:bf:
6a:8d:d4:17:2b:15:ca:a7:28:c9:8f:2e:96:15:21:
3e:b6:d2:53:c8:06:6e:88:cd:27:5e:87:51:eb:9e:
ef:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:00:15:10:23:A1:4F:72:30:33:BB:B2:3A:84:9B:2B:7C:A3:C8:04
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ewAVECOhT3IwM7uyOoSbK3yjyAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
52:92:8c:cf:7e:f3:64:4c:dd:60:48:89:3c:30:e4:8b:a8:bd:
01:61:f0:00:c7:47:e3:1f:f6:ae:7c:3c:2b:d2:05:8b:f5:a1:
75:dd:b3:83:1d:d0:09:bc:38:1d:60:00:43:a4:12:12:49:21:
18:20:f3:ce:45:61:6f:88:92:eb:47:0f:eb:dc:ff:fd:33:9e:
ab:5a:34:c6:42:87:3b:d6:94:f6:30:0b:3d:4b:1f:d6:a0:9f:
ca:8d:e2:18:25:6e:4e:b3:92:e0:1c:6a:dd:ac:2b:73:a0:94:
3a:0f:5f:eb:f0:f4:0e:91:07:db:5f:5b:6b:f2:43:34:08:b8:
57:d2:90:43:8e:5c:e8:43:a1:04:a2:ad:22:c0:62:15:10:86:
39:38:b6:58:41:6a:f8:9c:3e:f9:10:3d:b8:78:5d:90:af:f0:
2c:1c:ff:c8:31:04:cd:be:98:09:5f:32:20:29:9d:c2:1b:90:
95:f1:a0:a8:66:44:3f:4e:ee:fb:5a:e3:d1:2d:72:56:de:1a:
78:72:20:7b:20:17:c1:0c:b0:00:c3:ac:8b:c6:0e:10:fd:2f:
60:ea:46:a8:da:40:3e:53:b1:66:a3:ec:96:ea:48:7d:a9:ca:
38:19:ed:ae:70:2b:6c:14:c5:dc:5d:7d:cf:ad:68:a7:21:2f:
05:e2:a9:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 10:53:49 2025 by rpki-client