Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/si11srxohBTxg6YxsZr0gVHogWI.roa
File: si11srxohBTxg6YxsZr0gVHogWI.roa (raw, json)
Hash identifier: /+oaVNJ2vGg5eNUP5/kbi+QftE8T2vIZyLRN/IBiF9I=
Subject key identifier: B2:2D:75:B2:BC:68:84:14:F1:83:A6:31:B1:9A:F4:81:51:E8:81:62
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018288EE19EC03FE3416219521A6910CD562
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/si11srxohBTxg6YxsZr0gVHogWI.roa
Signing time: Wed 10 Aug 2022 18:04:41 +0000
ROA not before: Wed 10 Aug 2022 18:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:88ed:d9c9/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:88:ee:19:ec:03:fe:34:16:21:95:21:a6:91:0c:d5:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 10 18:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b22d75b2bc688414f183a631b19af48151e88162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:10:ff:0f:05:7b:e0:3c:ba:b9:c5:ca:de:b5:
5c:46:e5:ac:5c:7e:6c:d9:cc:6e:a7:7e:28:7d:2b:
6b:cc:8a:47:c6:05:09:00:c1:84:35:4c:92:af:27:
38:fe:20:2e:9e:17:37:22:95:ed:d0:f4:09:d5:00:
d9:0b:cf:3f:81:50:f3:3b:b6:a4:bc:80:35:c4:cc:
23:ea:b9:4d:1f:51:74:be:e9:cc:c4:83:0b:0c:3a:
64:ba:c7:bf:f4:f6:7a:19:46:06:e5:4a:17:4a:e5:
0f:fa:13:08:3f:a9:be:af:5d:7d:6d:39:92:04:5a:
ad:30:20:57:4b:55:90:ff:7f:c1:8e:95:1f:09:52:
4d:8e:4c:56:d2:77:6b:a5:b9:ba:48:04:15:d6:39:
69:ef:c7:6b:53:a1:c2:e2:2e:df:5b:0d:17:e2:40:
a6:c0:9d:4f:6a:82:30:a8:71:2b:2b:c2:0e:11:cd:
70:4b:ed:da:dc:b6:eb:45:0d:a5:80:6e:bd:61:ad:
d0:bd:f0:12:5a:75:a3:1f:6b:7f:b6:b6:2c:1a:bf:
11:c4:dc:30:a9:d7:01:21:43:1e:53:f7:c2:05:41:
81:61:9a:b8:13:ff:40:05:90:d7:ac:38:ad:ec:17:
57:5d:11:fc:60:26:91:d3:c2:eb:d4:19:5c:93:e4:
a3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2D:75:B2:BC:68:84:14:F1:83:A6:31:B1:9A:F4:81:51:E8:81:62
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/si11srxohBTxg6YxsZr0gVHogWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
90:09:0b:97:f7:2e:73:4d:20:15:9e:2e:83:d4:d6:db:e1:a7:
72:c3:c3:01:ca:82:fb:66:d2:ce:95:fc:23:b9:fe:7a:49:19:
1d:7d:bd:53:d6:00:3c:80:11:2f:04:fa:c3:25:cc:1e:5c:ee:
b2:5c:b0:e0:60:13:d6:e4:35:6a:2d:a0:94:56:a0:00:06:43:
81:a8:b6:62:83:82:9a:9c:90:d1:dc:71:a1:5a:76:05:2b:69:
52:5c:4c:de:5f:f7:8a:24:d1:8c:34:ec:9b:ad:1f:e8:a8:5e:
c3:fe:4f:1d:3c:80:e2:56:b9:f5:2c:b9:84:93:a6:f0:81:a1:
34:91:69:10:e9:e5:13:46:ff:21:81:93:f6:87:c3:db:c1:50:
7f:70:a2:f3:30:32:e1:82:d3:96:8a:8e:f5:07:00:cd:fb:4f:
28:ce:86:15:ed:a0:67:b4:b0:56:f3:a7:1e:80:cb:7a:3f:04:
94:0f:2a:2b:f1:1c:82:2a:bf:29:60:82:9f:5f:00:9f:6e:0f:
10:16:bb:91:87:52:41:c2:95:8e:24:55:95:09:ca:6e:0a:a7:
87:db:f0:64:ea:b9:1b:35:f6:c8:cb:9c:8f:34:db:82:9b:f5:
6e:5c:1a:d5:2d:94:0d:e7:19:b0:59:d5:f9:73:b3:af:3a:88:
20:c8:27:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 07:19:54 2025 by rpki-client