Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kDaoR4hjCi5UXsp-s3S39qTGAK8.roa
File: kDaoR4hjCi5UXsp-s3S39qTGAK8.roa (raw, json)
Hash identifier: utAofGSLAseEg/H82eHl+2IQFpv+CWYIVLf8J/CTYBE=
Subject key identifier: 90:36:A8:47:88:63:0A:2E:54:5E:CA:7E:B3:74:B7:F6:A4:C6:00:AF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7FB98EC5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kDaoR4hjCi5UXsp-s3S39qTGAK8.roa
Signing time: Sat 30 Apr 2022 02:10:33 +0000
ROA not before: Sat 30 Apr 2022 02:10:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2142867141 (0x7fb98ec5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 30 02:10:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9036a84788630a2e545eca7eb374b7f6a4c600af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:31:3a:30:a8:61:a8:1d:12:f9:60:3f:f8:2c:
e2:13:8c:d2:7c:cb:a9:97:fb:8d:0d:b4:34:5e:c0:
e3:99:67:48:30:87:3d:bd:b5:fa:d2:a9:66:0e:36:
a3:83:b0:87:78:b2:c0:38:c3:c4:9b:1a:d1:92:9a:
7a:20:fd:ec:1c:5e:de:c7:33:90:df:18:14:fe:0e:
5a:df:8d:53:be:05:4d:72:95:91:1a:44:73:3e:61:
75:f4:6b:5e:9f:a3:c0:04:07:32:82:21:94:81:a3:
cc:a5:c2:53:3e:04:ea:33:06:11:bd:21:ed:80:09:
bc:b4:49:e7:ef:72:19:ee:fd:82:64:8e:c4:3e:f2:
d9:e4:ba:ee:f3:8d:7d:ec:b6:aa:5a:0f:95:3f:71:
94:8f:4c:34:34:0a:01:05:f4:ec:0f:07:f0:56:ad:
91:1b:40:40:44:97:34:49:39:9f:61:08:0e:0a:f9:
c5:b1:df:08:0f:d1:a7:c2:9f:c2:f5:50:0e:31:3d:
91:1f:74:4e:76:58:ff:47:19:2d:7e:c0:be:e0:29:
1c:16:24:39:cc:9c:a3:e7:51:e9:91:30:74:43:3b:
ad:86:4e:b3:67:a2:10:b1:58:09:d6:64:ce:2a:c0:
dd:c7:79:8b:b8:10:d4:6e:81:2f:75:a9:4e:ac:ed:
2a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:36:A8:47:88:63:0A:2E:54:5E:CA:7E:B3:74:B7:F6:A4:C6:00:AF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kDaoR4hjCi5UXsp-s3S39qTGAK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7e:11:3d:2e:5c:de:10:b6:8d:72:f3:e4:f2:d3:70:7e:39:77:
2d:9c:7e:9a:e0:05:87:e5:0e:ad:df:10:cd:e9:f1:e0:6b:91:
51:13:3a:64:1f:66:96:30:cb:4b:21:5b:b7:49:d4:f2:6c:7a:
04:12:b1:4f:e1:8f:60:5e:f5:1c:d6:b7:19:58:0a:f2:bf:20:
c2:3f:f5:fe:85:b6:4e:e1:77:32:65:81:ee:f1:75:f1:03:cf:
1f:00:bf:9e:c9:55:9a:f2:8a:e2:9e:f6:ff:90:14:73:ee:6f:
e9:81:66:55:89:22:86:b4:8d:0b:6d:f6:0c:39:de:d8:4c:c7:
09:06:94:c9:4e:2f:b6:53:66:f8:80:56:e1:63:09:e9:fb:0e:
7a:aa:86:c8:69:23:ec:1a:a3:df:a7:84:cd:f7:27:99:0a:1c:
b4:b4:57:a9:00:6f:80:93:d3:05:ae:7f:de:dc:5b:ee:0d:e0:
78:70:fe:e3:b6:eb:e6:eb:a9:9a:fd:7c:b9:4f:a5:f8:2a:92:
43:72:d1:f6:e5:24:d9:a4:78:0e:d4:6d:78:be:e5:84:db:8b:
64:32:95:0a:61:33:99:d5:fb:67:01:c5:51:c1:9b:85:85:5f:
c2:d5:19:f1:f8:ee:9b:e3:9c:fc:e6:b4:21:0d:fd:8c:d7:7e:
24:27:8a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:44:08 2025 by rpki-client