Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0edGcNR1_V2QN0yRm__wpfMErwE.roa
File: 0edGcNR1_V2QN0yRm__wpfMErwE.roa (raw, json)
Hash identifier: F+H1RgERBfssgXqmvNRNlUR40a+mpLqwJOwOC7G8l5E=
Subject key identifier: D1:E7:46:70:D4:75:FD:5D:90:37:4C:91:9B:FF:F0:A5:F3:04:AF:01
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01843B10D6869E15D9B9854CEB946354D686
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0edGcNR1_V2QN0yRm__wpfMErwE.roa
Signing time: Thu 03 Nov 2022 01:17:50 +0000
ROA not before: Thu 03 Nov 2022 01:17:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:3b:10:d6:86:9e:15:d9:b9:85:4c:eb:94:63:54:d6:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 3 01:17:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d1e74670d475fd5d90374c919bfff0a5f304af01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:22:7e:e3:a1:e8:ff:49:d9:02:5f:00:5b:cd:
31:0f:d1:75:81:7c:13:aa:46:43:c1:81:55:8e:70:
72:e5:22:3a:96:0b:5b:22:96:e4:69:d8:6a:8d:a7:
9e:b8:14:e8:53:51:8b:8e:2e:a1:8c:3d:34:21:dc:
bc:b0:64:f4:af:41:47:30:76:03:13:eb:f1:37:d0:
00:58:ab:16:89:24:c5:87:8d:47:e7:dd:8d:f5:63:
99:e8:89:83:fd:62:2d:ee:3b:38:35:6a:a4:f5:38:
7e:b8:62:f9:e6:d7:ad:46:0d:fc:eb:d9:16:e8:3f:
ea:13:d9:f3:fa:47:ba:46:38:2b:27:da:10:91:32:
36:c9:14:37:90:70:45:11:61:3a:38:9f:c1:1c:15:
fc:0d:5b:a6:51:a2:0c:98:0b:dd:30:b4:87:09:35:
53:63:11:83:c2:9a:83:33:a0:b0:cd:d3:62:e7:be:
d8:40:b3:62:f3:7e:a9:5e:33:bd:e8:99:34:f6:29:
95:e7:02:4c:75:c8:24:fa:d7:56:98:1f:93:3b:f2:
a1:68:20:48:5a:d7:67:44:d1:2b:3d:13:43:4e:a2:
8f:2b:a6:82:f6:18:b3:cf:64:9f:a0:af:e9:8d:17:
d5:0c:7b:59:3f:98:e1:06:4e:9d:1a:01:48:3b:3e:
c4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E7:46:70:D4:75:FD:5D:90:37:4C:91:9B:FF:F0:A5:F3:04:AF:01
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0edGcNR1_V2QN0yRm__wpfMErwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b0:b8:22:15:90:c5:c9:53:70:26:3c:8d:d0:c3:5d:01:95:a3:
c1:8a:cf:ee:dc:a4:a1:37:0e:fb:31:71:54:d7:ac:4e:14:28:
a6:f0:a3:79:23:e3:6d:f6:6d:ce:5a:4a:db:d1:3c:ce:a9:2c:
89:e8:54:ec:a3:a9:c4:b8:65:c4:70:23:a8:28:aa:0f:3b:37:
63:a6:f7:98:35:a9:c3:77:61:03:3c:78:4d:c3:13:77:2b:c8:
a4:e5:93:75:78:f8:4d:82:c7:9d:57:c4:02:61:7d:ed:ac:17:
d6:0c:ff:f6:0b:1d:20:64:e9:75:e2:03:d4:b1:5e:ec:d2:0a:
49:61:f5:a9:74:54:1b:4e:9f:e7:30:f9:77:b1:b5:3d:8e:a0:
3f:f1:53:ca:5b:aa:89:0d:83:cb:60:57:94:45:19:2c:08:dc:
99:0b:47:10:b5:b9:e8:d6:ae:ab:68:2a:c1:49:e0:5b:3b:b8:
f1:0a:b8:38:92:0a:6d:d7:a7:04:58:52:ed:5f:fd:d9:ba:e3:
5b:2a:64:ed:9c:41:89:6c:6d:a8:ca:40:34:d7:75:51:c6:4a:
54:66:68:f8:f6:c4:c7:99:bb:a2:5f:d1:07:c3:a3:08:18:f3:
e3:09:75:c3:c7:d3:6e:41:25:a6:2d:e2:dd:34:1c:6a:3d:ba:
86:80:a0:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:06:53 2025 by rpki-client