Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pRLwq4j5UgQyZ9S_vC0bZuStgP4.roa
File: pRLwq4j5UgQyZ9S_vC0bZuStgP4.roa (raw, json)
Hash identifier: z4y/En5aWBzFHHriHKyQI92oFZG46yhW3xQUTFRNQ9M=
Subject key identifier: A5:12:F0:AB:88:F9:52:04:32:67:D4:BF:BC:2D:1B:66:E4:AD:80:FE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01851952CED4807A028E3ADF34F15D4DE258
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pRLwq4j5UgQyZ9S_vC0bZuStgP4.roa
Signing time: Fri 16 Dec 2022 05:05:35 +0000
ROA not before: Fri 16 Dec 2022 05:05:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:1951:def2/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:19:52:ce:d4:80:7a:02:8e:3a:df:34:f1:5d:4d:e2:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 16 05:05:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a512f0ab88f952043267d4bfbc2d1b66e4ad80fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:88:3b:0e:91:a5:60:ab:10:ac:fd:c0:3a:fe:
3c:dc:82:bb:b9:84:58:cd:f7:76:04:ab:10:4d:d9:
d1:cd:67:e4:81:35:70:7e:6d:28:19:31:9f:38:bc:
3d:13:ba:23:cb:3b:2c:80:26:e8:ed:f4:a6:31:45:
35:13:06:b2:d5:7f:fb:a5:08:2e:bd:3b:c5:ba:a6:
ea:d3:30:c5:b5:23:ed:b4:b6:ea:a5:3c:59:8f:f8:
0f:53:06:5c:ad:15:11:42:cc:4c:3f:f9:88:c7:96:
f8:c5:b6:82:49:36:d8:4e:38:49:8c:c9:66:cb:82:
51:f8:94:9d:c4:68:bf:18:98:5b:16:41:2d:70:d1:
67:8f:2b:ce:24:0b:24:00:c7:a3:29:44:40:06:0a:
dd:1b:8d:32:05:33:c7:50:08:c5:d1:b8:5f:6d:af:
bc:4c:fc:92:a4:16:67:86:84:03:bd:e5:d8:ae:d6:
04:c3:88:e8:51:c4:79:7b:66:df:c1:43:d1:87:c8:
bc:08:b1:81:47:0d:75:b4:97:1a:19:f0:be:da:01:
f2:78:51:9f:41:23:fe:00:9a:b2:85:58:90:51:b9:
fe:ea:a6:ef:a6:ef:a9:8b:db:a7:d5:67:cd:17:d4:
fe:08:7b:2a:70:5c:d1:6e:65:b4:95:2d:35:bf:24:
ad:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:12:F0:AB:88:F9:52:04:32:67:D4:BF:BC:2D:1B:66:E4:AD:80:FE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pRLwq4j5UgQyZ9S_vC0bZuStgP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7f:a2:af:ee:82:13:62:9a:a0:90:11:1a:75:f3:75:96:fc:51:
c0:53:d1:8a:e7:b9:c2:28:bd:eb:f0:7e:8c:53:cb:d2:9f:b0:
90:c7:a1:dd:9d:5a:05:00:37:2f:2f:62:4e:0c:70:80:32:9d:
5f:1a:9c:fc:ad:d4:63:8b:b8:4a:94:ba:19:3b:0e:12:01:90:
fa:d0:f1:b0:1e:38:bc:4d:c7:0d:4a:c1:c7:0c:a9:16:6b:f1:
ef:58:72:7e:d8:31:12:e8:b7:68:01:73:36:df:54:a4:84:94:
66:cd:48:58:8f:73:58:94:33:0a:f8:ca:9f:f4:d4:5c:48:08:
51:6d:0c:9d:99:d9:e5:30:50:6d:e0:c3:19:94:56:92:e6:4f:
bd:e5:69:7a:38:9a:14:e4:ef:fd:93:ce:8d:d5:7f:71:b7:78:
1a:59:49:08:bc:c5:48:5e:cf:d6:72:a9:5d:88:8b:00:7b:db:
d1:b8:92:92:36:00:25:36:b2:c1:d4:c8:f1:d4:14:d8:47:9b:
11:bb:c9:97:3b:0f:a0:8a:d8:62:28:45:c7:1c:d2:a4:49:76:
9f:8d:ca:df:70:18:b5:ef:13:4b:71:2e:1c:24:ec:36:c8:85:
20:fa:e7:4e:1a:c0:f8:0d:f0:8b:89:b9:88:6a:25:0a:47:f7:
7e:2c:b4:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:44:15 2025 by rpki-client