Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t9LC5skU3_dww3_2ShI3Gr1uIhA.roa
File: t9LC5skU3_dww3_2ShI3Gr1uIhA.roa (raw, json)
Hash identifier: jFGEimsOoTpRcZG2fvQtONqu0n8djEnafrutTgzoMxg=
Subject key identifier: B7:D2:C2:E6:C9:14:DF:F7:70:C3:7F:F6:4A:12:37:1A:BD:6E:22:10
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01851430FF6D3164619D08660561D9B53D56
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t9LC5skU3_dww3_2ShI3Gr1uIhA.roa
Signing time: Thu 15 Dec 2022 05:10:33 +0000
ROA not before: Thu 15 Dec 2022 05:10:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:14:30:ff:6d:31:64:61:9d:08:66:05:61:d9:b5:3d:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 15 05:10:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b7d2c2e6c914dff770c37ff64a12371abd6e2210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:88:d9:88:1a:68:cc:04:f9:9c:70:8d:93:66:
b0:4b:c0:9d:e6:d3:a3:d1:3b:20:97:b6:73:a2:9f:
d5:ab:06:44:d4:f5:ab:70:b8:24:09:a4:c7:10:62:
7c:c5:6e:78:51:ba:b9:c8:e7:b6:a9:73:83:9a:23:
aa:cb:2d:db:e3:e5:f4:c3:c5:16:8a:f0:34:b7:ac:
1e:c6:0d:29:31:b7:4e:56:8f:c6:5a:2a:eb:f0:78:
09:bd:1d:cc:49:e4:40:b9:35:a1:49:e3:77:50:38:
24:81:a7:4e:68:1d:7b:9b:0b:1e:06:8e:c8:f6:c3:
09:59:79:7d:65:e4:e5:55:0b:a7:27:6b:9c:41:f6:
dc:a4:d4:67:7e:f6:40:4e:ab:06:a3:5a:f0:37:f0:
d0:d3:b9:4d:7d:a3:06:a7:4f:da:03:eb:d6:d6:fe:
d4:78:f9:1f:3a:22:c8:45:64:89:c8:99:5e:f1:e0:
8e:59:49:db:0b:a7:0a:ab:73:6d:60:b2:8c:23:5a:
76:6c:95:02:51:38:ed:1d:c9:09:62:b1:76:25:99:
73:66:b1:03:f2:0e:f4:b2:fc:b5:c2:a1:65:40:84:
f6:39:fd:0f:27:07:84:16:83:40:00:46:6f:6f:6e:
56:7f:99:52:f1:8b:55:88:74:aa:b9:f5:0a:9a:94:
64:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D2:C2:E6:C9:14:DF:F7:70:C3:7F:F6:4A:12:37:1A:BD:6E:22:10
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t9LC5skU3_dww3_2ShI3Gr1uIhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b5:f3:0a:3f:61:9b:a3:34:23:96:a8:7b:43:b4:fd:7f:83:d1:
b7:14:b5:63:90:43:57:5f:44:3d:71:e4:d6:ce:2a:f8:17:43:
be:4d:6e:e3:69:7e:f8:2e:65:87:09:36:f9:24:39:e4:b0:bf:
3d:89:23:6e:30:6e:f7:69:32:11:d2:bb:f8:95:d4:f2:c7:58:
b3:ef:45:ca:ba:84:21:e6:78:dd:f8:d1:c4:da:a0:32:9f:de:
2e:b1:53:6b:91:5d:39:31:0e:4b:68:a7:6b:01:93:fc:0c:b5:
59:87:f7:c1:f8:97:85:7f:a6:f1:50:43:bb:66:72:9f:3d:1a:
09:88:04:8d:c6:78:63:03:c7:59:15:e5:88:5b:0c:ff:e4:ae:
3a:e0:ff:96:f0:81:c9:63:17:16:d9:f0:e0:83:6f:37:55:77:
34:58:f6:00:97:43:ff:5f:b9:3b:45:fa:d1:85:44:af:b0:43:
76:14:40:14:81:7a:1e:24:e5:34:9b:02:6b:07:a9:45:83:7f:
2f:96:9e:53:b0:d9:5a:d7:a0:27:fa:fa:32:3e:ce:fb:c5:33:
ac:a1:6e:91:51:3c:ca:3a:82:c3:1f:ca:17:3b:70:cd:f1:33:
8e:7f:c7:34:9a:ce:17:5a:1d:4e:b7:e2:6a:10:d7:17:cb:70:
4b:a5:5c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 13:57:12 2025 by rpki-client