Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4_lESI56ROempnO2hRkPX33YMuc.roa
File: 4_lESI56ROempnO2hRkPX33YMuc.roa (raw, json)
Hash identifier: UkXHW7dajM1Vu5kFB2KM8XYO46GO8tIU9GzYb5XBPtM=
Subject key identifier: E3:F9:44:48:8E:7A:44:E7:A6:A6:73:B6:85:19:0F:5F:7D:D8:32:E7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184DFD01CE0409148796E856003F9ABF15B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4_lESI56ROempnO2hRkPX33YMuc.roa
Signing time: Mon 05 Dec 2022 01:04:28 +0000
ROA not before: Mon 05 Dec 2022 01:04:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:dfcf:ca2f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:df:d0:1c:e0:40:91:48:79:6e:85:60:03:f9:ab:f1:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 5 01:04:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e3f944488e7a44e7a6a673b685190f5f7dd832e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6f:84:e8:3c:75:a6:27:11:16:6d:c2:15:60:
d9:e3:4d:df:b0:3c:f0:13:8a:77:37:c2:f9:b0:71:
96:8d:2b:ce:1f:a2:2c:47:1e:7b:15:ec:60:0a:0b:
b6:9a:09:b0:b5:db:83:e6:bf:a0:20:11:48:f9:95:
d3:ed:98:bd:94:b7:7d:7e:fc:b8:5b:c7:e3:c4:f5:
d1:23:d4:07:9c:05:1e:0a:1e:6f:4b:59:3c:e0:47:
2f:6b:17:18:45:e1:1c:bd:75:08:18:ec:c8:a1:7a:
00:23:ae:a3:a2:4e:cd:ba:96:3d:1c:a2:94:64:0d:
81:f2:34:31:14:c1:69:51:46:76:c0:6d:ef:be:0f:
85:3a:0f:3c:9c:6a:09:6d:2e:e3:7e:a2:c9:fb:5c:
4a:ed:33:f9:9c:88:57:31:25:54:c3:9b:99:fc:36:
2f:5e:4f:5f:86:b6:0e:1a:ae:20:5e:96:5f:b9:88:
6e:c1:19:69:4b:a3:51:de:25:a0:3c:c7:b5:7d:f5:
cb:31:37:29:af:c0:f4:02:b8:5b:77:af:23:76:8f:
9e:c9:a2:97:0c:9f:56:6b:86:98:08:b4:15:f9:d6:
9f:d9:b5:7e:aa:35:a8:be:0b:84:ea:38:b2:46:34:
8f:f3:51:1e:36:dc:30:eb:89:b0:82:26:34:d2:e1:
97:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F9:44:48:8E:7A:44:E7:A6:A6:73:B6:85:19:0F:5F:7D:D8:32:E7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4_lESI56ROempnO2hRkPX33YMuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5c:e3:e3:11:ba:8e:84:eb:7a:e2:87:66:a2:64:40:99:9e:52:
5e:5f:43:c2:e3:a4:4e:a2:58:21:54:98:01:cc:7a:35:ae:ca:
61:2c:20:41:7b:6f:64:c9:06:99:cc:81:f7:95:62:be:08:a1:
de:8a:e2:58:ee:81:ce:26:35:86:f5:44:b9:0f:dd:72:17:92:
2d:25:7a:e0:1a:e1:12:67:b0:b0:0a:d1:07:4c:4a:bc:67:1d:
9f:8c:55:6a:c2:38:7b:3c:c0:66:7d:96:71:bb:74:c7:80:7e:
a2:25:8a:f7:74:ec:01:81:aa:b9:54:23:f1:0d:db:61:76:8c:
e4:41:a1:e8:56:45:7e:d2:28:7d:f6:18:62:9f:06:c8:47:96:
40:79:20:a3:09:98:0b:80:dc:9d:fd:6b:91:a3:13:6c:c1:75:
f7:28:e0:f7:85:87:c5:e5:fa:55:b8:8e:d4:6b:07:4a:f0:df:
95:1d:59:bb:03:79:fd:07:4c:05:e4:c6:67:9d:41:7f:9f:36:
b2:28:01:78:99:d8:22:1b:68:2e:21:0e:34:9d:63:a5:85:b6:
ea:ed:f7:5a:9e:e0:e9:b7:ba:58:47:7f:91:47:a4:19:5a:3d:
19:a1:f6:29:c5:80:d5:86:55:91:ed:a5:a3:b4:cf:18:ed:2c:
87:ef:cb:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 08:32:58 2025 by rpki-client