Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/txeYMI1CN08lHzTs3z1aaS6Ijuc.roa
File: txeYMI1CN08lHzTs3z1aaS6Ijuc.roa (raw, json)
Hash identifier: 6esvKIAOoTwJcIVWAy72kUTY3Xs1zFP72s7s7P0dTlM=
Subject key identifier: B7:17:98:30:8D:42:37:4F:25:1F:34:EC:DF:3D:5A:69:2E:88:8E:E7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6E6A6816
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/txeYMI1CN08lHzTs3z1aaS6Ijuc.roa
Signing time: Mon 28 Feb 2022 09:08:26 +0000
ROA not before: Mon 28 Feb 2022 09:08:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1852467222 (0x6e6a6816)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 28 09:08:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b71798308d42374f251f34ecdf3d5a692e888ee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ab:77:b2:8b:b0:50:c9:75:ad:4f:ed:bc:ac:
a0:b9:05:94:ea:d8:17:9b:0d:17:58:eb:c3:d4:e9:
b2:b6:4c:f6:3b:5d:d5:72:b6:fc:42:e0:d3:22:e6:
65:b2:57:96:0c:c3:de:b7:55:56:35:89:6b:93:46:
6f:6c:fd:8b:ba:2f:33:0f:9d:de:4d:24:3b:98:12:
4c:80:5d:92:3f:52:45:95:46:89:57:81:3b:f3:5b:
4a:d1:2a:a0:d0:6b:58:08:35:57:f7:e1:77:48:89:
6f:4d:bd:50:78:3d:d4:52:95:25:da:ac:40:70:c0:
db:e7:8b:7e:70:e3:fa:2c:3f:e7:51:04:c0:50:80:
6a:89:f9:75:2e:c3:df:bf:87:de:2a:4a:23:08:ef:
60:61:ef:bf:3c:0d:04:61:21:6c:45:8c:c5:4a:16:
83:01:37:a6:8c:89:0b:1b:91:02:69:1a:9c:dc:46:
52:da:4d:00:40:e7:f0:4e:88:01:76:6f:bc:7b:22:
3b:7d:f8:ab:57:eb:68:6e:6e:c0:9e:ba:e8:c5:c6:
9f:b5:17:38:53:69:1a:0e:c5:7c:68:a6:a2:ac:ac:
32:06:3e:b9:0b:43:6c:de:83:62:84:81:9c:aa:3a:
26:01:63:45:e6:11:15:f1:f9:43:bf:bb:79:fa:0a:
d3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:17:98:30:8D:42:37:4F:25:1F:34:EC:DF:3D:5A:69:2E:88:8E:E7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/txeYMI1CN08lHzTs3z1aaS6Ijuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
25:67:d2:94:89:3f:bd:3e:76:b0:7d:7a:dd:bf:3e:ae:ec:39:
c9:c0:7d:7d:9c:af:cd:68:7d:df:be:78:37:43:85:7f:07:35:
05:e4:df:cc:be:6c:58:12:ef:69:7f:c9:52:30:95:d9:27:29:
8a:0c:85:97:ec:f5:9f:16:e7:c1:68:d0:d0:c8:e8:11:4d:2d:
e1:0b:72:8f:e8:d1:99:95:fb:84:39:b1:77:1f:e1:e3:97:41:
6e:ff:d2:d7:90:9f:24:a4:01:b0:f2:17:3c:af:a8:92:96:ea:
4a:6d:a1:73:f9:9f:0b:39:5a:20:12:e6:ef:8b:91:97:fa:3d:
7d:e9:11:ec:1d:f3:4e:58:8a:e3:70:32:7f:67:e6:8c:48:ff:
fe:02:98:df:48:30:e0:06:1b:7d:1b:66:f4:27:24:9b:eb:dc:
5d:15:55:21:5a:af:a1:3d:3a:76:25:bf:b2:5a:9c:3a:3c:d7:
31:0d:2d:df:e0:37:76:b8:3c:57:62:76:15:ee:77:55:f8:54:
89:15:45:fd:8f:82:ee:61:68:a8:c7:c4:40:53:9c:75:ca:51:
05:fb:aa:f5:ff:6d:75:a5:7d:03:e5:2d:53:87:db:87:1d:01:
49:09:08:41:bc:fd:ae:61:d0:de:97:42:50:09:de:28:ad:b1:
5c:7c:08:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 08:18:46 2025 by rpki-client