Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fU9bYUuyi9Y1u0Ur59SvLTukyIg.roa
File: fU9bYUuyi9Y1u0Ur59SvLTukyIg.roa (raw, json)
Hash identifier: Tnm6R6enYbU22wsZClYwv2aLJ+DxRmuNdM4xg0u6kkw=
Subject key identifier: 7D:4F:5B:61:4B:B2:8B:D6:35:BB:45:2B:E7:D4:AF:2D:3B:A4:C8:88
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 879686AD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fU9bYUuyi9Y1u0Ur59SvLTukyIg.roa
Signing time: Fri 27 May 2022 08:08:13 +0000
ROA not before: Fri 27 May 2022 08:08:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:180:ff9c:1e7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2274789037 (0x879686ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 27 08:08:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7d4f5b614bb28bd635bb452be7d4af2d3ba4c888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a1:45:1e:07:ae:f7:0b:f0:7e:36:40:58:28:
68:e1:31:ac:9a:1d:d9:a2:94:19:4a:46:82:c2:83:
89:3a:f9:75:d7:b6:66:f5:83:1b:6c:75:9f:75:75:
1b:83:b3:49:f3:51:10:20:54:1d:a7:57:39:47:78:
71:5e:64:40:61:c4:33:22:ac:76:b7:94:e9:88:29:
3b:b4:a9:68:c7:f9:79:20:ac:19:e1:73:df:ae:22:
92:56:54:24:3b:29:4c:6f:70:9c:5e:20:67:60:02:
83:dc:08:41:5d:e6:5f:41:fa:59:b0:9d:98:61:a4:
dc:62:8e:e2:51:41:47:b9:d0:98:92:d3:80:f6:1e:
ac:90:78:32:c6:d6:59:3b:20:b0:52:3e:cb:4b:5c:
ca:8d:33:ae:b3:eb:12:19:de:60:1d:01:78:7f:d8:
5c:06:0a:56:26:08:93:62:2b:3a:37:d4:43:2f:07:
c2:6f:fa:13:55:73:c8:7f:35:be:c2:f4:54:0f:39:
c2:d7:b4:b5:20:f3:2f:5f:5f:a8:a9:5a:5b:ee:76:
6a:7b:85:85:8a:21:71:98:ff:f1:aa:bf:81:4f:32:
b1:55:6a:bf:56:f7:c1:d9:06:6d:e9:c1:b7:eb:df:
f3:f4:f1:1c:6a:d4:7c:b6:f3:8b:82:91:7c:24:25:
87:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:4F:5B:61:4B:B2:8B:D6:35:BB:45:2B:E7:D4:AF:2D:3B:A4:C8:88
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fU9bYUuyi9Y1u0Ur59SvLTukyIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
99:2c:da:9d:d9:f9:f6:bb:92:ce:ee:fc:b5:6d:9c:dc:5d:c1:
0a:d5:43:32:43:6a:5f:b4:6b:58:a3:c5:43:ea:32:2e:01:57:
f9:2c:13:ef:7d:a9:a9:80:10:5c:4f:5b:1d:33:d6:10:a4:fb:
81:80:9f:45:78:ca:eb:28:ff:4b:e5:40:39:a6:dd:cc:76:33:
eb:ab:4e:21:c3:34:c1:55:50:38:44:d1:84:38:ea:47:65:23:
41:fb:9a:e2:ad:b8:a6:f6:a3:d9:52:d0:4e:39:52:20:f9:03:
75:12:6c:85:c6:a1:db:69:53:3b:88:b3:df:3e:19:f6:9d:6a:
bb:d0:a4:48:fa:79:09:ba:70:f3:c8:3a:65:50:43:83:a8:82:
1b:1e:6f:c4:c5:12:64:a1:41:7f:96:62:f5:9e:28:bf:d6:fe:
b7:2d:16:44:cc:76:a0:d1:96:5c:c8:58:0f:00:ed:88:b3:45:
44:2e:28:a3:4d:1e:d2:bc:30:7a:e2:b9:0c:38:9d:93:e5:e0:
1e:fe:28:da:3b:0f:e6:0f:a9:cf:60:1a:cd:88:3b:53:51:7c:
07:7f:f4:1d:40:5d:d6:0d:bc:97:7c:9a:6e:c6:cb:df:f8:c7:
5a:f4:c8:76:f0:69:b8:48:86:43:8e:38:28:06:b5:6c:2c:a7:
cd:95:9b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 13:40:52 2025 by rpki-client