Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/i7Q485WE8hRTxTInQTKrCQvYoAo.roa
File: i7Q485WE8hRTxTInQTKrCQvYoAo.roa (raw, json)
Hash identifier: 5cESIXkvwcVrczKGhq6myrZn4OlHA7ShS8i1X7Da9+k=
Subject key identifier: 8B:B4:38:F3:95:84:F2:14:53:C5:32:27:41:32:AB:09:0B:D8:A0:0A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182BC07AC9D0E2B02600C6694B627087DF9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/i7Q485WE8hRTxTInQTKrCQvYoAo.roa
Signing time: Sat 20 Aug 2022 16:13:15 +0000
ROA not before: Sat 20 Aug 2022 16:13:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:bc:07:ac:9d:0e:2b:02:60:0c:66:94:b6:27:08:7d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 20 16:13:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8bb438f39584f21453c532274132ab090bd8a00a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7f:0f:ba:56:fe:ca:70:82:6b:38:c7:2a:65:
9c:07:24:b6:e6:de:70:0e:07:e1:7c:c4:56:a8:38:
6e:c8:47:10:53:6d:91:bd:1e:ba:b4:4e:d4:e5:b2:
e8:3b:52:67:3e:b5:07:1e:c0:31:dd:f6:4e:30:c3:
90:8e:34:16:37:88:4b:7c:cf:e9:0c:8e:e1:10:ee:
1d:04:75:5f:5e:54:4e:0e:20:82:1d:0f:c9:54:f8:
2d:ce:fa:d1:ec:82:33:91:59:e4:85:f4:a5:09:3d:
93:01:be:b6:f3:40:d3:fa:0d:e3:46:ac:a6:01:84:
5d:bc:e4:21:dd:af:9c:3b:c0:09:2b:f6:75:13:d0:
bb:34:76:12:27:3a:4f:eb:e2:f1:45:75:43:38:bd:
da:0f:14:96:bb:74:24:96:ea:44:18:8c:cf:1c:64:
f2:8d:b3:f1:1d:22:66:5c:df:98:7e:e3:34:33:3c:
f2:53:0c:89:49:26:c3:88:6d:cc:41:ed:e7:2f:1f:
15:a8:57:f6:17:01:e4:10:ae:b9:0f:1d:27:b7:c4:
d5:73:fc:f4:a0:a2:3a:05:c3:ae:35:e7:87:48:b7:
7f:dd:a3:33:f2:87:f7:92:24:72:52:0c:0a:13:97:
c9:b8:49:c5:8f:58:dd:df:0e:aa:91:49:a2:ef:b6:
ae:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B4:38:F3:95:84:F2:14:53:C5:32:27:41:32:AB:09:0B:D8:A0:0A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/i7Q485WE8hRTxTInQTKrCQvYoAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
35:c0:af:dc:28:1d:b2:c7:c7:f4:2d:f6:e9:1f:22:7d:80:27:
bc:88:96:a6:e2:14:85:50:fd:2a:61:31:a7:d7:e7:6a:aa:58:
d5:c4:42:b3:d3:63:49:81:bf:e3:4e:02:8d:95:1e:d5:c1:82:
a1:03:7b:43:03:56:f4:25:20:58:9a:b1:de:65:2c:9d:97:3d:
3e:d0:e7:cd:e2:64:5f:8b:34:6c:43:0c:38:a4:97:e5:3f:43:
55:a4:82:3a:db:a0:44:c0:30:1c:df:b5:0c:15:60:c3:94:a5:
d7:38:65:da:28:c2:67:f4:0e:47:0a:1c:98:48:17:57:83:1a:
9a:e3:ce:27:73:36:11:cc:5c:b8:f1:87:52:af:a5:46:90:93:
58:b0:70:1d:c5:f5:54:bd:cd:91:ca:50:7f:84:36:f8:58:09:
62:b8:67:f8:62:c1:42:24:85:c3:ba:63:1a:ec:8c:06:eb:27:
e7:b7:b2:00:3e:2e:5a:28:15:5f:aa:39:4a:26:ec:bf:02:90:
ad:93:11:49:4c:be:9b:b5:62:c1:9a:d0:b0:c3:59:b1:05:b6:
b8:30:4e:16:2a:09:66:d6:e1:79:82:27:8a:0c:01:ef:3a:77:
96:19:65:4f:b7:e3:2a:e3:be:f6:b9:5c:fd:8b:4d:de:18:c7:
81:29:72:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:38 2025 by rpki-client