Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iOE4zsUR_qbVHEfgdJkg8ANr7kw.roa
File: iOE4zsUR_qbVHEfgdJkg8ANr7kw.roa (raw, json)
Hash identifier: T4E2J/CjUGAQGtzWTj1RETwn6wbWvxZSPZltset+81Y=
Subject key identifier: 88:E1:38:CE:C5:11:FE:A6:D5:1C:47:E0:74:99:20:F0:03:6B:EE:4C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7A30488E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iOE4zsUR_qbVHEfgdJkg8ANr7kw.roa
Signing time: Sun 10 Apr 2022 17:10:33 +0000
ROA not before: Sun 10 Apr 2022 17:10:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2049984654 (0x7a30488e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 10 17:10:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=88e138cec511fea6d51c47e0749920f0036bee4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a0:ab:e8:25:69:d6:ef:3a:44:b9:4b:20:b1:
6e:3f:4b:02:8d:da:5d:eb:a2:44:e8:98:b6:4e:93:
cf:50:76:ae:25:d6:13:97:d5:c2:06:1c:4c:60:1d:
8f:21:36:30:19:bc:fc:19:39:81:16:12:f4:09:e8:
c1:44:f7:5c:12:5c:4c:df:45:73:aa:02:1b:db:08:
eb:88:7c:8d:a2:02:45:70:a8:89:9a:5e:e8:b7:6f:
7a:e8:27:a2:eb:4d:22:95:7f:4b:ac:61:cd:34:2a:
2a:4b:c7:c2:df:5e:dc:04:f9:2c:c1:74:16:21:32:
99:00:eb:f7:d3:12:20:e2:8d:a1:9b:3e:9c:e8:f3:
37:1f:5d:3c:45:92:18:c2:ec:53:6b:ec:7c:4e:f1:
62:c0:36:a7:39:8e:61:ce:81:63:95:0e:6e:d8:24:
15:f3:1d:07:b1:2b:f1:80:f2:f2:3b:cb:ae:4e:96:
49:77:71:fd:b0:e6:56:28:3b:68:9b:84:fb:61:76:
f8:f2:da:4c:a0:d0:b8:30:9e:bd:9a:72:8b:c7:4e:
37:be:07:85:9e:c4:79:90:f9:c9:4f:fb:20:22:cf:
9b:0f:5d:13:8f:cd:e6:08:87:96:b4:ac:88:ee:b5:
55:34:36:cc:4a:f6:33:92:b4:a8:2d:63:7c:fa:ed:
32:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E1:38:CE:C5:11:FE:A6:D5:1C:47:E0:74:99:20:F0:03:6B:EE:4C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iOE4zsUR_qbVHEfgdJkg8ANr7kw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
79:08:c2:c3:39:6f:09:d6:ec:d2:0b:22:83:f0:ec:2d:cf:66:
f8:4e:d4:4e:3d:48:7b:fb:9d:53:0e:08:d5:ea:34:b3:3c:86:
f8:41:af:84:3f:af:08:67:fd:45:56:5f:1e:55:99:1e:aa:f9:
dc:7a:b0:06:60:6b:ce:ef:7e:e5:b2:de:fc:9f:47:b6:63:3c:
54:90:6b:16:3c:96:43:d2:43:99:ac:1d:22:07:61:5e:ce:6c:
ce:12:47:ec:da:d8:98:44:76:6b:05:ef:89:4f:12:49:0b:2e:
be:ea:39:63:6a:82:b2:1d:4c:9d:6c:51:f7:d1:ef:0d:e0:88:
07:e2:a7:be:21:f2:3f:7c:41:dc:2e:bb:fc:5a:39:51:8a:a9:
f6:d8:77:06:3b:04:f7:33:06:dd:18:5a:22:9c:9b:df:62:35:
45:0c:ec:c1:86:ed:3a:69:5a:16:3f:62:2e:08:ca:8c:bf:27:
0e:c6:31:0f:aa:12:38:c5:4e:8a:34:a2:a7:f0:99:d2:8e:d1:
18:ee:f3:57:2a:8e:ed:45:58:28:d9:a0:64:d6:6b:33:75:9b:
be:c4:e3:a5:33:3d:e9:4d:95:ec:e2:82:4c:59:43:a4:65:1b:
26:a8:e9:6c:46:11:f4:84:4c:eb:dd:9f:75:ac:47:71:92:39:
41:a7:38:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:13 2025 by rpki-client