Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rPsOlhZINtt345M58kWNEd9lwEU.roa
File: rPsOlhZINtt345M58kWNEd9lwEU.roa (raw, json)
Hash identifier: kSLVcrsQmRvULkc6eazSSEdXppGDzIlFawuwoVcIAUU=
Subject key identifier: AC:FB:0E:96:16:48:36:DB:77:E3:93:39:F2:45:8D:11:DF:65:C0:45
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6F6CF3E9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rPsOlhZINtt345M58kWNEd9lwEU.roa
Signing time: Thu 03 Mar 2022 22:08:26 +0000
ROA not before: Thu 03 Mar 2022 22:08:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1869411305 (0x6f6cf3e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 3 22:08:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=acfb0e96164836db77e39339f2458d11df65c045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6c:e7:65:6f:0c:0c:36:de:90:31:77:81:50:
d5:5c:09:1b:4c:92:7a:49:33:36:a4:53:1f:84:6b:
36:52:3b:a9:ba:38:ed:d4:86:51:2d:b2:51:bc:13:
b5:bc:6d:4e:44:d3:88:3e:e5:68:cb:fc:e1:fa:bc:
6d:09:0f:c6:0a:cc:69:46:87:bc:f7:bb:dd:2a:37:
04:30:fa:25:47:66:02:15:10:80:39:74:3e:0c:5b:
7a:01:4c:05:0f:7e:52:fd:73:7a:5f:ab:8d:20:68:
31:9c:10:90:f3:e4:58:e7:f4:d6:26:53:24:5a:67:
80:0e:f1:04:1b:bc:91:fb:95:f2:8a:ca:05:86:1e:
bc:21:f9:ad:4f:8f:5e:d0:62:1c:e6:00:10:2a:bb:
c3:1b:99:8c:6d:73:62:e9:c4:7e:fb:ba:f6:85:4d:
16:90:85:0a:20:a7:47:ec:0d:6b:97:71:8d:04:e7:
d3:f4:1b:7c:f3:1b:8e:ad:bf:e4:cf:f8:9b:07:5c:
e4:29:5b:54:10:8f:a8:eb:03:17:a9:5d:31:45:06:
34:58:20:b4:c8:d1:83:f2:03:f6:eb:e1:d2:85:95:
07:28:43:40:97:f5:b7:a9:3c:77:5e:e9:04:ab:ab:
00:e5:05:37:1e:94:5a:ba:2d:aa:70:42:a5:ba:04:
3e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:FB:0E:96:16:48:36:DB:77:E3:93:39:F2:45:8D:11:DF:65:C0:45
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rPsOlhZINtt345M58kWNEd9lwEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
98:d9:00:40:92:ec:d1:01:04:e3:92:fa:a6:9a:8d:1c:86:e1:
23:2c:f3:4a:cc:69:4e:cc:f5:73:52:b9:ab:b8:de:e0:45:82:
73:6b:17:4b:6f:d7:68:40:1a:4c:8b:5a:83:e3:b4:f8:4d:90:
ce:df:35:5d:da:02:2e:ab:eb:0d:22:0c:5f:ba:61:90:04:05:
30:ec:6a:f1:19:d6:e1:ac:e5:f7:48:dc:af:b8:3c:8c:d2:ee:
df:c6:09:fa:66:33:11:84:38:ac:9c:c0:be:92:f5:d8:cf:73:
8d:e2:22:cb:3a:d3:9f:95:3c:97:56:0c:d5:4a:da:89:58:14:
c8:90:30:71:de:43:15:b2:d4:ae:0d:92:0e:4b:e4:64:05:0f:
c5:07:e4:34:8c:c3:59:b3:4c:88:a0:2e:14:f1:6d:1e:af:0c:
fd:ad:6a:88:7f:fe:56:80:ba:28:66:6d:e6:52:5f:17:fd:b4:
2f:e9:4f:64:ea:f4:22:94:19:af:08:77:29:17:b5:1d:e1:e4:
ef:74:d0:13:7f:ad:1a:78:eb:fe:66:22:e3:3e:9f:ac:1c:7e:
a8:6e:33:e6:66:71:f7:08:98:54:b6:04:73:c1:c9:74:04:ad:
d5:92:0e:74:1e:9d:b9:c6:db:13:26:30:be:8b:e6:b4:55:3b:
ee:21:bb:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:48:47 2025 by rpki-client