Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rb42hRmgJUhLwsoOPh2wnB7iu_I.roa
File: rb42hRmgJUhLwsoOPh2wnB7iu_I.roa (raw, json)
Hash identifier: F+e4n4229yKmzh8gE10WIyy4X/VkfGd2M6nFDTfmv/0=
Subject key identifier: AD:BE:36:85:19:A0:25:48:4B:C2:CA:0E:3E:1D:B0:9C:1E:E2:BB:F2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 71F2D69B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rb42hRmgJUhLwsoOPh2wnB7iu_I.roa
Signing time: Sat 12 Mar 2022 16:08:38 +0000
ROA not before: Sat 12 Mar 2022 16:08:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1911740059 (0x71f2d69b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 12 16:08:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=adbe368519a025484bc2ca0e3e1db09c1ee2bbf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0c:04:40:59:74:5f:02:23:c1:4e:73:50:2a:
2d:0c:6c:3e:b1:e0:1e:8f:68:9e:fe:f0:5b:e7:1b:
29:4a:80:f2:b9:1f:e5:81:f0:66:fc:0b:ae:38:de:
5f:2f:26:c0:ff:cb:35:c1:b2:e3:d3:42:7c:52:bf:
1f:e7:42:11:eb:eb:df:46:e4:1d:a9:9e:0a:40:fa:
17:bb:78:b0:e6:44:01:fb:1e:96:0b:35:4e:52:ca:
7d:51:46:f4:42:6a:77:6a:50:e1:54:4b:9f:e6:7c:
f9:cd:9f:9a:8c:80:24:a6:79:68:34:8e:6e:ea:8d:
09:a2:f7:5e:08:4e:f7:d1:21:b4:b3:2b:ba:f3:fb:
87:5a:06:a0:ca:f2:87:d8:a0:c9:a7:57:99:56:ef:
a0:b5:b8:59:50:c9:87:1b:9c:58:16:d3:04:54:f7:
bb:47:2b:0b:6a:3f:a6:e3:20:e5:c3:50:85:59:77:
b7:16:0b:42:34:c5:27:7c:59:08:7d:47:93:79:1d:
cd:b9:de:83:44:e6:9e:fd:53:1f:16:0b:e7:c6:a9:
f0:9b:ff:93:b5:44:7e:64:3c:bd:78:3f:b7:ab:30:
c0:b7:88:90:ad:78:c3:fa:d1:e7:41:9b:1a:e5:ab:
68:1e:16:ed:fc:90:35:93:d8:82:1f:2b:72:9b:dd:
b8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:BE:36:85:19:A0:25:48:4B:C2:CA:0E:3E:1D:B0:9C:1E:E2:BB:F2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rb42hRmgJUhLwsoOPh2wnB7iu_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
35:85:9d:1b:23:e9:ca:37:03:99:d8:fd:6e:e9:ed:9d:df:f2:
09:d5:3c:44:9e:8d:3a:da:e9:29:fe:91:43:78:28:61:2c:c9:
a3:d2:71:1f:9b:31:a6:7e:b3:c8:ec:df:2a:6f:30:fe:9b:23:
37:d3:14:b2:0e:a2:3c:0b:d4:be:11:01:4f:97:5b:22:23:42:
29:14:28:0d:2e:77:c4:a5:ea:49:e3:2f:ad:48:0d:90:19:1e:
10:d0:0a:6d:55:5e:5d:4a:7b:e0:a9:b3:1c:b4:a6:64:fd:85:
1d:01:81:eb:f0:ce:f6:e6:42:10:bf:1f:57:01:53:53:6c:ca:
c5:79:92:36:8e:e5:00:e0:6e:c3:72:e4:0e:5f:7f:1d:7e:fd:
a7:bd:e8:b7:60:84:6d:a6:88:77:75:a3:04:b9:94:3a:09:9a:
6e:9c:34:c3:6c:c9:88:84:7c:82:23:70:55:66:fe:dc:48:a0:
57:a5:d7:58:7f:2a:9e:3a:19:0a:b3:b9:65:3f:cf:49:48:e4:
26:0b:1a:63:b6:d4:06:a1:e2:82:98:48:62:52:27:71:7a:44:
58:d5:86:ee:58:fe:89:55:c7:f4:bd:e7:7b:a0:8d:cb:b2:c7:
1a:7d:22:8f:b2:23:fe:a1:af:6a:ef:8b:59:ac:48:6e:3e:37:
71:f0:a2:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:40:55 2025 by rpki-client