Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fT5zd7k3X1QoDBPrxUn2avqHesQ.roa
File: fT5zd7k3X1QoDBPrxUn2avqHesQ.roa (raw, json)
Hash identifier: 0WwF+1azFQb/PY+b2SXWbxx3sh6JHGMu52IYEtVPYfA=
Subject key identifier: 7D:3E:73:77:B9:37:5F:54:28:0C:13:EB:C5:49:F6:6A:FA:87:7A:C4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7B989BED
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fT5zd7k3X1QoDBPrxUn2avqHesQ.roa
Signing time: Fri 15 Apr 2022 21:10:26 +0000
ROA not before: Fri 15 Apr 2022 21:10:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2073598957 (0x7b989bed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 15 21:10:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7d3e7377b9375f54280c13ebc549f66afa877ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7c:be:0f:32:89:16:62:23:69:54:67:de:41:
72:67:38:eb:a8:79:a1:c1:d3:b5:75:5f:05:c4:5f:
c6:73:9d:46:46:b5:db:38:02:50:a3:b2:09:1d:c3:
d0:8b:88:33:58:bf:26:a5:80:f8:0f:6a:a7:49:b2:
02:df:a6:03:8a:8c:ba:f2:e6:8d:34:1f:29:d3:fa:
f9:98:6e:ce:69:8b:aa:1e:c5:5d:03:22:e7:52:d2:
5b:63:f4:69:30:91:9e:98:42:e2:9c:a4:63:28:41:
f3:65:26:d5:a1:8e:3b:35:e2:31:7a:be:dd:b1:af:
f1:5f:13:c0:51:99:07:18:04:98:58:9b:de:98:38:
2b:25:f6:65:d7:54:bb:4d:28:47:21:b7:79:9c:30:
a3:e4:66:d9:36:cc:8d:bc:7f:91:97:f9:c9:d9:1b:
a2:b8:0b:1e:74:cb:7b:f8:f1:17:24:e4:35:ac:9d:
c2:29:18:64:6c:0c:4e:ed:f4:f5:71:9d:c0:1c:0d:
7c:57:6c:7d:32:c6:1b:e3:f9:62:b3:16:aa:06:2c:
f4:d5:4d:2f:75:b3:8b:53:0f:26:01:12:28:1f:52:
14:7c:f2:6e:bb:e4:7a:fc:35:09:1f:d0:9f:8b:c7:
e9:c4:c6:20:49:dc:75:ec:7b:73:73:c2:c1:d7:80:
64:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:3E:73:77:B9:37:5F:54:28:0C:13:EB:C5:49:F6:6A:FA:87:7A:C4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fT5zd7k3X1QoDBPrxUn2avqHesQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
07:00:cc:a8:7c:58:0a:6c:1f:f2:7b:a4:95:65:ce:c6:b4:b0:
79:55:02:b4:81:94:20:58:9b:cf:28:dc:63:c1:d2:43:ec:cd:
78:91:3c:34:04:c0:8a:97:fc:28:47:5f:de:49:71:e9:62:ba:
75:8d:f9:d4:04:9b:80:05:9a:cd:ac:b1:f1:23:a6:9b:1e:92:
18:37:83:c5:bd:3e:e3:c5:8d:2a:fc:8e:1b:2d:5e:0f:f5:e5:
1a:f8:a7:d9:1c:c2:ff:84:f0:0c:94:4a:ba:1a:fb:76:e8:69:
e4:91:45:dc:29:65:ab:68:c4:ca:cb:df:de:62:b9:16:8d:f2:
c6:8e:7c:0f:b8:a1:37:07:b6:a6:11:85:c7:b8:4e:55:1a:cd:
fd:3a:1e:39:47:58:70:bf:87:a6:b9:01:30:8f:3c:17:d8:63:
aa:4c:5e:9b:d3:8e:c3:aa:6b:46:2a:ed:66:c1:b6:b4:db:d5:
ab:90:96:86:ca:17:ce:fd:7e:cd:f4:80:d2:b5:5c:32:9b:a3:
61:e1:6a:ef:61:99:22:91:56:05:5c:40:28:fe:6f:d4:7d:32:
79:72:30:57:66:89:9f:d0:91:d9:f3:ea:d0:51:75:aa:b4:ef:
e8:49:68:17:10:e6:3c:05:d4:15:c6:e5:bb:80:00:7f:09:52:
85:a5:16:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:50:20 2025 by rpki-client