Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pDPQzSxGJJhbcPnkACQd6woTpBo.roa
File: pDPQzSxGJJhbcPnkACQd6woTpBo.roa (raw, json)
Hash identifier: kGn1tUnjgv+JXuyrsL6gyN2HPtbIwlPR5OiwBhFrcUY=
Subject key identifier: A4:33:D0:CD:2C:46:24:98:5B:70:F9:E4:00:24:1D:EB:0A:13:A4:1A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7646C4FF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pDPQzSxGJJhbcPnkACQd6woTpBo.roa
Signing time: Sun 27 Mar 2022 23:10:21 +0000
ROA not before: Sun 27 Mar 2022 23:10:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1984349439 (0x7646c4ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 27 23:10:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a433d0cd2c4624985b70f9e400241deb0a13a41a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ac:24:63:41:02:83:4a:c3:34:f1:78:8e:67:
a8:21:b6:e4:d8:a5:b3:0e:98:d0:14:ee:0e:41:11:
19:ad:13:11:8a:f0:a7:c5:66:c5:07:03:0b:bb:30:
4b:f5:a4:5d:ee:f2:97:14:d1:d8:f0:c3:f5:ee:21:
15:2c:7a:37:37:c1:f1:13:1e:25:8a:9a:24:9c:fa:
4c:9e:18:27:f5:38:e9:00:29:af:70:79:d4:9e:ba:
cc:dc:57:fc:f1:17:fe:fe:73:98:ac:ec:02:da:31:
bc:b9:b4:71:72:83:eb:2c:fa:6d:63:54:f8:47:52:
0c:57:33:72:15:58:76:fd:48:5e:6b:52:cd:83:e2:
c2:df:91:47:77:74:ba:8e:7f:df:f8:49:67:f9:6a:
f9:c0:73:50:d0:b2:02:50:22:21:f1:6e:76:ba:23:
25:47:07:c8:69:44:8d:b2:0e:c4:5a:6c:75:a9:fc:
e6:0b:65:a8:fb:86:51:ad:65:88:a2:06:3b:32:04:
22:28:f9:02:3e:45:23:cd:f6:b2:15:43:a5:cb:c3:
36:62:b7:4a:c9:b0:ac:dc:ff:10:f6:45:80:5d:1d:
58:3e:34:50:20:e1:89:81:ae:ad:1d:44:cb:c9:4b:
31:f7:47:c6:ae:11:1f:b0:77:e7:33:62:49:33:04:
5a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:33:D0:CD:2C:46:24:98:5B:70:F9:E4:00:24:1D:EB:0A:13:A4:1A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pDPQzSxGJJhbcPnkACQd6woTpBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a9:ea:11:28:c0:83:24:df:86:0a:76:99:b3:38:ec:97:d0:2a:
e2:c5:85:49:6e:16:c6:52:52:7e:ba:97:7e:c6:17:04:69:9b:
af:28:b4:fb:c6:77:f3:4a:18:e1:23:7f:5d:d8:b9:a6:46:02:
f8:83:0b:97:33:e1:85:e5:7c:78:8c:95:87:dc:09:5e:4d:ea:
8f:e0:64:5a:bb:22:bd:66:e8:b0:ad:5f:36:79:a2:7b:6b:f0:
79:6c:17:fb:c3:9c:93:0e:0d:ae:59:6c:9b:19:a4:28:99:48:
ec:e2:89:d5:ab:b0:da:6c:ed:9d:c5:01:c6:94:0e:c9:30:a2:
55:92:0e:30:2a:f0:8c:40:da:af:57:db:f4:ab:d0:2d:64:9b:
ea:ae:01:6c:04:d5:86:dd:08:18:cf:4d:f9:46:08:b9:32:4a:
09:7a:be:da:fa:b4:31:e3:c1:8d:5e:9a:28:ac:df:2f:ae:0e:
6b:d3:2d:68:2e:8c:0e:d0:7f:83:16:f1:e5:70:4d:05:33:8b:
64:67:0e:42:ed:61:b3:c0:b0:16:8c:78:ec:d7:3d:40:39:0b:
0b:61:55:35:59:a5:c8:30:6b:59:c1:bd:57:bd:7f:fa:bb:79:
43:15:bf:f6:d7:ff:6d:7e:c5:1b:a9:2b:1e:1c:5e:a4:04:5f:
30:2a:77:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:09:34 2025 by rpki-client