Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rpT1NY1HYBmysAlK-Fs4i5avCeM.roa
File: rpT1NY1HYBmysAlK-Fs4i5avCeM.roa (raw, json)
Hash identifier: 7aG2xAqtyVYvIdq3vJ9J2ecsW3PyUKwQ9VcJKCXtl7M=
Subject key identifier: AE:94:F5:35:8D:47:60:19:B2:B0:09:4A:F8:5B:38:8B:96:AF:09:E3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182264180774D9DCC5CB6A4A753775C1E1B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rpT1NY1HYBmysAlK-Fs4i5avCeM.roa
Signing time: Fri 22 Jul 2022 14:13:23 +0000
ROA not before: Fri 22 Jul 2022 14:13:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:26:41:80:77:4d:9d:cc:5c:b6:a4:a7:53:77:5c:1e:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 22 14:13:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ae94f5358d476019b2b0094af85b388b96af09e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fa:3f:92:4b:e9:cb:b1:41:65:7b:9e:9a:31:
c6:39:03:5e:54:e1:3f:74:f9:a4:f4:0d:70:cc:4d:
46:8a:ef:5d:c9:03:d9:a5:72:2a:74:fa:78:0f:48:
ad:2a:bd:23:b3:63:29:f2:55:4a:45:ec:d7:d2:2e:
0a:36:45:68:0b:0f:b9:60:b1:2e:eb:1f:b5:fa:01:
90:31:c9:95:ca:07:c3:0e:e8:0b:09:63:26:59:e2:
51:42:54:a5:21:64:7d:9b:47:1c:18:b1:dd:ad:44:
e3:75:bd:e5:01:0b:d9:8e:e1:d4:3f:cb:8e:0b:8a:
af:97:e0:0f:68:96:c3:c7:ca:76:ce:88:ad:fb:b4:
d7:27:1d:4c:b4:7b:d5:54:4d:36:60:8d:a8:40:08:
56:57:a3:76:ee:06:99:8b:1e:db:51:90:8e:33:a2:
5f:e9:12:c9:75:0c:20:61:2f:73:bc:d8:08:3b:d2:
cb:f0:48:c5:9a:8e:c5:ec:77:9d:78:20:28:ad:02:
72:39:b9:8d:32:ed:58:d2:88:16:86:8a:9b:84:d6:
bb:a3:97:c3:bd:3d:b8:c5:68:c7:d6:3a:56:f1:3c:
f9:49:46:6e:51:54:2d:97:04:6e:34:f4:b2:1c:be:
df:9e:8a:9e:8c:11:bf:1b:36:fc:b1:bb:94:ac:ce:
ca:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:94:F5:35:8D:47:60:19:B2:B0:09:4A:F8:5B:38:8B:96:AF:09:E3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rpT1NY1HYBmysAlK-Fs4i5avCeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
97:18:f3:6e:51:ab:2a:56:cf:eb:15:ad:f8:d9:72:41:bb:bf:
ad:99:4f:3f:c4:b9:06:48:fc:0d:d0:7a:94:e0:5a:c3:6b:57:
2d:87:41:63:52:5d:bc:7f:e9:0d:ab:69:d9:7a:8d:58:a3:18:
6a:8e:70:11:13:77:4a:2a:40:27:6c:39:cb:e0:b7:51:dc:a8:
52:8c:86:ef:eb:14:a4:5c:ff:32:cc:51:5b:21:74:47:ef:4f:
9d:77:84:69:f3:db:72:f0:cd:ce:41:e4:c5:a2:84:a1:d4:e1:
de:c2:5d:62:05:fa:5b:67:f2:e1:c3:6c:9e:2d:68:d2:e2:7e:
39:a1:42:85:d3:20:b3:e5:d3:a4:71:4d:ef:37:95:bc:b5:fb:
c1:26:7b:c2:71:ab:cf:68:6b:0a:7b:11:84:dc:a0:61:2a:9a:
32:6a:47:f3:ca:36:49:55:e8:76:d7:2a:08:7b:12:92:ca:68:
54:50:4b:95:f2:c1:f5:e1:1a:c5:d3:d5:29:74:9a:3c:2c:3b:
e8:16:5a:04:36:dd:8c:77:7b:72:c9:54:5f:12:6e:6f:5a:59:
06:a3:38:f4:9c:df:c2:38:66:22:56:cf:35:4b:b6:1b:e3:4c:
0c:ed:8e:43:49:1d:ed:54:a5:78:de:6d:c9:e7:31:d6:a8:b8:
9a:e4:fe:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:41:10 2025 by rpki-client