Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/s7kjzRb5WI5xNJoQRQ2WVcgk3BA.roa
File: s7kjzRb5WI5xNJoQRQ2WVcgk3BA.roa (raw, json)
Hash identifier: 8/FdZQL8T/ASqPyUOvM8LrlbBBk7oIV3UTH2/N/MGG0=
Subject key identifier: B3:B9:23:CD:16:F9:58:8E:71:34:9A:10:45:0D:96:55:C8:24:DC:10
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184B8FA21311C058838C78A2D4E032A843F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/s7kjzRb5WI5xNJoQRQ2WVcgk3BA.roa
Signing time: Sun 27 Nov 2022 12:05:11 +0000
ROA not before: Sun 27 Nov 2022 12:05:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:ae77:4719/128 maxlen: 128
2001:67c:64:ffff:0:184:b8f9:ba37/128 maxlen: 128
2001:67c:64:ffff:0:184:9f03:9814/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:b8:fa:21:31:1c:05:88:38:c7:8a:2d:4e:03:2a:84:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 27 12:05:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b3b923cd16f9588e71349a10450d9655c824dc10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:92:bc:72:15:b1:ff:f8:ff:d2:91:4f:99:ca:
fd:3d:d0:1a:53:c8:f5:83:6f:a5:52:de:05:cb:db:
51:01:40:dd:88:a0:ff:59:75:b6:a0:6b:6d:03:75:
5e:cc:1f:5e:47:30:94:16:ba:fe:1c:e3:af:50:3e:
c6:19:fd:5f:23:bb:e3:72:c1:55:63:03:71:30:6c:
86:bb:c3:41:e2:0c:1e:81:41:97:f0:2b:d0:c7:e4:
22:49:ef:b0:a6:9a:35:5a:9a:12:55:1d:0d:07:6d:
8d:a9:33:e4:4e:c1:33:68:c3:76:b2:e9:5b:15:ca:
05:2f:31:95:87:20:a7:31:8e:9b:a7:22:e1:19:68:
49:4c:bb:77:93:65:7a:97:b5:a3:3b:b1:c1:02:68:
36:44:b8:6a:a3:e7:53:20:f3:b8:ad:c6:3e:66:fa:
58:24:ad:c4:5f:db:81:0e:c9:02:37:2f:72:cb:47:
c8:33:f6:4f:91:fd:91:28:7a:76:30:72:f4:d4:cf:
cf:f5:fe:85:f5:8b:25:6d:3c:d9:e9:47:7c:d0:95:
04:90:50:b6:0c:1c:07:7a:39:7f:15:09:7e:01:19:
c4:57:39:0f:ea:ac:7d:17:26:92:65:83:43:14:83:
52:7c:7e:1a:1e:89:27:2d:47:74:bd:92:25:06:f4:
bb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B9:23:CD:16:F9:58:8E:71:34:9A:10:45:0D:96:55:C8:24:DC:10
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/s7kjzRb5WI5xNJoQRQ2WVcgk3BA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
39:3b:79:88:f1:3b:66:96:13:00:11:d0:85:b7:aa:33:fe:bc:
76:4e:b6:e4:fc:89:aa:e1:51:52:32:18:42:4c:d1:69:a5:17:
27:1f:b3:fc:ec:06:65:a8:ad:ef:01:3d:e2:9e:0b:1b:35:1d:
b9:61:23:c2:6e:75:3c:23:6e:45:cf:74:d8:9c:a0:e3:07:97:
4d:78:97:ce:34:d0:cd:d2:e9:34:36:91:0c:31:c8:ad:d0:16:
32:13:a0:22:34:4d:f1:c9:fc:4a:73:68:cf:f1:78:ea:e3:c3:
57:43:29:5b:65:b5:f8:79:25:fa:d7:1d:d0:b9:f8:34:9f:b9:
4f:02:55:1b:cf:23:85:0b:8f:06:06:17:54:b7:ae:d2:15:28:
e5:e2:13:3b:b6:91:ea:51:b5:09:37:f2:fa:d8:d8:58:06:5c:
f3:75:ab:69:96:54:9a:ed:03:94:a8:d7:ca:da:31:fc:ae:f8:
f4:88:a3:64:ce:77:1a:db:11:ee:f7:94:d4:4c:6e:26:de:a7:
e5:8b:e9:9e:f2:bb:2f:97:4b:ef:42:24:f5:3f:2f:8f:e1:2b:
a5:20:6e:4c:9a:2c:65:84:89:9a:e5:89:77:3e:a3:83:dd:a1:
c1:02:60:4b:15:1d:ca:4e:6f:46:a2:d1:21:c8:b5:1a:52:2f:
90:c3:ed:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 10:53:25 2025 by rpki-client