Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/r1ImMsFsu53rU2U-wmv3wAxupd0.roa
File: r1ImMsFsu53rU2U-wmv3wAxupd0.roa (raw, json)
Hash identifier: Ak3Nn+6fbwxFvp/XIc/f0Hb5KLm93C5aaSigdsjXkbs=
Subject key identifier: AF:52:26:32:C1:6C:BB:9D:EB:53:65:3E:C2:6B:F7:C0:0C:6E:A5:DD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8554D63E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/r1ImMsFsu53rU2U-wmv3wAxupd0.roa
Signing time: Thu 19 May 2022 02:10:17 +0000
ROA not before: Thu 19 May 2022 02:10:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2236929598 (0x8554d63e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 19 02:10:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=af522632c16cbb9deb53653ec26bf7c00c6ea5dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b7:fc:eb:fe:d6:70:e8:30:c5:b4:eb:84:69:
66:66:f6:6f:42:3b:39:62:a3:08:a8:6d:8a:4a:93:
a6:08:4a:26:95:b1:03:8a:90:16:46:1a:b3:96:78:
2b:93:8b:ee:7d:da:c3:7e:18:2e:30:8f:2b:59:1c:
59:76:5a:c9:6c:70:55:8f:4b:62:bd:4c:89:8f:dd:
1e:ad:e5:16:f4:c8:71:36:1f:f7:fc:36:da:a0:99:
81:65:d3:39:9b:51:c8:8a:d1:2f:e8:68:0c:b9:e1:
77:cf:e4:1f:9b:da:ee:b3:34:5a:53:80:f6:6e:fc:
bc:96:59:71:de:8d:73:54:e6:02:e4:d9:55:81:4c:
c3:3f:52:c7:d0:f0:bc:85:64:8f:f6:0d:ad:bb:d2:
76:aa:57:19:cb:58:ad:33:5e:3e:48:a2:12:94:27:
35:ce:3c:d5:6a:6c:b2:94:5a:51:51:47:48:44:6f:
7b:c2:58:68:df:52:74:2c:50:18:d6:ee:a3:29:a1:
0d:fe:d4:40:85:11:4e:4c:15:1a:59:1a:fd:bc:01:
39:c5:75:4d:38:19:55:34:7c:57:e5:ea:20:58:34:
b2:03:db:36:13:04:9e:5a:00:93:ce:53:e9:2a:56:
8f:d6:b9:1d:7e:ec:f9:0d:5e:18:52:db:87:9a:4e:
a6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:52:26:32:C1:6C:BB:9D:EB:53:65:3E:C2:6B:F7:C0:0C:6E:A5:DD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/r1ImMsFsu53rU2U-wmv3wAxupd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
38:39:27:9e:9b:aa:ec:8c:14:f2:8c:71:68:df:a6:52:af:1d:
fa:25:77:7f:09:19:f9:86:18:da:d2:a3:d5:d0:5b:7c:c2:f7:
4d:96:30:61:a4:df:fa:01:76:78:49:f2:60:74:9a:d0:e4:b5:
37:f5:6b:e6:42:38:b3:46:28:24:73:40:2d:d5:e7:09:98:60:
f6:f5:85:f3:fc:ea:10:3e:3c:0a:f3:31:d2:1d:84:29:d7:e5:
ba:19:9c:cf:a3:be:d3:dc:b7:25:9b:c9:dd:bf:5a:7b:65:4f:
b1:86:aa:ab:3f:5c:d2:2b:f7:f3:58:1e:2c:10:1f:ce:87:8f:
38:a5:63:79:a7:54:98:d2:fd:10:af:a1:fe:f5:fd:f6:fa:bc:
1b:06:ff:37:8c:73:93:82:5e:19:cb:eb:5f:88:2a:1a:be:5b:
11:ab:51:8e:ae:9b:c9:73:ff:cd:60:6d:a7:bc:36:54:72:cd:
fa:cd:49:9f:6f:7c:fa:23:77:bd:b6:88:94:1d:00:d5:df:d5:
84:25:01:9f:c1:6b:f7:52:8c:92:b7:bc:19:58:07:17:c1:fa:
b9:5d:01:a9:07:16:e5:2b:8a:5f:24:19:2e:03:48:d9:a2:c3:
60:46:db:71:f4:ea:f5:73:36:4c:91:df:fe:a3:41:b3:f1:e5:
69:08:57:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:26:01 2025 by rpki-client