Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t75Ze46_zZ508k9Px29bCT0yxN8.roa
File: t75Ze46_zZ508k9Px29bCT0yxN8.roa (raw, json)
Hash identifier: Ti921X+JGB5zQTDRPpVsb3+CfeTjJzqcgWCQqcdQhg8=
Subject key identifier: B7:BE:59:7B:8E:BF:CD:9E:74:F2:4F:4F:C7:6F:5B:09:3D:32:C4:DF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 67AF0207
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t75Ze46_zZ508k9Px29bCT0yxN8.roa
Signing time: Fri 04 Feb 2022 02:09:35 +0000
ROA not before: Fri 04 Feb 2022 02:09:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1739522567 (0x67af0207)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 4 02:09:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b7be597b8ebfcd9e74f24f4fc76f5b093d32c4df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:06:37:1c:48:fc:2c:69:ed:9a:86:af:7b:45:
32:7e:82:2d:0a:d7:d5:99:31:4a:fe:35:b1:0a:d1:
c1:90:7a:52:62:bc:56:14:27:c6:b4:b9:76:c9:3c:
c3:21:d7:c2:dc:39:89:ff:d6:e5:3d:49:31:f2:48:
e5:3b:ad:eb:d1:4c:dd:12:79:46:16:6f:08:1b:10:
d1:1e:fd:be:7e:c3:cf:45:0e:39:83:0c:c0:b3:56:
ec:53:9a:c3:53:b7:6c:14:15:d3:da:bc:c3:d1:14:
62:aa:4e:77:2b:ba:93:32:ad:e5:1b:ce:b5:4f:c3:
c1:93:73:cb:b4:9e:80:ba:b1:a6:bb:64:e3:1e:5e:
53:f5:e6:87:2a:6f:4e:8a:0d:76:50:c4:0a:29:1e:
c0:28:09:fb:1c:85:e2:10:d5:a4:62:fb:fb:20:22:
a2:98:fe:e6:da:b4:20:9c:d4:02:53:f5:04:b5:a3:
f4:43:de:c3:ee:20:3a:21:4e:ce:63:11:4e:c1:e8:
bd:38:90:5a:b1:7c:5d:00:ad:68:e1:3f:98:68:d4:
49:f7:3d:55:7f:89:34:66:2c:39:06:c8:dd:cb:f7:
a8:a9:8f:35:ab:47:72:0e:04:69:52:8e:d7:fe:b2:
ff:42:e7:09:ec:ce:22:69:58:6a:96:c6:c1:d7:1a:
f1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:BE:59:7B:8E:BF:CD:9E:74:F2:4F:4F:C7:6F:5B:09:3D:32:C4:DF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t75Ze46_zZ508k9Px29bCT0yxN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
91:d5:43:d8:4d:83:82:ef:6c:b1:4a:f0:01:57:ae:51:02:b7:
fc:38:5f:82:3a:24:c9:60:8f:70:8a:0a:b4:b9:e6:af:3f:c1:
29:6b:e2:d0:a8:1e:2b:22:37:32:3c:40:23:54:10:0f:f7:5c:
70:a7:f8:f6:31:1a:de:40:db:e1:d6:cf:58:56:e3:f4:1e:f3:
97:09:67:24:5e:e3:8e:0b:71:0a:0c:09:8e:3e:e2:9a:f2:43:
ae:ee:c7:dd:11:3c:78:26:51:e8:db:14:99:b4:13:59:a1:6a:
5e:3b:6e:64:39:af:31:ad:41:75:c7:17:ca:22:2c:5d:f5:f0:
56:cf:12:74:64:f0:4d:91:d9:0d:38:3c:32:6c:1c:36:a7:7d:
67:38:a7:5d:2e:7e:26:47:d9:60:7e:7e:11:78:7d:4f:43:0a:
36:09:28:1b:06:24:ee:21:09:f7:c0:77:bb:ae:de:91:95:ea:
78:fc:f4:e2:1b:5f:b8:f3:f4:bc:6f:22:74:af:c7:e1:fa:89:
e0:ea:d6:60:8f:68:3d:55:9e:93:e4:fc:dd:ae:69:a3:91:ea:
7d:74:74:b3:62:65:a8:94:38:95:44:b0:1b:d9:8c:0f:00:3e:
6b:36:90:40:56:32:35:e4:00:e7:2e:bc:d3:b8:83:ea:9e:96:
8e:fb:95:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:36:59 2025 by rpki-client