Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x1Vr3LMa097SEX4mK-benCDhtig.roa
File: x1Vr3LMa097SEX4mK-benCDhtig.roa (raw, json)
Hash identifier: C3C4AJ09AfMBvWSUk0Oox4NxJiVttwl7mJhnNtcHZFE=
Subject key identifier: C7:55:6B:DC:B3:1A:D3:DE:D2:11:7E:26:2B:E6:DE:9C:20:E1:B6:28
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184AE10493960DA4A31FB0F2983CCC1D165
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x1Vr3LMa097SEX4mK-benCDhtig.roa
Signing time: Fri 25 Nov 2022 09:13:33 +0000
ROA not before: Fri 25 Nov 2022 09:13:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:9f03:9814/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ae:10:49:39:60:da:4a:31:fb:0f:29:83:cc:c1:d1:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 25 09:13:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c7556bdcb31ad3ded2117e262be6de9c20e1b628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9a:c1:26:d4:bf:61:6f:3e:6c:5e:c7:c0:55:
df:b9:cf:8d:de:b1:71:c2:9a:e2:d4:47:11:84:1c:
51:93:19:32:86:e3:ff:27:64:50:53:82:77:3a:7f:
b2:1d:e1:cb:86:96:64:a6:66:0b:bd:3c:4d:44:86:
1a:a8:3f:05:6c:5a:7b:10:dc:5e:64:d3:be:cb:23:
19:30:a2:8d:f8:00:c6:a1:45:82:0a:f2:c2:86:88:
b3:7b:15:db:0a:b0:1b:12:68:90:ac:00:06:3e:61:
45:da:ec:95:fb:79:ee:99:56:e2:86:4a:af:a4:54:
b6:be:2d:41:dd:6a:7b:01:80:b0:16:9c:3c:37:9d:
87:10:13:ba:9b:d2:18:f7:26:09:85:f8:a3:23:e4:
95:8d:8d:7f:dd:7e:b3:c4:b4:4c:fc:13:e8:59:d6:
c7:44:14:ad:3c:ad:9c:01:75:86:03:2b:cf:23:50:
d4:7e:f3:e9:0f:7d:e8:6c:0f:75:fa:15:f6:9e:a5:
a7:d7:9c:f8:05:f8:e2:07:b1:21:2a:28:1f:e7:c6:
b7:b6:18:be:76:6c:8f:c2:e1:6a:77:a2:af:81:b7:
90:3b:e6:57:72:63:d9:24:17:d8:ce:9e:d8:7f:be:
4e:eb:04:9c:3c:ab:0c:b3:46:4f:9f:c9:61:5d:2d:
3c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:55:6B:DC:B3:1A:D3:DE:D2:11:7E:26:2B:E6:DE:9C:20:E1:B6:28
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x1Vr3LMa097SEX4mK-benCDhtig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5c:3a:78:21:e9:dd:eb:1f:9a:c9:3c:f0:b9:ff:5c:16:b8:d0:
22:ea:bb:6a:4e:ee:a7:b5:08:bf:e5:bc:c0:a7:e7:36:e7:0c:
5f:7d:cd:26:c7:44:f0:00:9d:69:0d:1d:3b:e3:eb:75:b1:93:
62:76:c1:c2:aa:a6:4c:30:9b:4f:66:05:04:76:dc:a1:12:7b:
33:60:b4:c0:ab:90:5e:3c:e9:cf:a3:b1:bc:62:3a:a3:c1:d3:
89:7c:5c:00:79:6b:e6:89:ab:8d:d2:09:74:5d:23:15:f2:3f:
a9:d3:37:07:1d:ca:89:2c:6e:c9:d9:a6:a7:79:c5:06:c8:96:
dc:af:86:2d:bc:02:50:15:ce:1d:c3:bf:c7:d2:39:0a:89:ad:
fe:1f:24:4c:41:45:fb:d8:e7:4f:7b:ae:5c:14:b7:f5:1f:cf:
d7:79:60:9a:cb:27:3c:7c:b1:fb:71:b1:d2:94:4a:7d:64:37:
7f:e5:22:18:82:71:d0:14:b5:be:5d:13:41:82:54:be:24:12:
a5:63:65:5c:1d:bf:c1:7d:fb:03:5e:d2:25:2f:7c:38:49:c3:
72:ff:b4:07:85:9f:27:8e:25:81:6d:77:31:c9:00:c7:29:0d:
c0:be:5b:b4:39:88:d9:02:79:5d:08:fb:26:e4:66:55:1d:f4:
57:02:80:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:34:01 2025 by rpki-client