Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/m25msCQ6TyejcHn_kNGegE5UM_8.roa
File: m25msCQ6TyejcHn_kNGegE5UM_8.roa (raw, json)
Hash identifier: 8H2OTvHD4n2YchEoY90UWATfdWRIZboYTxw+8KhviFY=
Subject key identifier: 9B:6E:66:B0:24:3A:4F:27:A3:70:79:FF:90:D1:9E:80:4E:54:33:FF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6CD8AAF7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/m25msCQ6TyejcHn_kNGegE5UM_8.roa
Signing time: Tue 22 Feb 2022 20:22:38 +0000
ROA not before: Tue 22 Feb 2022 20:22:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1826138871 (0x6cd8aaf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 22 20:22:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9b6e66b0243a4f27a37079ff90d19e804e5433ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:21:49:cc:81:eb:d5:9c:a1:33:64:50:67:86:
a0:30:34:94:8c:11:b1:9b:7c:5a:78:6c:98:96:e7:
18:a1:a2:ed:8b:a8:5d:e4:41:d0:77:fc:7c:5c:ac:
eb:44:70:a7:ba:07:d1:ca:b5:69:f7:8b:3e:c3:68:
b8:f0:cf:ed:1a:fc:4f:b6:63:f9:b5:85:a4:8f:de:
c2:e4:b0:f0:fb:f3:7b:49:97:09:5b:e4:ee:63:29:
13:40:f6:9d:b2:ea:b0:89:d9:71:95:12:c0:f2:7c:
1d:f9:cc:34:56:9f:15:ae:53:d3:e9:9a:67:52:97:
a9:b2:63:4e:4f:f6:94:db:71:42:ba:e3:ea:6d:7c:
b5:93:7e:83:dd:25:88:b5:37:63:11:0f:d1:61:d7:
2d:7c:29:c2:e0:30:30:ef:41:af:57:f1:70:56:41:
64:01:3a:9b:13:14:18:25:3c:22:90:00:b9:ce:64:
34:12:a9:c4:6d:f9:dc:e4:01:36:33:06:c0:d4:59:
ad:bb:06:35:6d:a4:57:71:46:7c:40:96:e1:69:a4:
4f:de:62:5f:20:19:26:b0:97:b5:66:71:f1:cb:17:
1b:ce:91:c6:fc:b8:06:8f:69:30:16:72:44:a3:94:
1b:e0:ed:42:b2:60:cb:04:cf:8e:23:85:9b:e0:c4:
26:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:6E:66:B0:24:3A:4F:27:A3:70:79:FF:90:D1:9E:80:4E:54:33:FF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/m25msCQ6TyejcHn_kNGegE5UM_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a2:74:5c:bd:1b:e2:d5:5f:6b:c4:d8:31:62:1f:af:87:38:ab:
23:7f:df:80:eb:4f:35:cd:14:d2:86:00:1c:79:f3:e5:f1:63:
bc:7f:d7:c0:40:04:d9:af:f1:24:8e:9e:db:71:db:bb:b5:b8:
7d:d1:2f:fb:a4:23:c2:03:c8:df:28:dc:df:72:fe:c4:2c:49:
d4:06:d4:a1:55:86:b9:cd:ed:ad:7f:f7:76:ff:0c:cb:86:fd:
08:33:f9:b6:11:df:8e:ba:07:a1:63:0f:26:ac:ca:76:3c:51:
ef:df:18:dc:82:1a:00:23:1e:e3:aa:9d:28:07:e6:62:0a:55:
fc:b0:a1:11:0b:e6:c9:56:7d:8b:cf:d0:0b:e0:96:a1:ab:1e:
23:36:ae:6b:e4:c6:68:ca:8a:93:1c:cf:a4:b8:29:89:9f:22:
91:93:17:8a:bc:80:7a:82:83:0e:73:c2:6c:48:f0:9f:2a:76:
8f:ae:0e:79:56:15:3a:36:22:95:4f:7e:bb:0e:45:ae:1a:73:
42:7c:2b:8c:f8:c8:c0:ae:f9:34:9c:b7:20:3e:2d:a0:fc:04:
39:a6:41:58:ee:9f:90:e2:38:eb:51:63:58:d6:7c:17:4c:8d:
5f:c5:4c:a2:7b:fa:6b:5f:34:35:2f:5e:c1:fe:0f:a2:f2:b1:
ea:0d:3e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:51:46 2025 by rpki-client