Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/338hiVTucedI3UOkQ0KPKtA1jTA.roa
File: 338hiVTucedI3UOkQ0KPKtA1jTA.roa (raw, json)
Hash identifier: 6BDfsbyQwicrM2pzXb5BFE/5vW9BPdLA6QmgEDnDG14=
Subject key identifier: DF:7F:21:89:54:EE:71:E7:48:DD:43:A4:43:42:8F:2A:D0:35:8D:30
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 73D13F9F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/338hiVTucedI3UOkQ0KPKtA1jTA.roa
Signing time: Sat 19 Mar 2022 12:10:46 +0000
ROA not before: Sat 19 Mar 2022 12:10:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1943093151 (0x73d13f9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 19 12:10:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=df7f218954ee71e748dd43a443428f2ad0358d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:78:55:98:0d:92:cc:fb:1b:7d:a0:36:53:84:
63:be:71:58:33:07:ab:92:a1:b4:a3:d4:a2:b6:78:
09:b5:fe:f7:3e:2c:0a:0a:22:b0:b5:10:43:e7:05:
a9:62:c6:2c:22:2d:9d:66:01:71:6b:fe:ee:18:7d:
ce:58:58:12:45:d4:ab:b2:74:5b:df:52:c5:45:49:
47:4c:1a:90:37:a1:a5:54:f9:43:ba:14:fc:cd:a4:
22:5f:13:45:b7:fa:cf:a2:e1:a3:83:74:3f:d9:19:
ee:9b:49:d6:ba:3c:bf:e2:27:c5:66:b7:2f:ed:08:
eb:1b:5f:72:04:35:c4:19:15:4f:e2:eb:47:56:47:
44:a9:90:c9:cb:87:81:53:99:11:74:40:15:a5:e4:
a0:09:29:86:11:f8:49:af:1f:7c:a1:0f:7e:e7:7c:
8d:55:21:02:a5:19:3a:7f:1a:2c:c6:18:50:4b:8c:
f6:15:ac:5b:9d:79:fc:7e:b1:0a:63:e1:b2:d2:3d:
2b:b4:4e:85:9a:44:3f:3b:79:11:ce:2b:ee:98:ae:
2a:1c:63:cb:8f:a4:47:5b:af:11:79:e0:3d:46:b6:
90:29:0d:d7:3f:c7:25:02:6f:ff:a9:19:50:98:6f:
be:1b:6a:4e:87:72:cd:3d:d2:20:d3:2a:51:79:ea:
fb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:7F:21:89:54:EE:71:E7:48:DD:43:A4:43:42:8F:2A:D0:35:8D:30
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/338hiVTucedI3UOkQ0KPKtA1jTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5f:65:2c:2d:1b:d3:79:8c:e1:b8:ec:6e:94:e1:7d:85:76:64:
99:03:19:aa:fe:dc:10:ad:eb:db:1d:13:0b:a8:e7:91:35:23:
cf:dc:30:13:fd:e3:1d:e4:e7:da:36:5e:04:fe:01:ba:e9:75:
1d:8b:c0:b7:bd:cc:d9:b3:1f:69:0b:23:0d:21:a0:a6:04:97:
21:f6:b1:d1:71:8a:f7:aa:77:77:9f:68:7a:09:86:29:ab:da:
37:95:2a:ce:82:3f:0c:4b:f2:da:3c:b5:49:15:99:e2:4e:c4:
67:c5:92:22:44:cd:2b:6d:1c:d5:a5:fb:ef:92:52:54:be:0a:
06:93:a1:04:6b:d5:81:b2:3d:53:fe:73:a7:c0:8b:08:53:54:
11:f8:8e:4a:75:de:3a:6e:38:0c:97:58:04:41:dc:0b:9c:ca:
6a:99:2b:88:d8:a9:b8:d9:e6:53:26:a2:ca:bf:83:be:d1:55:
25:4c:a9:28:5f:7a:2d:0d:68:e3:c1:e6:8d:e5:26:d0:f8:d5:
bf:05:a6:50:58:b3:e5:b0:29:db:5b:20:67:2d:54:0d:21:7b:
3a:61:0b:f1:47:cc:9e:74:57:d0:a7:c7:4d:92:fb:d5:ae:85:
6e:1e:a3:77:f4:04:26:4d:36:05:32:1e:fa:8f:39:67:09:d2:
4c:eb:80:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 06:58:43 2025 by rpki-client