Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/orrX5TbHd5kbOO7tuUjmLEJRTNA.roa
File: orrX5TbHd5kbOO7tuUjmLEJRTNA.roa (raw, json)
Hash identifier: EKRaEvf+452L+9TEFSRd+FciWh8zNp6pu424P8Hqqyw=
Subject key identifier: A2:BA:D7:E5:36:C7:77:99:1B:38:EE:ED:B9:48:E6:2C:42:51:4C:D0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182851A7CF435D7ACE1ABB0C280248B80CF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/orrX5TbHd5kbOO7tuUjmLEJRTNA.roa
Signing time: Wed 10 Aug 2022 00:14:41 +0000
ROA not before: Wed 10 Aug 2022 00:14:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:85:1a:7c:f4:35:d7:ac:e1:ab:b0:c2:80:24:8b:80:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 10 00:14:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a2bad7e536c777991b38eeedb948e62c42514cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ad:ea:2e:93:28:8b:bb:b4:56:26:78:13:ca:
41:b5:fe:1a:c4:0b:0d:ae:af:7f:35:8a:d7:a3:50:
b8:65:e1:52:a8:af:f2:f1:36:f4:74:96:ba:22:44:
89:e7:c3:8a:5f:44:6f:42:72:17:af:26:b9:32:6c:
84:29:10:83:a4:b9:00:58:f3:62:53:14:0e:f2:36:
15:b5:43:49:99:54:72:a1:ba:2e:52:09:d1:f5:6d:
11:7d:12:05:28:ff:f8:b3:4c:2e:0b:a4:4e:dc:b5:
45:bc:9a:1d:10:d6:55:71:56:14:71:cf:80:74:82:
2f:95:3f:8b:99:8f:cc:a8:ab:36:cb:49:63:0e:59:
1f:73:c2:d4:c2:25:66:d5:33:9b:60:da:05:0f:80:
e7:4d:e8:20:2a:be:d3:37:a7:30:d9:1d:09:63:0f:
44:41:57:d1:36:70:52:cd:38:34:e2:3b:14:85:52:
42:11:d1:cc:82:3f:2a:06:51:78:68:30:3b:9b:fc:
d5:d7:e3:e8:59:1c:0a:ca:2d:75:d8:9b:2f:2e:ec:
18:7b:d5:02:d6:e1:6c:37:c1:11:08:c4:c1:59:85:
18:98:da:e3:32:58:f0:06:d0:e5:43:03:eb:fe:52:
10:be:73:af:67:2c:01:b1:82:93:71:cb:74:79:f6:
06:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:BA:D7:E5:36:C7:77:99:1B:38:EE:ED:B9:48:E6:2C:42:51:4C:D0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/orrX5TbHd5kbOO7tuUjmLEJRTNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
76:cf:a1:69:fd:83:d8:f8:43:ee:c3:87:0d:2c:e5:93:52:ed:
f0:d6:73:3e:47:41:36:3d:17:ef:84:ab:d3:88:50:39:ae:8c:
8c:fe:90:02:67:a0:56:20:bb:bf:89:56:97:b2:a9:29:f4:28:
a5:b4:0d:9a:2d:73:33:f0:ec:ab:91:64:0c:73:38:7d:ac:2a:
1f:2b:02:ba:28:7a:76:85:9f:23:6c:77:b3:74:e4:c4:a7:6f:
37:9c:46:72:49:ae:da:7c:d5:15:20:c6:19:ab:bb:51:4a:e2:
f6:6d:4f:b6:1d:d9:b5:24:1c:55:09:00:fa:74:6b:77:6c:d5:
54:bb:79:5d:62:58:3f:23:bb:7f:e1:b9:45:85:f9:58:d0:80:
34:ae:e8:68:63:89:e8:59:ff:e0:64:f6:fb:7e:b3:4f:ee:6b:
c7:cf:13:67:a6:e5:56:a1:77:e8:ba:1e:6f:2c:c0:c5:bf:71:
e6:76:82:11:af:3b:2f:29:c6:d1:68:d6:8f:78:65:83:a2:5b:
ea:b6:2e:43:00:9f:1b:fb:d4:53:9d:9b:c3:8e:82:28:8e:6f:
e4:cd:7d:3c:ba:b0:0e:e9:5b:09:cc:42:37:45:66:9c:23:ff:
db:6c:94:c8:bd:36:5a:1b:a4:fc:05:77:75:a4:1b:88:72:c4:
32:c3:21:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:10:49 2025 by rpki-client