Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/puL8ZyFtrzN3uaQ774IVhpdQzds.roa
File: puL8ZyFtrzN3uaQ774IVhpdQzds.roa (raw, json)
Hash identifier: E/teSxPjYZsY5BiJJhnhdaR4z7n/YyvN9BT923OQaoU=
Subject key identifier: A6:E2:FC:67:21:6D:AF:33:77:B9:A4:3B:EF:82:15:86:97:50:CD:DB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 87C6B17E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/puL8ZyFtrzN3uaQ774IVhpdQzds.roa
Signing time: Sat 28 May 2022 01:10:13 +0000
ROA not before: Sat 28 May 2022 01:10:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:180:ff9c:1e7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2277945726 (0x87c6b17e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 28 01:10:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a6e2fc67216daf3377b9a43bef8215869750cddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:37:92:31:60:50:05:cd:c9:d3:e3:aa:8f:fc:
be:4e:d7:47:b8:dd:a8:c4:72:e4:52:7c:9e:f6:ce:
22:ac:e0:c8:c3:35:59:83:5e:83:cd:d8:8a:51:88:
ff:57:47:a9:8f:75:00:6d:cc:15:f3:f6:38:4d:1b:
81:d5:69:bc:d5:ac:e2:c8:58:6b:3e:77:52:79:53:
e1:44:81:a2:48:95:a8:13:ae:9d:72:24:2a:9c:22:
a0:8f:d0:0d:cf:f5:73:49:f9:70:c8:d2:55:63:1b:
03:1c:64:38:eb:9e:25:c0:c4:ca:3d:56:e5:0a:18:
76:3c:a2:14:df:f2:99:d2:93:51:22:0f:78:9f:83:
f1:f7:12:55:f2:80:d2:52:79:04:d1:01:64:af:90:
26:d5:15:ab:3f:65:72:5a:6d:0c:7d:e4:e3:88:d8:
f3:9a:5b:19:b8:95:dc:96:89:c4:d8:58:d2:0f:2a:
78:e9:27:d2:a8:e6:dc:d4:bd:1d:3d:31:e9:97:cf:
6b:0c:c3:2d:97:83:79:b4:48:cb:2f:a3:ae:8f:79:
f7:04:09:e0:4e:ca:67:f9:8a:d2:7b:39:a5:d5:5a:
f5:10:55:87:8c:07:75:fd:bd:26:c7:93:4a:a5:b1:
54:ae:2b:bf:dc:c4:62:cf:a7:eb:b0:bf:92:3b:e8:
0e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E2:FC:67:21:6D:AF:33:77:B9:A4:3B:EF:82:15:86:97:50:CD:DB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/puL8ZyFtrzN3uaQ774IVhpdQzds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
90:6d:07:f1:c4:c7:37:5f:03:7e:78:03:0b:bb:ad:a1:eb:46:
fd:ce:d6:a4:56:a5:16:5b:c0:39:b9:01:cc:ec:bb:62:d6:ff:
65:a5:72:d2:f2:9f:27:d0:c3:4f:59:69:93:36:f3:d7:a2:53:
4b:6a:4e:3b:6d:79:00:66:3d:b1:db:33:17:af:24:19:aa:39:
af:ca:94:38:15:20:0e:de:d2:ba:b3:7f:e3:62:c0:27:34:6a:
c4:b5:bf:da:4d:8c:e7:52:13:75:d1:17:c6:49:30:a9:70:e7:
fd:aa:ed:6d:a0:31:89:15:2f:6a:57:ce:18:4b:a6:35:b9:8a:
e4:58:50:3e:a1:51:e2:bb:7a:fa:3f:8b:d3:1e:2c:dd:b9:f1:
c2:1d:e4:d8:06:c5:d3:90:3d:ff:dd:55:fb:7d:a0:cf:e6:23:
58:9f:b7:c0:d9:6a:52:bf:dc:88:f8:e7:67:75:3e:af:c8:f5:
39:2d:bf:2f:2a:f8:30:5e:ac:30:d1:07:ab:db:73:34:ba:95:
9a:ba:72:02:c3:88:ef:a7:66:74:6a:15:d5:42:c8:33:85:53:
01:2f:23:a9:98:e6:84:ff:f8:ce:ca:06:87:6d:d1:a1:2e:36:
33:aa:01:84:8f:57:87:d2:8e:38:b3:e2:6f:45:90:d6:11:31:
04:67:8a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:08:52 2025 by rpki-client