Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rj0MTzWyeI1RMJH_8_hS86B7HDc.roa
File: rj0MTzWyeI1RMJH_8_hS86B7HDc.roa (raw, json)
Hash identifier: LhOK5c5xhLKBG7VWLV3NQbBdACvcfQQm8y6PMEfrYH4=
Subject key identifier: AE:3D:0C:4F:35:B2:78:8D:51:30:91:FF:F3:F8:52:F3:A0:7B:1C:37
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018409E86D36938F3EB2F06C99AD17EA74AE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rj0MTzWyeI1RMJH_8_hS86B7HDc.roa
Signing time: Mon 24 Oct 2022 12:12:18 +0000
ROA not before: Mon 24 Oct 2022 12:12:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:09:e8:6d:36:93:8f:3e:b2:f0:6c:99:ad:17:ea:74:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 24 12:12:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ae3d0c4f35b2788d513091fff3f852f3a07b1c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1d:15:16:5e:6d:b6:a6:c3:ae:0f:3d:ec:66:
19:30:43:b1:dc:4c:ad:aa:ef:e2:d9:6e:c4:e2:b8:
35:95:c1:4c:25:1f:5f:40:94:e2:82:67:68:2b:dd:
74:32:c2:7b:df:da:8f:3e:ea:76:25:54:d6:e5:92:
48:87:9d:28:f1:b9:65:76:44:11:0d:a8:1b:37:10:
71:19:62:b0:49:c5:8e:cc:dd:89:a5:40:03:31:9c:
77:5d:20:75:5c:06:7c:92:28:bf:d9:9a:05:c0:1b:
45:6d:a5:5b:83:9d:89:d4:f8:e5:a1:44:9f:7f:03:
bf:9e:08:6b:4f:c6:2d:f2:00:18:43:de:a2:e9:2f:
71:5c:9d:b3:79:5d:bc:e1:19:29:bf:22:09:32:e9:
e3:59:7a:64:21:68:26:b7:b9:41:d3:ea:31:a9:9c:
80:07:ab:8d:58:19:b4:86:24:44:9d:df:06:85:58:
88:71:4c:8e:bc:04:02:24:84:ad:ed:2b:64:b5:46:
eb:4c:37:6f:3d:09:d4:eb:cf:97:5b:8e:a8:08:df:
2f:ba:24:9b:5c:e6:5f:74:92:87:ff:82:bd:a5:e5:
2a:c7:8c:73:74:d6:bc:52:2d:8a:3e:d4:62:72:a5:
d8:6e:df:5f:b4:0f:38:d1:81:13:a6:8a:7f:95:46:
27:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:3D:0C:4F:35:B2:78:8D:51:30:91:FF:F3:F8:52:F3:A0:7B:1C:37
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rj0MTzWyeI1RMJH_8_hS86B7HDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a2:1a:fb:7f:46:d5:c2:df:1c:52:07:08:c5:70:c5:a2:d2:d3:
b4:1c:6c:8b:8f:80:4e:b7:48:f1:99:57:d5:1d:87:81:ed:51:
e5:ef:06:06:25:99:23:68:10:77:e5:e5:5d:d2:e5:13:8b:4f:
85:3e:66:78:1c:02:43:16:2d:5c:3c:ed:84:60:ea:d7:a2:10:
0e:df:33:25:c0:82:81:6b:c6:06:27:39:4a:2d:1b:d8:22:1a:
33:47:bf:6f:76:8c:2f:b2:38:b5:b3:0c:72:f7:5d:43:b5:c0:
07:96:ba:a0:c2:ab:5a:0c:4c:bb:e6:6f:e5:94:5d:4b:e5:65:
52:ca:71:57:58:82:22:78:f5:34:b0:20:93:67:38:eb:85:96:
cc:51:82:ab:13:86:f4:00:81:5d:87:f3:dc:b7:86:e6:6e:3e:
5e:59:9b:cd:8e:9a:1d:6f:2e:23:d8:44:f5:ee:6f:73:b7:3d:
ec:fd:7e:ec:6b:c0:b6:7f:10:36:2f:20:9f:21:22:4c:15:d7:
bf:af:83:58:0c:29:0c:8d:ed:62:d7:ed:d6:df:64:f4:94:33:
ab:f6:7a:94:a7:b5:5b:6b:bd:d5:95:17:8a:c6:fc:08:ec:00:
df:58:97:10:68:01:3a:c1:4a:3a:da:28:b6:32:94:44:32:1b:
f5:bf:93:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:23:41 2025 by rpki-client