Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1A0IlAZyI_fcu5gnWL71YOtOK8I.roa
File: 1A0IlAZyI_fcu5gnWL71YOtOK8I.roa (raw, json)
Hash identifier: 59kKNNcTaWcHP5I+BGAWX6TdZBCwrAZiyQEGTkO0vU4=
Subject key identifier: D4:0D:08:94:06:72:23:F7:DC:BB:98:27:58:BE:F5:60:EB:4E:2B:C2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018564A87E233CF473709CE8F2C71FD865A3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1A0IlAZyI_fcu5gnWL71YOtOK8I.roa
Signing time: Fri 30 Dec 2022 20:10:42 +0000
ROA not before: Fri 30 Dec 2022 20:10:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:64:a8:7e:23:3c:f4:73:70:9c:e8:f2:c7:1f:d8:65:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 30 20:10:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d40d0894067223f7dcbb982758bef560eb4e2bc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b1:2c:3d:8a:87:bc:5c:1a:50:b0:dc:af:d0:
24:39:23:a2:97:38:ca:64:3f:91:f5:5f:76:76:e3:
5b:01:e0:aa:09:5f:fe:4d:dd:9a:a1:eb:c2:d2:7a:
ad:e6:78:8e:7c:d7:0a:a0:3b:48:79:b1:94:88:3f:
27:90:80:09:68:cb:d5:e1:cd:4a:d5:fc:35:6a:f8:
1e:e6:f2:42:9c:b8:af:cd:f8:6b:1a:16:64:91:56:
02:4a:1f:08:6d:2a:53:86:28:61:41:69:40:6b:6f:
79:f7:f0:4d:1f:fa:f3:ac:5c:6e:45:64:ff:d0:79:
79:d2:b9:51:0a:bf:d5:42:ab:f7:9d:bf:5c:8a:2b:
08:d0:04:87:0a:fb:37:68:8e:03:31:4d:15:c4:72:
b0:e4:1f:02:8e:cb:2a:2b:89:34:e9:32:fd:bf:8d:
06:f4:33:a0:30:6f:15:12:a8:a0:00:5c:a7:08:bf:
40:6e:ad:37:16:1b:f0:ef:42:07:1d:62:4e:37:b6:
01:31:89:31:bf:a2:9c:aa:8d:29:13:b7:2b:02:32:
26:0a:ab:30:ba:9b:3d:e3:19:5a:9b:3d:33:92:da:
5e:e8:45:8c:db:8b:4a:05:c8:de:3f:ed:e4:ce:5c:
67:89:bb:94:0a:fb:3c:58:02:40:07:20:2a:1d:90:
ab:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:0D:08:94:06:72:23:F7:DC:BB:98:27:58:BE:F5:60:EB:4E:2B:C2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1A0IlAZyI_fcu5gnWL71YOtOK8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7c:90:14:13:35:99:cf:9c:2e:a7:86:98:e9:41:6c:f1:20:0b:
32:0a:1b:26:5f:50:9e:76:7f:dc:68:aa:d6:16:66:5b:13:de:
3b:e4:f1:e0:bb:f5:a4:08:86:d5:ae:06:1f:98:ef:e1:c0:28:
57:30:ca:08:34:2d:df:13:2f:c4:4d:8c:f0:2c:e4:f9:ed:63:
f6:ea:29:0d:6c:33:4f:bc:0a:a6:c3:91:9b:82:ff:c7:f9:97:
c7:ed:99:75:32:e4:04:93:6e:f9:a8:eb:eb:a0:04:47:db:9e:
dd:50:77:ef:f8:56:2a:48:2b:64:93:91:8e:34:22:55:72:86:
d9:18:d9:fb:5b:a8:6f:42:22:c7:16:93:99:40:f3:3a:2f:c2:
90:23:ec:db:b8:8e:d6:67:2d:a1:de:57:25:60:21:7a:3d:ef:
b0:0d:1d:ab:24:8d:ca:19:8c:ab:28:3c:c8:fa:40:ce:5d:fb:
31:9d:2a:a8:1c:96:76:b8:55:60:4c:8e:7f:f4:1f:08:28:11:
0b:6b:dd:6b:3b:a5:9d:d1:b2:e1:e5:4a:54:0e:60:80:5c:b3:
2b:0e:56:cc:01:2a:39:78:6c:a4:b0:3f:04:85:1e:5e:5a:c5:
89:4c:5e:9e:06:5c:69:44:74:3d:bc:0e:7c:15:5f:3b:b8:c9:
e9:0a:42:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 13:12:10 2025 by rpki-client