Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/w4HEx9f-nK2EpHM5XR-Glp7m_Mg.roa
File: w4HEx9f-nK2EpHM5XR-Glp7m_Mg.roa (raw, json)
Hash identifier: bBNSDnIdHVGdQxuUKsZoh/dftCHfnVV8gzQScG+MfU4=
Subject key identifier: C3:81:C4:C7:D7:FE:9C:AD:84:A4:73:39:5D:1F:86:96:9E:E6:FC:C8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6BC725D8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/w4HEx9f-nK2EpHM5XR-Glp7m_Mg.roa
Signing time: Fri 18 Feb 2022 22:05:03 +0000
ROA not before: Fri 18 Feb 2022 22:05:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:edd:fc6a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1808213464 (0x6bc725d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 18 22:05:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c381c4c7d7fe9cad84a473395d1f86969ee6fcc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7d:03:c9:bb:17:d9:c7:ed:b2:14:8f:cb:97:
13:ec:e4:f9:07:81:5e:50:0c:64:38:86:58:68:27:
1c:4a:48:cd:28:21:ed:b9:29:27:a3:33:ff:8d:c8:
0c:80:4b:99:81:b0:52:2a:27:12:04:04:66:4b:f3:
a7:12:5c:aa:93:10:71:60:5e:f4:18:57:38:d7:f0:
b1:62:fc:d2:78:b8:9c:37:e0:41:ad:bf:55:8e:74:
5e:8a:59:6b:38:22:dc:12:fe:2d:9b:59:07:4b:c5:
d2:f6:49:b3:2f:9f:34:13:59:0e:94:14:e8:17:53:
30:9a:4a:84:05:08:77:39:5e:34:5d:9d:45:2c:dc:
25:a3:e0:78:8e:a0:91:0d:1f:05:3c:8d:c2:a1:ac:
33:88:28:db:55:26:c5:c3:09:c6:aa:03:46:60:49:
e3:59:96:10:33:a6:04:e7:a0:28:ca:14:e4:1e:3e:
c2:49:9a:d7:2b:bb:e8:65:29:3d:0c:21:e8:db:f1:
c9:ba:e0:19:8c:1c:88:84:b0:78:2c:ca:87:42:85:
41:6d:e8:24:27:e8:2f:ad:59:ea:7e:6b:0b:a6:c0:
ba:b3:23:c4:04:d0:52:55:5f:51:4a:55:ab:21:30:
48:8a:12:27:28:5a:54:67:67:e9:d3:8b:53:a4:94:
34:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:81:C4:C7:D7:FE:9C:AD:84:A4:73:39:5D:1F:86:96:9E:E6:FC:C8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/w4HEx9f-nK2EpHM5XR-Glp7m_Mg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a4:7f:0c:68:b3:cc:91:26:a3:47:ef:10:9f:d2:7a:e0:ab:62:
09:f7:0b:ff:7c:66:d5:63:f5:cd:fc:02:00:18:05:32:c8:e2:
4e:6e:b4:9f:f1:c3:a9:43:de:7c:e5:aa:d2:15:f3:db:08:ec:
38:e5:87:89:5f:1c:ce:70:6d:9b:ce:ce:54:dc:df:c9:a7:01:
63:cf:e4:05:d0:7e:a0:e7:35:54:24:d0:78:f1:88:49:93:50:
db:84:44:88:68:83:ba:b0:10:2c:a3:df:7e:bc:07:a6:b6:3c:
ec:bb:85:35:57:b1:fe:4a:1c:16:b4:50:8e:33:c8:52:43:73:
b2:86:7d:2c:16:66:66:78:c6:89:ea:da:58:8d:4b:69:7c:fd:
9d:1d:6e:b3:96:e3:5a:c4:cd:c0:91:c4:4b:6d:72:23:2b:17:
de:8d:4c:01:14:e5:be:16:ad:a5:d2:ce:d0:fb:42:26:e0:d5:
86:10:f2:c3:fc:2e:b4:6d:1a:f8:a7:a9:6e:de:75:59:02:1b:
d0:ba:9e:fa:40:98:b1:9f:22:5a:9f:1f:03:f4:51:9f:96:38:
03:64:a3:b6:6b:60:ad:1b:46:ea:33:7f:13:af:e7:2a:2a:1b:
87:9e:b8:ba:a0:b3:f9:15:2a:8b:47:b7:47:ae:de:4c:f5:49:
2a:19:56:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:53:32 2025 by rpki-client