Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/r9Y2ii8cgSxFFWEjJyQbmd3LSUg.roa
File: r9Y2ii8cgSxFFWEjJyQbmd3LSUg.roa (raw, json)
Hash identifier: dYaihjU9C3IHM08wgliBTiignC6KN7f2UBYi9PrBXwM=
Subject key identifier: AF:D6:36:8A:2F:1C:81:2C:45:15:61:23:27:24:1B:99:DD:CB:49:48
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6F550213
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/r9Y2ii8cgSxFFWEjJyQbmd3LSUg.roa
Signing time: Thu 03 Mar 2022 15:09:31 +0000
ROA not before: Thu 03 Mar 2022 15:09:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1867842067 (0x6f550213)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 3 15:09:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=afd6368a2f1c812c4515612327241b99ddcb4948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f4:46:97:65:ae:53:84:87:39:73:f2:3c:c8:
52:0d:ef:11:f3:6f:d3:74:ee:94:f9:ae:73:e8:20:
a7:e1:2f:29:9a:86:de:87:79:cf:11:7c:44:e9:9d:
a5:69:64:3e:4a:7e:bd:85:e9:e9:97:a9:4e:6c:4b:
f7:04:9f:96:db:98:4a:a5:d5:a5:1a:7e:aa:e3:0a:
90:8c:74:66:ad:4b:9a:e5:e5:a2:7b:6b:78:10:dd:
3b:ce:de:ee:b4:58:d3:3a:e2:d3:01:3e:bf:fa:6f:
e3:94:e5:f4:6d:8c:db:aa:cc:0a:0d:f5:b1:59:10:
57:6e:16:01:28:fc:81:f0:2b:3f:74:c8:64:6c:33:
11:85:93:ff:21:fc:6c:6a:67:22:01:63:44:6d:4b:
e8:ab:9b:87:bf:f3:50:a0:cd:73:8d:48:f2:9d:8e:
aa:55:75:be:7f:38:24:50:f4:78:61:60:97:64:24:
8e:89:8a:ef:c5:8f:ab:d7:52:21:99:e0:82:64:20:
cd:7a:8a:ee:34:6f:af:00:84:4a:17:e2:50:69:42:
81:a1:3c:7c:bb:1f:19:02:7c:d0:55:86:88:41:ca:
70:16:32:30:3b:6a:f4:57:60:27:b9:af:98:01:b8:
e0:65:63:0b:ab:3e:3f:30:29:2a:3e:ac:b7:75:90:
e0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D6:36:8A:2F:1C:81:2C:45:15:61:23:27:24:1B:99:DD:CB:49:48
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/r9Y2ii8cgSxFFWEjJyQbmd3LSUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
af:ff:10:a7:69:ec:ef:c6:ab:42:f5:b8:da:0c:99:b5:3d:af:
46:d8:be:52:24:38:20:11:6e:9b:84:80:8d:9b:d4:d9:72:e9:
ce:6c:b2:5b:24:1d:f4:22:43:70:da:59:8f:61:47:6d:82:15:
fd:18:9e:f9:2f:bb:71:d5:01:3a:39:ee:1e:3e:dc:d7:f2:d3:
e5:ea:9d:3c:dc:3c:7f:67:50:59:ad:78:06:e8:89:c1:87:33:
2c:58:8f:29:87:c7:75:59:2f:39:48:b8:81:a6:0b:9b:d9:36:
7f:f7:50:e8:15:4b:5b:e8:b7:4b:6c:74:2b:23:33:21:46:41:
cb:ee:53:73:af:98:e5:26:83:41:ee:07:ab:48:75:6a:22:29:
d0:22:16:3c:88:9b:2d:b4:af:61:2e:0d:78:94:f0:2b:f3:47:
4f:9d:76:e9:75:1e:5e:0e:7a:f7:67:35:fe:91:df:ff:00:c0:
bd:65:5f:e5:e8:a5:22:11:09:b9:df:50:ef:93:9b:49:f2:ff:
f0:4c:ae:61:87:f9:58:13:f7:f1:dc:78:c9:6c:f1:74:b7:06:
d3:7b:28:08:74:3f:b3:95:8f:ea:aa:65:59:90:13:1f:e8:54:
0d:50:96:bd:fc:28:ef:bd:40:f1:c9:d3:e5:7f:e9:b3:1f:90:
dc:9d:53:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:21 2025 by rpki-client