Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rUsZqEQS0GTyxgB8CQ6cP4JyjAk.roa
File: rUsZqEQS0GTyxgB8CQ6cP4JyjAk.roa (raw, json)
Hash identifier: Qme23DPPECM8KrModBUtcRfuwRqwm+Pm+WGhNO2Tfdk=
Subject key identifier: AD:4B:19:A8:44:12:D0:64:F2:C6:00:7C:09:0E:9C:3F:82:72:8C:09
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182B97568B2EC668FD48359C0F154D68541
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rUsZqEQS0GTyxgB8CQ6cP4JyjAk.roa
Signing time: Sat 20 Aug 2022 04:14:15 +0000
ROA not before: Sat 20 Aug 2022 04:14:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b9:75:68:b2:ec:66:8f:d4:83:59:c0:f1:54:d6:85:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 20 04:14:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ad4b19a84412d064f2c6007c090e9c3f82728c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e0:db:10:0c:ae:29:20:6a:ab:80:a6:57:8a:
ab:d1:49:16:7a:f6:5f:8f:94:ad:de:b6:4c:0c:13:
f3:9e:6f:c2:06:ef:96:6c:52:3a:67:d2:1e:a1:25:
47:41:5f:10:6d:cc:b3:72:3b:58:0a:60:bf:b3:20:
c9:bc:1c:35:5c:32:0d:b5:b2:78:14:e2:e4:ae:09:
c1:f3:7a:db:b3:55:bb:a7:30:ec:55:a6:b1:71:73:
a5:65:bd:55:9e:fb:65:12:7b:02:00:93:5f:63:1c:
de:ca:df:b5:d7:8e:d4:a7:d5:94:83:aa:bb:d7:fe:
80:2c:ae:75:39:eb:ce:54:72:a8:8c:15:22:e4:93:
db:75:7b:ec:5d:40:e2:cb:b8:d5:1e:2a:31:91:f0:
b7:29:14:39:86:17:05:18:9c:27:7d:46:a1:f8:1c:
d2:82:41:f0:13:70:d8:9a:0f:cb:31:22:1c:14:67:
4d:2c:e4:64:2a:cc:87:fc:ae:fa:dd:00:ad:8e:96:
8e:37:87:cd:f5:ce:84:83:8b:9c:4d:37:3f:79:ca:
1d:67:29:09:a0:cf:c8:1a:d4:d9:eb:88:fc:46:9a:
42:39:7c:ec:8e:2a:ce:85:82:bc:47:99:b0:2d:ab:
fc:ff:a0:09:5a:c9:e3:98:b1:b3:52:11:a6:0c:8a:
dc:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:4B:19:A8:44:12:D0:64:F2:C6:00:7C:09:0E:9C:3F:82:72:8C:09
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rUsZqEQS0GTyxgB8CQ6cP4JyjAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
52:bf:96:6e:2d:46:20:8c:2d:4a:a4:7a:1b:cd:ba:3d:da:b2:
1d:5e:1e:62:b1:d1:fa:86:61:55:ca:11:d6:84:61:e4:61:49:
bb:6e:fe:5f:c9:23:55:b7:03:ce:29:24:fd:2c:92:34:d8:07:
e0:41:60:bc:8e:e5:52:0e:a7:64:d5:17:94:8b:6d:a2:7f:bb:
10:bd:03:21:f3:c2:61:76:61:03:aa:5c:bc:8c:87:d7:79:35:
73:04:47:65:54:5e:f7:00:06:8c:ed:68:f5:46:f4:4f:a9:5a:
c9:cf:68:a9:81:d9:de:8b:f7:b4:69:e8:b4:83:2a:1f:e0:71:
71:4a:ee:2c:19:c7:2c:63:4d:ce:db:15:fc:20:15:c9:50:12:
54:a1:2a:ee:22:eb:ca:98:a5:fd:da:f2:a6:db:0e:62:31:c5:
b0:a7:55:13:18:bd:91:e9:89:a8:67:97:1f:a0:6f:13:04:82:
53:84:fa:2b:db:5d:b2:42:0e:3a:50:bb:dd:2c:18:29:bc:5a:
25:89:84:01:b3:94:71:27:69:1e:2d:59:8c:ac:b5:ef:71:99:
8f:45:cd:8d:4b:ce:11:28:5c:54:48:b3:16:9e:e9:ac:b8:00:
fb:94:c8:9e:d8:23:8a:41:f8:44:b7:40:41:19:42:87:0a:29:
2a:bc:57:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:42:36 2025 by rpki-client