Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x-56QSCH1J8GVPwLAj63PFlWB3g.roa
File: x-56QSCH1J8GVPwLAj63PFlWB3g.roa (raw, json)
Hash identifier: fqivzKRQU9j9xl45ZiiNLTgIZV9j9mPHdTVU3jI7AXg=
Subject key identifier: C7:EE:7A:41:20:87:D4:9F:06:54:FC:0B:02:3E:B7:3C:59:56:07:78
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01851A9B7EB3949B018DD4158088611720D7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x-56QSCH1J8GVPwLAj63PFlWB3g.roa
Signing time: Fri 16 Dec 2022 11:04:36 +0000
ROA not before: Fri 16 Dec 2022 11:04:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:1a9b:2541/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1a:9b:7e:b3:94:9b:01:8d:d4:15:80:88:61:17:20:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 16 11:04:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c7ee7a412087d49f0654fc0b023eb73c59560778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:fd:4a:b6:98:f4:69:d8:b4:34:0b:de:97:01:
d6:9c:b7:3c:fd:6c:ab:34:48:72:07:45:ee:56:9f:
b1:82:04:bd:15:1e:cf:7d:8a:a5:21:c5:89:98:05:
d2:38:20:41:38:b6:97:4d:86:35:fd:24:cc:cb:35:
c5:f9:21:1b:90:6c:fe:f9:25:13:c5:ce:f2:f3:3c:
ce:84:66:98:e8:71:cc:c9:c9:7d:7a:9c:82:70:91:
e4:ad:2d:b4:cc:d1:e3:ea:6c:ee:18:27:26:10:44:
0e:aa:0f:f6:3c:5f:54:64:bc:f5:3a:82:93:4f:6a:
b7:34:84:87:55:07:48:a9:10:9a:dd:0d:46:36:92:
af:c3:d6:9f:f7:e2:7e:32:e9:39:a1:9c:ab:a2:96:
e8:5d:1e:1f:89:c4:43:26:73:19:c9:aa:d5:ba:fe:
f2:0b:ce:67:24:e7:49:3e:95:e7:32:ca:de:be:42:
27:ae:7a:a3:80:fa:9b:bb:d5:ab:e9:dd:08:be:a4:
61:8a:57:a5:74:8c:e7:63:91:50:a9:07:44:0c:dc:
7c:4e:82:a4:49:d3:81:8f:82:a3:6f:25:3c:83:6b:
e1:eb:a1:5e:e6:8f:3a:c7:41:29:62:07:d7:aa:c2:
cc:65:cb:b9:ad:0a:a6:28:6b:41:5d:24:c7:54:03:
c1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:EE:7A:41:20:87:D4:9F:06:54:FC:0B:02:3E:B7:3C:59:56:07:78
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x-56QSCH1J8GVPwLAj63PFlWB3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
03:6f:06:1e:73:eb:f2:11:97:f1:fd:a6:e9:18:8d:d8:2a:bf:
86:ba:bb:42:2e:58:45:72:6b:4d:e6:22:e3:a9:83:f3:bf:0e:
d9:81:3d:b3:71:d7:70:bf:69:67:27:c0:83:5b:71:2f:ef:46:
6d:fd:db:7a:fe:84:ac:da:de:20:60:f0:65:8b:49:37:69:80:
14:1d:af:76:da:aa:e0:16:7a:1f:c0:7e:78:8f:b3:b8:82:3d:
dd:30:1c:e3:ee:08:0f:cf:17:33:a6:11:79:0e:f4:78:0c:0f:
7b:ec:cc:06:1a:e6:01:3b:a4:5b:18:03:d5:aa:47:64:40:96:
64:20:37:bc:44:1e:e1:41:09:be:47:28:48:f5:6f:67:af:fe:
76:e1:4c:7e:ca:d9:dd:68:7f:74:ab:f5:e5:1b:3f:50:5d:4a:
49:2f:e7:d8:e0:2a:1f:46:6b:de:fc:a3:65:31:03:b0:91:28:
82:1c:7a:c3:24:f3:0a:bc:60:33:e7:68:66:67:bf:88:aa:1e:
9e:70:45:26:3b:38:1c:4c:ac:da:ce:bf:91:3d:4f:a2:fe:fc:
56:20:f7:bb:09:9e:e9:d7:3a:68:70:f4:ea:15:ff:e6:88:18:
36:cf:0b:de:66:a4:78:2d:45:64:f8:ef:3a:16:1a:a9:9c:55:
d0:5c:41:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 21:41:02 2025 by rpki-client