Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4v7oYqPRqhiE_AtAVv8L7ZM8ASc.roa
File: 4v7oYqPRqhiE_AtAVv8L7ZM8ASc.roa (raw, json)
Hash identifier: achjE01rSYIroYjan02SbJvjH9Y3p0COiFzpFGHjeCk=
Subject key identifier: E2:FE:E8:62:A3:D1:AA:18:84:FC:0B:40:56:FF:0B:ED:93:3C:01:27
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 86F8D431
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4v7oYqPRqhiE_AtAVv8L7ZM8ASc.roa
Signing time: Wed 25 May 2022 06:10:13 +0000
ROA not before: Wed 25 May 2022 06:10:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:ddb5:bc5/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:e0ec:efe1/128 maxlen: 128
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:f73d:bab5/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2264454193 (0x86f8d431)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 25 06:10:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e2fee862a3d1aa1884fc0b4056ff0bed933c0127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6d:71:de:e9:59:d5:9f:4b:f6:72:93:ee:ab:
b9:15:1b:49:6a:69:2c:b9:77:93:a4:f5:5e:90:3d:
64:fd:37:41:a7:1d:2c:22:b1:f2:9b:1d:9a:92:99:
1f:07:07:e1:ca:53:0e:9d:f7:28:8b:55:23:cb:f2:
e4:07:a8:c8:0f:eb:17:82:14:ac:9b:f8:1c:25:6e:
4e:ce:e8:3a:85:31:a5:8b:9b:ac:1c:96:62:26:1d:
48:b2:b3:2c:c7:b2:25:3d:f2:9f:ca:f0:4e:1f:0b:
7c:5f:b8:0b:d6:cb:f4:5c:bf:e2:26:94:ce:75:46:
57:39:12:1b:92:a1:41:01:ae:ab:e8:a0:c9:da:ee:
32:5f:f6:50:29:ce:a4:b7:a4:b6:03:fc:eb:e8:a8:
59:7e:70:80:98:48:03:1e:53:d8:38:a4:9e:ad:31:
51:1c:f6:65:a7:29:c3:b0:37:76:d0:e3:47:24:16:
c7:7b:1d:2d:7e:f1:59:f6:44:45:bb:74:da:a3:98:
4d:a5:28:38:f7:5b:fc:39:1a:a2:f0:fc:cb:81:46:
64:95:79:f5:c2:60:54:42:c2:cc:92:58:d9:5b:0a:
11:c9:6a:41:47:a6:e4:13:cb:80:2b:9c:66:16:fa:
44:3a:04:3b:35:28:47:03:37:b8:57:ad:df:37:c4:
6c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:FE:E8:62:A3:D1:AA:18:84:FC:0B:40:56:FF:0B:ED:93:3C:01:27
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4v7oYqPRqhiE_AtAVv8L7ZM8ASc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
71:cd:d9:14:86:4e:fa:ee:53:3e:21:be:8a:24:88:2c:68:6f:
eb:66:63:1a:ce:62:42:f5:08:fb:1d:10:ba:49:a4:9c:c6:55:
d1:56:3a:d5:1e:2e:14:89:51:ff:a2:89:1c:cf:fb:c2:38:fe:
de:dd:20:30:59:db:4a:a5:0d:5e:90:3d:38:ff:77:95:b8:02:
73:7b:fb:f4:eb:d2:8d:0d:38:50:67:58:bb:08:31:5d:a9:de:
80:a7:01:df:6f:88:55:74:ba:12:6c:11:07:8a:d8:91:1a:9f:
7d:c9:b5:6f:71:bf:be:be:e2:12:0a:e3:c1:72:34:fc:90:99:
2c:d3:2b:05:14:81:65:d4:3c:d8:55:a5:fc:f1:0c:0f:6b:67:
ad:94:b3:0a:15:6d:24:8c:7f:02:46:c8:c5:4f:b9:87:a2:ed:
6b:25:82:b7:1e:ec:c7:08:30:9d:60:a8:8b:00:54:a9:4a:94:
24:ab:51:e1:89:29:d1:b8:03:07:a1:40:af:ef:26:a2:ea:54:
a8:eb:04:0b:0e:d4:9a:a2:d9:58:d1:3f:20:e8:78:18:17:d9:
58:3f:3f:1f:42:20:5b:ce:04:c7:ac:ad:1a:0a:36:d6:77:48:
f7:37:a2:55:85:f8:90:3a:93:f3:07:d8:c6:74:9c:dc:eb:4d:
7c:8a:35:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:21:41 2025 by rpki-client