Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ld91WX4jGD1QMH_hnPi9kfB1Imo.roa
File: ld91WX4jGD1QMH_hnPi9kfB1Imo.roa (raw, json)
Hash identifier: scNtSAL0fKToAEJrcuiD3lKK3QWu7e1auCmBlZ4yCIU=
Subject key identifier: 95:DF:75:59:7E:23:18:3D:50:30:7F:E1:9C:F8:BD:91:F0:75:22:6A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 75C7853A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ld91WX4jGD1QMH_hnPi9kfB1Imo.roa
Signing time: Sat 26 Mar 2022 04:11:33 +0000
ROA not before: Sat 26 Mar 2022 04:11:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1976010042 (0x75c7853a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 26 04:11:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=95df75597e23183d50307fe19cf8bd91f075226a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bb:97:cc:d1:69:04:03:1a:f8:00:18:53:47:
d4:8b:80:c7:54:67:68:12:34:d4:59:fe:22:11:48:
2c:92:8e:77:28:d8:dc:66:ce:d2:ec:b6:dc:51:e7:
0f:02:b0:e2:41:aa:64:43:44:f7:1b:fc:e1:23:a4:
a1:0c:75:da:c3:31:35:72:b1:34:84:38:2e:35:4e:
13:80:9a:1d:0f:d1:65:36:e6:fa:81:9f:56:9d:59:
a3:43:5d:80:c5:46:fb:9e:6c:20:66:18:8e:5a:3e:
b3:44:48:17:c1:ad:da:6a:db:ea:9a:41:cb:9c:4e:
28:7d:c7:c1:fb:05:5a:27:42:d3:db:4c:20:86:40:
25:b1:f2:91:c8:be:cc:fa:81:44:0d:3b:ed:d5:54:
aa:3f:8d:aa:40:7b:51:8a:9f:dd:06:80:ca:ce:de:
64:39:ee:5b:0d:bb:78:1a:17:42:64:c3:b2:f9:08:
d2:36:d2:28:e3:3b:d7:86:ab:09:a4:fc:f0:27:ce:
79:c3:80:71:d6:d9:d4:39:65:6b:8c:9c:99:8d:f2:
72:67:c1:48:bf:4d:15:51:55:f0:8c:ff:e2:f1:53:
b3:27:17:87:34:6d:35:31:8b:d4:18:ca:96:03:53:
5c:93:25:21:3b:96:06:ae:86:c3:78:14:8c:dc:8c:
7e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:DF:75:59:7E:23:18:3D:50:30:7F:E1:9C:F8:BD:91:F0:75:22:6A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ld91WX4jGD1QMH_hnPi9kfB1Imo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5a:e1:c3:80:40:24:37:dd:b5:9d:fd:c2:01:fe:7f:24:86:26:
bd:a7:5e:7e:21:53:d3:04:5b:92:c3:67:5a:71:11:a9:64:7e:
43:7b:b1:b6:1f:f0:9e:cf:d0:65:29:61:9f:99:42:3e:fb:42:
e8:9e:dc:e7:44:7d:ae:a3:25:20:2b:c2:86:27:6d:dc:49:7e:
87:74:b2:5c:e5:25:47:92:5c:5c:be:e5:69:ed:84:4f:b1:fc:
b0:45:d9:ba:3f:ad:3c:2c:13:11:5e:13:a6:f4:13:ab:77:c4:
07:61:3e:cb:cf:70:aa:8b:68:93:4f:a9:a5:c7:f8:84:e6:84:
14:e9:13:60:83:57:b2:c2:d3:78:f2:8e:04:f6:de:7e:a1:60:
b6:91:e2:05:da:6b:f3:9f:16:f3:98:d4:70:4d:13:b7:9f:fd:
c5:8c:b1:a3:e0:c9:1c:40:1b:30:fd:4a:a7:01:bf:0d:3e:f1:
a2:2a:47:16:d3:c3:2c:97:1b:4e:4a:a5:43:b0:63:55:36:3c:
fa:b8:62:dc:19:76:b2:d9:0f:d8:a4:88:22:d9:74:95:c7:fd:
85:74:d7:a2:94:40:ea:85:d9:fb:3e:24:b3:5e:89:18:39:79:
c7:30:b0:37:94:8c:12:5f:63:64:d3:f1:03:06:ae:dd:c6:61:
a8:30:b1:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:45:20 2025 by rpki-client