Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2_spLFvj_82xaT14NLrbNJb4J44.roa
File: 2_spLFvj_82xaT14NLrbNJb4J44.roa (raw, json)
Hash identifier: xxIcw25kgDY2/87dvlvNbWgNwDk4AoCHXNvP9TKOPD8=
Subject key identifier: DB:FB:29:2C:5B:E3:FF:CD:B1:69:3D:78:34:BA:DB:34:96:F8:27:8E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 706C56E7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2_spLFvj_82xaT14NLrbNJb4J44.roa
Signing time: Mon 07 Mar 2022 07:04:14 +0000
ROA not before: Mon 07 Mar 2022 07:04:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:6331:5e2c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1886148327 (0x706c56e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 7 07:04:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dbfb292c5be3ffcdb1693d7834badb3496f8278e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:96:6b:cc:1f:91:ed:46:0a:26:4d:e1:fd:cf:
68:ca:d8:ad:4c:fe:f5:3d:d4:25:64:e5:18:ae:c9:
fd:1e:d6:c3:3e:1e:9c:0b:42:0e:3e:6c:c7:17:bd:
31:43:e7:90:d0:92:9b:90:4a:14:47:dc:81:10:a5:
f0:80:51:da:97:d8:3c:8d:8a:39:76:d1:7d:71:09:
2a:ae:01:f8:8c:6a:e4:6e:09:b4:06:84:20:70:54:
14:a0:d6:65:c4:60:c3:93:15:bc:e3:09:46:4f:ed:
95:fd:58:2d:c6:e0:40:1f:f1:2b:2e:14:d3:6e:e6:
6f:c3:ea:4f:bb:cf:2a:fd:98:df:5d:ae:e3:12:32:
b6:cd:7b:19:5f:99:d8:db:69:3d:97:80:93:e4:4b:
91:b8:4f:dc:0d:23:23:0a:92:83:74:1e:48:f5:3a:
db:04:32:98:8a:aa:96:d5:0e:8b:4d:9f:9e:d0:da:
ce:d8:73:b5:f6:b9:76:3d:d1:a2:ce:15:0d:dd:98:
65:28:6c:2e:ec:13:cd:9b:a9:a4:c8:64:c7:00:50:
9e:a2:cf:80:17:b2:7c:8e:c0:9e:b1:2a:57:ab:7c:
6b:53:6d:93:20:b7:d4:31:38:73:6f:00:bd:23:af:
7b:58:5f:65:ff:37:5d:33:d2:c2:da:d0:da:c4:0a:
a9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:FB:29:2C:5B:E3:FF:CD:B1:69:3D:78:34:BA:DB:34:96:F8:27:8E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2_spLFvj_82xaT14NLrbNJb4J44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
86:be:c9:45:52:78:5a:5b:13:5d:21:a5:8b:9f:6f:a1:e3:08:
74:55:db:49:66:79:d9:2b:da:c6:30:5d:f6:65:91:73:18:43:
a3:41:a0:36:08:23:a1:f4:16:77:1f:26:cf:e0:6c:6c:03:8c:
67:a5:e6:c7:7c:21:f5:48:c4:a5:b7:8e:a6:68:6e:e7:04:b7:
d9:07:01:4d:53:e8:3e:75:a2:a0:ee:04:f3:3e:93:d9:c3:05:
25:65:27:b5:f6:a4:b4:14:26:d7:42:49:3c:bd:f9:01:2a:44:
62:30:98:0a:bd:52:88:70:20:29:17:2f:ca:41:b2:be:bd:bb:
d8:91:5a:c8:e1:33:8c:24:f8:1c:97:05:8e:b6:a3:6e:eb:a8:
c3:cf:ca:3b:92:47:aa:1d:36:0b:eb:8c:db:8d:c0:52:06:45:
1a:5b:86:f8:1e:e9:ed:0d:f4:bc:07:20:cc:e4:54:11:90:95:
b6:96:0c:7e:00:ff:51:9e:a0:f5:df:45:db:f5:6b:36:51:a0:
72:11:3f:f5:a5:00:e2:97:11:c4:54:1c:8d:d4:5f:77:21:5e:
98:18:5d:35:38:b0:82:96:2e:79:b2:8e:de:f9:1f:b8:cd:94:
6f:cb:05:ee:14:b3:0e:78:e0:f8:c8:06:52:1d:e0:86:46:35:
8e:38:e5:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 03:15:23 2025 by rpki-client