Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2yCnPvpV6h7EBhjveW65xATiwJ0.roa
File: 2yCnPvpV6h7EBhjveW65xATiwJ0.roa (raw, json)
Hash identifier: OiShXZehITvO5totBuk9zN7No/0UneczFln/JJpRU5o=
Subject key identifier: DB:20:A7:3E:FA:55:EA:1E:C4:06:18:EF:79:6E:B9:C4:04:E2:C0:9D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184F58319AF5E5015DA996F43B3761A9449
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2yCnPvpV6h7EBhjveW65xATiwJ0.roa
Signing time: Fri 09 Dec 2022 06:12:00 +0000
ROA not before: Fri 09 Dec 2022 06:12:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f5:83:19:af:5e:50:15:da:99:6f:43:b3:76:1a:94:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 9 06:12:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=db20a73efa55ea1ec40618ef796eb9c404e2c09d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:85:a7:bf:9f:af:f8:96:5f:6b:97:2d:10:fc:
80:ae:92:92:58:5b:99:63:7a:f8:09:0e:32:93:0d:
b3:9c:8c:7c:a2:cc:df:57:4f:6a:cf:48:e0:b6:26:
34:d9:e0:a3:98:3a:c3:d5:b6:a0:4b:e0:cc:57:5f:
b4:82:a2:74:15:f9:8f:3e:0d:c5:03:ca:13:d8:d1:
ae:c0:a3:10:e7:2c:5f:06:2c:dc:bb:12:09:9b:6d:
97:77:cb:6d:9e:f7:3e:cd:83:e7:f8:be:31:40:a9:
49:04:d7:8a:92:4d:86:1d:bc:53:f5:f1:41:86:a9:
e9:55:4f:e0:49:57:27:0b:97:7e:4b:ac:9d:08:c9:
90:18:24:a9:e1:67:2d:51:cc:96:3e:75:c1:9c:cf:
af:da:28:25:fe:6a:73:7b:60:48:6c:dd:d3:36:37:
a0:11:14:68:ae:98:b4:63:6b:7e:34:b7:ab:e8:ee:
29:28:78:7c:71:45:96:de:c7:aa:36:60:be:44:0a:
c4:f4:32:c8:43:45:8b:2e:04:e3:2c:a5:b7:2d:71:
12:b5:cb:a6:59:b6:09:86:64:a9:0e:57:8a:f8:6c:
47:bd:6d:c4:80:99:51:ec:de:15:5b:e7:bf:de:3d:
96:60:cc:70:6b:10:e3:a7:46:ad:07:06:83:62:4f:
c0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:20:A7:3E:FA:55:EA:1E:C4:06:18:EF:79:6E:B9:C4:04:E2:C0:9D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2yCnPvpV6h7EBhjveW65xATiwJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9d:3e:f2:91:56:80:36:14:70:29:cd:0b:c5:52:6c:cf:c5:1c:
b5:16:23:57:90:f4:a3:4f:fd:d8:f5:11:fd:98:e5:80:e1:da:
c0:a9:0a:5f:7e:28:cf:94:b9:2c:ec:b4:ab:71:d6:22:4d:5a:
f5:0b:37:65:73:a2:f1:49:8d:3a:fc:12:5f:70:3e:76:1b:33:
26:49:ea:56:96:c0:95:a4:1e:90:03:d3:70:19:73:fb:d2:2d:
9c:12:da:0b:61:38:a0:7d:e8:d2:17:fa:5a:6a:7a:1c:60:0a:
4b:50:b8:57:93:87:a3:d0:b2:09:b4:0f:41:ae:1e:a6:7c:a7:
ce:a9:a3:07:0b:8a:cb:30:4a:19:a6:07:e8:14:0e:6a:35:81:
49:82:53:43:fc:f8:5a:d7:03:59:84:41:8e:70:43:fc:84:e4:
a9:f0:2a:ef:b1:de:ed:12:62:70:2d:44:4e:42:85:60:64:05:
2b:eb:1d:8b:a4:32:bd:01:5a:6d:4e:c5:6b:d1:da:87:b3:73:
14:c2:29:c6:dc:a5:e2:7f:e0:49:3e:fe:70:11:a4:e9:14:f8:
4e:25:bc:98:aa:d2:ca:be:7e:70:a9:07:d3:f6:1a:51:ed:a2:
68:0c:bd:4f:7e:cd:d9:50:c0:c0:dc:48:37:59:16:25:f7:c9:
00:f2:ac:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:20:19 2025 by rpki-client