Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pP2Xt_r0y2nnQSmoKBwc65BWP1I.roa
File: pP2Xt_r0y2nnQSmoKBwc65BWP1I.roa (raw, json)
Hash identifier: 1ldH99To7lYq8Cdvp5ZhFa1zGcXyDZhb3NX2LbympM0=
Subject key identifier: A4:FD:97:B7:FA:F4:CB:69:E7:41:29:A8:28:1C:1C:EB:90:56:3F:52
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01820F176E171EED1392AC2A9BE963D8A6CD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pP2Xt_r0y2nnQSmoKBwc65BWP1I.roa
Signing time: Mon 18 Jul 2022 02:16:09 +0000
ROA not before: Mon 18 Jul 2022 02:16:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:0f:17:6e:17:1e:ed:13:92:ac:2a:9b:e9:63:d8:a6:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 18 02:16:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a4fd97b7faf4cb69e74129a8281c1ceb90563f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:97:03:3e:b4:cb:03:60:9c:f9:fd:6d:3f:73:
63:90:30:e0:da:67:8c:9a:6a:20:5f:77:a2:74:f8:
57:c9:dc:7b:7b:7f:ed:67:f4:a1:59:bb:01:19:45:
51:bc:b7:6b:85:25:8c:ae:14:8d:f4:72:3c:7e:35:
16:0c:9a:4c:d9:fc:49:e1:69:e9:e0:0d:45:ce:5a:
43:22:2e:40:e7:a2:a4:b6:8f:92:50:2e:be:37:44:
5b:41:00:6e:fd:74:7f:8a:e8:19:a1:f2:22:6b:95:
be:40:de:a0:a7:e0:fc:91:bd:ab:31:ad:f8:c0:24:
17:b0:fa:17:ad:b7:24:25:ca:f7:e2:4b:fb:43:29:
84:51:d6:8b:cf:24:0a:c8:0b:10:d2:ce:77:f8:2e:
77:69:b9:80:04:13:d8:49:69:3c:6f:50:ee:49:d8:
86:27:38:61:32:7a:b2:65:f7:19:4e:18:a3:62:a2:
44:44:8f:de:00:a3:3f:38:62:09:16:18:00:83:ae:
74:14:4a:aa:de:6c:2e:6f:eb:0a:03:15:18:1c:aa:
66:59:b4:0f:02:45:e0:72:da:69:fe:45:6c:96:32:
d6:6d:b4:30:e3:18:74:53:de:c2:c5:2b:4a:b4:36:
0f:43:e0:d3:37:54:c2:0c:2a:2d:af:40:c7:2a:11:
a0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:FD:97:B7:FA:F4:CB:69:E7:41:29:A8:28:1C:1C:EB:90:56:3F:52
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pP2Xt_r0y2nnQSmoKBwc65BWP1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
60:41:05:36:d7:1e:3a:4b:89:9e:89:03:1a:ec:a1:1b:ef:b2:
18:86:cd:ae:36:b7:51:cc:a3:c2:6b:5b:ca:2e:c3:94:71:37:
4f:33:df:b8:f4:00:eb:24:1d:74:47:fe:f4:de:d5:93:20:d6:
05:d6:f3:5a:0d:1e:51:fd:3d:50:08:85:47:e6:df:d6:de:f4:
9e:03:1b:8a:e0:a8:0b:ed:11:a3:09:fa:b7:bf:ce:07:c1:59:
2e:70:6b:29:d8:e1:97:32:4a:fc:72:0d:b7:a9:14:6f:d8:d0:
a6:d3:d5:67:80:2e:f1:95:99:8e:95:91:91:ee:d1:f5:8c:31:
7e:5c:f3:c0:99:12:d0:6e:3d:2d:d6:12:50:d2:22:a9:fd:6c:
e2:b6:66:9c:45:1c:d4:fd:ac:a8:f2:77:0c:9f:f6:01:67:b1:
cf:39:58:79:21:27:8a:95:1c:9c:b0:1c:60:fc:61:a0:19:bf:
cb:0a:94:6c:e7:47:d0:78:3c:1a:32:c3:98:cc:4b:e1:49:bd:
ff:6e:07:da:12:46:79:b7:cc:9e:dc:09:52:29:82:05:3d:cb:
87:3b:59:a5:10:86:d8:c6:95:89:6d:1e:62:c0:bc:11:8b:9e:
1e:19:ff:7a:9e:b6:14:81:1a:69:1e:6b:c0:ad:82:b6:02:a9:
bc:c9:43:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:47:49 2025 by rpki-client