Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tu71tXpA6Dp-9OHrn5pSHyeyhCs.roa
File: tu71tXpA6Dp-9OHrn5pSHyeyhCs.roa (raw, json)
Hash identifier: g7jWHmtBTnbL4Se+tHEeHAggSdpem7j8aU6SGT2lbRw=
Subject key identifier: B6:EE:F5:B5:7A:40:E8:3A:7E:F4:E1:EB:9F:9A:52:1F:27:B2:84:2B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6DD9845E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tu71tXpA6Dp-9OHrn5pSHyeyhCs.roa
Signing time: Sat 26 Feb 2022 11:08:34 +0000
ROA not before: Sat 26 Feb 2022 11:08:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1842971742 (0x6dd9845e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 26 11:08:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b6eef5b57a40e83a7ef4e1eb9f9a521f27b2842b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:27:9a:05:94:47:91:26:cd:30:d2:17:55:40:
27:da:fc:5b:f8:e7:4b:c0:b2:38:25:24:34:86:fa:
8c:b4:c5:67:89:67:e6:4d:63:5c:9c:01:54:44:7d:
61:7a:eb:7e:41:d7:d4:ab:fe:f4:67:0d:11:89:58:
8b:eb:21:9b:6a:88:f3:03:33:06:c2:24:fd:e5:19:
1c:66:a6:30:d5:09:3f:c5:a9:97:a6:b0:86:c6:fe:
1a:c2:da:63:37:0f:8d:35:8d:6f:c6:00:35:4c:a4:
1d:ce:32:77:5f:b0:fd:b2:ed:f8:82:09:d6:eb:34:
b4:6d:bc:20:dc:97:28:93:59:43:02:b8:78:f4:74:
64:91:6f:8a:6f:6e:2c:41:cf:a0:d9:28:79:24:be:
41:2e:14:dd:33:09:f1:d0:2a:ff:28:64:7f:54:c9:
f3:45:20:59:0e:34:5f:78:5a:f6:cd:b2:69:d7:a1:
53:8f:46:34:ba:7b:c6:03:d2:75:2a:64:15:15:f1:
a7:2c:e2:37:1e:74:d0:b3:d8:3f:d8:e6:f7:1d:a0:
15:68:d1:ee:29:86:32:ff:8e:d6:37:bd:9a:7f:34:
9d:d3:aa:b2:d4:6c:66:18:b6:d5:48:0c:18:a7:e3:
82:cc:ac:9b:75:01:12:fb:6f:83:5e:07:bc:6c:44:
6d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:EE:F5:B5:7A:40:E8:3A:7E:F4:E1:EB:9F:9A:52:1F:27:B2:84:2B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tu71tXpA6Dp-9OHrn5pSHyeyhCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0d:91:31:a3:97:1a:4d:e6:79:3a:6f:56:05:70:e7:4b:6d:97:
8b:d9:22:03:4d:75:b5:7f:56:24:89:80:c9:72:b5:86:fb:1b:
bd:6c:cc:88:30:e4:cc:c4:74:56:c0:d2:d3:31:c3:03:7b:9a:
cf:a0:3b:e2:cd:50:65:b0:76:41:e2:b2:cc:fe:28:a2:f5:eb:
55:3c:28:52:0c:2a:d0:67:4a:6f:f3:8c:01:c9:8d:ed:99:0d:
25:73:16:cd:1e:3d:f0:93:91:9e:5d:c4:9d:1f:1d:5b:2c:71:
7f:0d:8d:48:c0:a4:3d:86:18:24:4f:26:db:9c:4b:f7:a3:a5:
43:40:8b:d4:2f:6d:ca:6a:4b:4e:c9:c9:c1:3f:73:d9:3d:a7:
52:c4:c9:91:da:2f:1b:e7:50:ef:32:4e:90:4c:08:9b:6b:b4:
13:07:2d:7d:5c:32:95:7b:16:74:b7:78:f2:dc:3b:b5:36:42:
42:64:0a:5f:a5:a7:94:b6:6f:d6:5d:bc:0d:a8:b3:f0:97:7a:
5f:75:7e:8f:8d:0f:92:a7:53:49:70:a7:30:82:a1:a0:4e:11:
f2:8d:04:d8:b0:52:49:ed:5d:9d:2c:00:53:e9:a6:81:69:b3:
7e:bc:02:13:1c:70:cf:f4:99:d8:c3:ca:e9:ae:4d:89:d8:d9:
1b:18:39:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 10:40:59 2025 by rpki-client