Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-hFOJRghnoeOYW-bFS2wU1oWrzQ.roa
File: 1-hFOJRghnoeOYW-bFS2wU1oWrzQ.roa (raw, json)
Hash identifier: eca/MvaDNDJ64ZlrmxEoweBJxFgRLZP+s0DlM2IeYuI=
Subject key identifier: FA:11:4E:25:18:21:9E:87:8E:61:6F:9B:15:2D:B0:53:5A:16:AF:34
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182383F85E38211FB4027410F239C7B8ECE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-hFOJRghnoeOYW-bFS2wU1oWrzQ.roa
Signing time: Tue 26 Jul 2022 02:04:23 +0000
ROA not before: Tue 26 Jul 2022 02:04:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:38:3f:85:e3:82:11:fb:40:27:41:0f:23:9c:7b:8e:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 26 02:04:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fa114e2518219e878e616f9b152db0535a16af34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ea:98:aa:35:d8:68:3a:de:d5:df:2c:d0:2f:
b0:79:20:d1:3b:05:4b:21:4e:44:75:95:a8:ef:ed:
f6:6a:64:2b:a9:f5:4c:9a:b1:ee:97:e7:ff:fa:3f:
9c:df:5d:6b:00:d0:cb:19:57:9b:2e:7b:7c:e3:07:
7c:84:78:15:30:cf:f6:27:5a:08:84:af:18:fb:16:
05:d6:5e:27:12:24:2f:7b:18:27:bc:b7:1c:db:24:
28:a3:50:3c:5f:b2:be:17:e3:26:44:a0:cd:41:03:
4c:a0:4d:10:46:53:ed:97:18:10:d7:87:a0:13:47:
a3:1f:5b:c0:17:c8:10:ae:63:e5:fe:68:4c:52:d2:
77:fb:71:3b:d1:e3:58:d6:98:b0:49:d4:1d:61:00:
fc:71:b6:01:c7:9a:87:22:23:dd:aa:34:d8:d5:86:
53:ec:4f:d6:c6:80:e4:d2:c0:04:33:44:e6:13:ef:
46:51:33:cf:a4:e3:a8:56:b8:41:a9:72:4b:d6:73:
e7:46:38:ba:4d:16:47:5d:2b:d6:10:b4:58:04:2f:
0e:7e:a3:b8:f8:05:4f:60:b6:c5:1b:20:d0:be:a6:
81:c8:26:8e:e2:d6:87:4f:ce:95:1c:8b:19:76:2a:
cd:41:21:21:d7:2d:c7:cf:54:f8:78:99:1a:05:f8:
e3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:11:4E:25:18:21:9E:87:8E:61:6F:9B:15:2D:B0:53:5A:16:AF:34
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-hFOJRghnoeOYW-bFS2wU1oWrzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3a:e3:25:3d:1e:8e:b8:e4:14:79:6a:ed:fb:1c:ee:ef:5f:da:
c0:7b:eb:a0:55:4c:2f:4e:31:df:20:b1:74:a0:22:44:8c:66:
61:bd:4a:11:1d:93:99:70:93:08:b0:85:0a:57:43:d9:b8:c3:
e2:85:22:d0:52:22:a2:1b:20:6b:41:bd:91:21:b8:b6:5d:45:
c9:d6:fb:a7:73:3c:a6:8d:36:84:a8:f5:ad:73:20:63:0a:22:
7b:4f:38:aa:07:b8:d9:e7:8a:e6:71:3f:c0:54:1f:f6:7f:97:
67:0e:68:43:c9:a9:01:ff:3e:94:a0:be:61:f9:37:10:4c:3b:
06:55:21:15:d2:43:d4:23:6f:ba:c8:ea:f9:c3:8b:03:d0:bf:
fd:87:92:f6:b5:78:d0:0e:34:18:04:99:1c:11:4d:47:4d:be:
6c:22:bc:fd:32:ba:00:6c:cd:57:4c:5a:4a:96:79:8a:0d:c1:
4f:27:66:d2:51:9f:aa:38:d3:01:fd:20:be:18:32:a0:e9:1e:
2a:61:bc:04:3c:03:49:8c:da:d1:e1:9e:3a:58:5f:44:cd:56:
07:f7:1a:37:b6:0f:e3:22:74:63:77:c0:90:91:24:b4:94:3e:
a9:ab:59:f7:5e:c0:75:3f:9c:50:82:98:63:54:f0:4a:50:b9:
34:f7:a7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 08:36:51 2025 by rpki-client