Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k_PjJ46H-Zc8e89E8RxR_Btb2q0.roa
File: k_PjJ46H-Zc8e89E8RxR_Btb2q0.roa (raw, json)
Hash identifier: XJAQGtJrSeCZVZTm9MNE5QXpRS/OMU2ekYVFRErYLeg=
Subject key identifier: 93:F3:E3:27:8E:87:F9:97:3C:7B:CF:44:F1:1C:51:FC:1B:5B:DA:AD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7FE62953
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k_PjJ46H-Zc8e89E8RxR_Btb2q0.roa
Signing time: Sat 30 Apr 2022 15:10:33 +0000
ROA not before: Sat 30 Apr 2022 15:10:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2145790291 (0x7fe62953)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 30 15:10:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=93f3e3278e87f9973c7bcf44f11c51fc1b5bdaad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f4:75:53:3b:1f:23:95:48:ff:db:b9:51:d1:
da:d8:8a:41:8a:28:08:b9:0e:54:f8:c6:4d:63:59:
90:f8:4f:3a:ec:3b:21:3d:2b:96:28:34:73:1a:66:
c3:7f:c8:17:c8:0d:5c:2a:f5:39:b2:56:16:b0:26:
72:83:2f:ce:7f:67:a8:17:01:41:d0:66:d3:23:aa:
e3:79:41:c8:33:71:50:eb:02:4b:3a:6a:81:13:62:
9b:13:97:60:ba:32:e4:40:ea:c9:6f:e3:87:90:b8:
61:91:cc:44:c4:15:9a:1a:fc:4e:8b:c5:f7:b8:c6:
5a:ee:32:14:e6:08:e3:01:a5:5f:70:ff:22:53:24:
c9:78:94:51:d1:48:b1:28:04:1f:89:14:45:a5:d4:
b8:ff:23:bb:3f:9d:b5:a7:c5:57:f5:14:17:f1:00:
74:e7:58:e5:ba:f6:da:f5:95:b9:d3:8b:78:40:4d:
06:c3:c5:1a:80:29:d4:b3:fe:d9:d4:0d:ad:dc:9e:
94:0a:46:b5:e5:49:5b:a9:a7:88:98:a6:66:af:36:
4d:e3:16:f5:06:7c:55:3d:5b:28:09:ca:1d:ae:cf:
51:86:61:10:b5:7c:45:b1:c0:4f:b3:6e:7d:b7:c7:
b1:1f:0b:f8:ae:a5:ed:01:7a:84:e1:56:0b:37:ec:
94:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F3:E3:27:8E:87:F9:97:3C:7B:CF:44:F1:1C:51:FC:1B:5B:DA:AD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k_PjJ46H-Zc8e89E8RxR_Btb2q0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8d:36:ab:3f:49:8c:21:b3:ed:09:9c:cb:3c:78:7d:07:9b:42:
17:83:6b:52:4c:7b:7c:d3:b2:99:17:a3:27:62:67:c2:a6:d1:
0b:cd:68:10:bc:b0:b2:25:3c:51:0a:5a:26:5e:6d:12:b4:70:
3e:65:e2:17:c7:82:51:e2:bd:6c:ea:2d:e3:6c:4e:c8:e4:5f:
6f:e8:29:d5:7b:a2:fc:75:81:a0:45:c7:c0:56:86:39:19:ee:
91:ca:29:60:b8:42:f2:ec:6d:3c:ac:7c:45:d7:74:99:a1:94:
47:50:07:75:b7:cc:e6:02:ba:7c:12:aa:dd:42:9c:5b:cf:1e:
a2:6b:06:e6:4c:76:82:b5:22:15:37:11:e0:e2:94:50:d5:6f:
89:e0:7b:b6:97:a6:90:8c:67:93:60:f0:9c:04:d3:19:47:30:
d3:b9:4d:5e:78:81:e9:d8:da:96:99:98:6b:41:b7:4a:a9:70:
ee:f5:f4:0f:f3:e0:b4:f1:f5:8c:1b:f9:7a:09:bb:89:c6:9d:
60:83:5f:7c:c6:64:8c:ba:a0:ee:cc:be:05:36:21:e0:68:6e:
b9:ac:ec:df:4c:12:ec:19:20:6b:4b:12:57:9b:b5:91:bc:ec:
72:9b:4f:c2:05:e2:20:42:56:ec:0f:4a:49:fb:27:44:f9:19:
0c:d9:40:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:49 2025 by rpki-client