Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oXzVt7HSQtZ1MB5XIT2NVVEW2XA.roa
File: oXzVt7HSQtZ1MB5XIT2NVVEW2XA.roa (raw, json)
Hash identifier: AHymA1Zz4SwMdLWRb2zD1CUvRWCBJ19oA993JvPbWMQ=
Subject key identifier: A1:7C:D5:B7:B1:D2:42:D6:75:30:1E:57:21:3D:8D:55:51:16:D9:70
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 69547BAB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oXzVt7HSQtZ1MB5XIT2NVVEW2XA.roa
Signing time: Thu 10 Feb 2022 05:18:31 +0000
ROA not before: Thu 10 Feb 2022 05:18:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:d600:60b0/128 maxlen: 128
2001:67c:64:ffff:0:17e:d524:ead9/128 maxlen: 128
2001:67c:64:ffff:0:17e:d9a6:5e4a/128 maxlen: 128
2001:67c:64:ffff:0:17e:ddba:7b5e/128 maxlen: 128
2001:67c:64:ffff:0:17e:db26:e5c4/128 maxlen: 128
2001:67c:64:ffff:0:17e:dab9:26f6/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17e:da82:41aa/128 maxlen: 128
2001:67c:64:ffff:0:17e:dd83:3b9e/128 maxlen: 128
2001:67c:64:ffff:0:17e:dcde:5809/128 maxlen: 128
2001:67c:64:ffff:0:17e:d938:ba2e/128 maxlen: 128
2001:67c:64:ffff:0:17e:d85c:d348/128 maxlen: 128
2001:67c:64:ffff:0:17e:daf0:4034/128 maxlen: 128
2001:67c:64:ffff:0:17e:dc02:dc22/128 maxlen: 128
2001:67c:64:ffff:0:17e:d592:92a4/128 maxlen: 128
2001:67c:64:ffff:0:17e:d7ee:e040/128 maxlen: 128
2001:67c:64:ffff:0:17e:d6a5:23ae/128 maxlen: 128
2001:67c:64:ffff:0:17e:d901:fecb/128 maxlen: 128
2001:67c:64:ffff:0:17e:d7b8:3101/128 maxlen: 128
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64:ffff:0:17e:d826:2565/128 maxlen: 128
2001:67c:64:ffff:0:17e:dc39:b603/128 maxlen: 128
2001:67c:64:ffff:0:17e:db5e:7e8/128 maxlen: 128
2001:67c:64:ffff:0:17e:d713:9aeb/128 maxlen: 128
2001:67c:64:ffff:0:17e:d55b:c264/128 maxlen: 128
2001:67c:64:ffff:0:17e:d66e:8559/128 maxlen: 128
2001:67c:64:ffff:0:17e:d96f:7a13/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1767144363 (0x69547bab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 10 05:18:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a17cd5b7b1d242d675301e57213d8d555116d970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:14:55:47:96:da:42:43:15:19:64:1a:cf:5e:
c3:23:08:04:c8:2f:fd:ce:5e:e3:99:28:f0:6b:0c:
4b:d6:b0:3b:0e:17:d7:12:8a:3b:9b:27:fb:68:90:
dd:4d:3e:62:9d:f8:ef:22:b5:3b:80:da:25:95:4e:
dc:4b:d8:8a:b7:8e:da:3d:ac:61:2e:4c:35:84:d8:
82:86:53:a6:f8:34:05:9c:1c:76:c0:30:e2:4f:c3:
90:47:41:2d:3c:e8:97:68:63:48:82:14:50:8a:54:
db:a0:5f:df:59:15:58:24:1a:3e:d5:32:2b:cd:c9:
9a:9b:0e:4d:44:41:9e:30:75:9c:44:b9:ac:c6:ee:
4c:8a:11:a0:5b:0a:2d:92:55:a4:90:08:58:79:3d:
d4:7c:8a:a3:21:ba:37:c5:e6:6a:02:dc:89:99:49:
b5:5d:4c:98:42:17:2b:c5:ec:3d:f9:f7:74:9f:a5:
d8:35:43:af:26:b8:6a:c2:59:76:8c:3e:77:72:a6:
f9:5a:41:bd:df:09:15:81:00:d9:06:d5:27:fd:98:
e2:b1:29:61:77:1d:a1:51:0e:ec:28:50:3a:8e:45:
9f:92:b6:23:43:55:8b:9a:c2:89:80:79:86:4f:22:
54:53:0f:d0:ab:0d:42:9a:cd:25:50:65:c8:49:72:
4b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:7C:D5:B7:B1:D2:42:D6:75:30:1E:57:21:3D:8D:55:51:16:D9:70
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oXzVt7HSQtZ1MB5XIT2NVVEW2XA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0b:fc:0d:d2:f5:27:3a:49:55:5c:66:68:02:12:5d:3f:14:06:
b9:54:38:31:45:b7:d3:bc:bb:b7:33:73:e7:71:fc:27:c1:02:
e6:8d:1f:f4:4e:6b:c5:9d:0a:58:d0:67:5d:2d:d1:14:c9:a5:
66:ad:70:e4:15:bc:9f:ab:32:96:c4:a4:16:aa:d0:51:ad:13:
43:cb:5f:a9:e9:cc:52:5d:c4:42:bf:7a:a4:c4:7e:00:7d:3e:
4b:d8:7c:be:d0:5b:9b:d3:b7:5f:f6:50:4d:14:b8:23:4f:e7:
a3:f6:1d:27:67:12:5f:86:b0:2d:fb:51:33:56:7a:28:51:07:
23:ef:15:be:8d:ce:ce:bb:45:ce:21:79:33:04:0d:89:4e:7d:
c2:4e:a6:0c:cd:17:b4:6b:85:8c:fc:d4:b5:e4:b7:62:c9:71:
6f:80:c5:08:52:05:ed:81:f7:47:82:96:5b:b1:ce:ba:62:34:
bd:ea:63:fa:98:d3:56:15:90:ff:13:e5:31:15:aa:4c:6c:88:
bf:35:13:5e:9c:91:18:cb:83:60:27:e9:7b:61:2d:af:bc:fa:
34:36:e6:c8:81:21:2c:1e:ba:7f:c1:a2:18:32:ae:5c:7f:ca:
32:8b:b6:a1:70:c4:78:f1:c1:c5:20:c7:19:bb:c5:c2:df:b4:
71:3e:a7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:27:37 2025 by rpki-client