Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4wP3eNOyUXaK3tkLtRNH3Xwe3p4.roa
File: 4wP3eNOyUXaK3tkLtRNH3Xwe3p4.roa (raw, json)
Hash identifier: crdnLOgBQc4ZxfJX/tQvycSi999lJm0VfTMj0R7QzGE=
Subject key identifier: E3:03:F7:78:D3:B2:51:76:8A:DE:D9:0B:B5:13:47:DD:7C:1E:DE:9E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01862AB58F25E7A3A608C365D2AE2AE8E3B9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4wP3eNOyUXaK3tkLtRNH3Xwe3p4.roa
Signing time: Tue 07 Feb 2023 07:09:46 +0000
ROA not before: Tue 07 Feb 2023 07:09:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:2a:b5:8f:25:e7:a3:a6:08:c3:65:d2:ae:2a:e8:e3:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 7 07:09:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e303f778d3b251768aded90bb51347dd7c1ede9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:69:c5:7e:51:57:94:52:9c:3d:78:4b:38:18:
ae:ad:02:d3:7c:90:4c:19:4e:17:63:b7:cc:f0:7b:
ed:1f:50:24:04:06:77:c9:0b:f9:e3:d4:08:ea:91:
19:23:f4:7e:44:13:24:ce:8f:00:d9:c1:9b:7e:aa:
e7:69:ef:59:53:8c:23:b6:11:1f:0a:e8:e8:15:ca:
88:38:76:08:42:70:9b:89:0a:92:2c:bd:72:90:b6:
16:21:9a:1c:ad:94:b1:5b:21:a1:a1:5b:af:56:53:
e5:fe:ef:04:9f:90:d1:41:ce:0c:c3:da:39:a7:12:
f8:9e:c2:b8:40:e0:35:0b:c6:4e:02:f7:f8:dd:f1:
d6:0d:ff:39:59:70:2a:41:05:3c:98:ef:03:54:c5:
e4:1b:ce:c3:94:4c:cb:c6:65:07:8f:9c:df:47:8d:
b9:f5:0c:f5:57:cf:ac:7e:09:a9:1f:4f:5f:e4:8a:
63:f9:c2:78:e6:c7:6b:41:f2:4b:48:3b:d9:b7:80:
eb:cb:7e:50:a5:03:cf:27:a2:b1:a3:07:69:9d:89:
cd:33:25:b4:fd:9e:4a:a3:3d:51:ee:fb:8d:7f:fb:
58:7f:0d:68:af:a5:15:34:a3:0e:11:31:b0:32:32:
34:d4:b7:10:b9:23:89:8c:71:8b:a4:02:83:3e:1d:
db:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:03:F7:78:D3:B2:51:76:8A:DE:D9:0B:B5:13:47:DD:7C:1E:DE:9E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4wP3eNOyUXaK3tkLtRNH3Xwe3p4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1f:4b:f0:e3:e7:6b:44:28:9a:a5:c4:7f:95:7d:b1:19:3d:e0:
c6:f0:d0:45:4e:6c:1a:f1:82:42:13:2a:9a:f8:81:ae:d1:81:
59:ca:89:01:b2:38:af:04:a9:5e:73:96:7c:87:2e:40:6e:41:
ed:25:a1:2f:8e:1f:af:f3:0c:43:92:bf:5a:22:19:06:83:c8:
90:68:16:0a:04:8b:fb:53:bc:f6:62:af:f2:28:bf:f3:63:13:
a1:e6:37:42:36:18:03:51:3d:38:02:52:f7:a3:c9:34:fd:80:
f8:16:9c:4e:a1:74:c8:90:e1:e9:ca:04:84:8b:c4:cd:44:10:
5f:cc:c6:61:79:b7:e8:18:d1:33:61:d6:cb:50:fa:5f:3d:de:
33:c5:c2:60:ff:2f:bc:70:e6:4f:47:bd:ec:24:3a:6d:25:04:
45:e8:85:e4:6b:34:d8:30:c9:e0:4e:d3:86:8c:15:ea:4e:78:
f4:95:b7:c4:b2:d1:45:70:46:d1:e1:19:61:41:16:95:6c:42:
4d:a4:96:c2:7e:4e:bc:6c:43:9d:bb:76:1d:bc:74:57:43:b0:
e8:b8:c8:ca:30:04:84:d2:eb:00:2b:23:8f:10:2c:4e:e9:c0:
6b:6f:e7:f3:1d:3f:2f:eb:35:e7:09:2f:57:ad:e0:1a:42:64:
09:5c:b9:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:15:47 2025 by rpki-client