Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ErQAnQvFrk6WJrGul5IGuBCXIj8.roa
File: ErQAnQvFrk6WJrGul5IGuBCXIj8.roa (raw, json)
Hash identifier: UghxsyksqLvOpBtmrRejnxeVDQ0rUd0yJr/Rjs3tjFc=
Subject key identifier: 12:B4:00:9D:0B:C5:AE:4E:96:26:B1:AE:97:92:06:B8:10:97:22:3F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 74D8E2ED
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ErQAnQvFrk6WJrGul5IGuBCXIj8.roa
Signing time: Tue 22 Mar 2022 22:09:43 +0000
ROA not before: Tue 22 Mar 2022 22:09:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1960370925 (0x74d8e2ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 22 22:09:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=12b4009d0bc5ae4e9626b1ae979206b81097223f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:44:73:66:8a:96:f7:54:55:22:0b:11:07:25:
52:6f:7d:e6:ac:29:a9:ca:7c:4f:88:3f:99:78:03:
11:d4:eb:09:87:74:c5:52:55:dc:e5:4b:bf:15:23:
da:11:7b:16:be:66:66:97:fe:4e:39:ed:63:49:d7:
0e:24:64:b7:49:c9:f3:f1:61:ae:5f:9f:5a:2d:ea:
7a:49:84:79:36:5e:5a:7d:34:e1:62:01:b9:8f:c1:
e3:2e:fb:39:ac:bc:72:d5:63:55:4d:25:4e:a8:d8:
3f:ab:64:ea:71:79:c9:48:fd:17:d7:35:d9:68:05:
9e:a8:a4:0f:f9:90:30:6f:93:e9:06:54:36:df:0c:
bc:74:bc:8a:e4:8a:d2:d3:c2:e5:bd:87:e2:31:a4:
69:0c:15:86:88:f1:20:69:46:6e:62:b4:cd:97:60:
a9:b0:b2:95:99:0a:09:bd:24:08:6c:45:e2:27:96:
cf:c1:32:ef:ee:05:fd:44:f8:b6:37:ea:f8:f3:f0:
f3:08:07:3a:ea:4b:ec:ca:27:a2:b5:50:09:21:15:
11:1d:d2:a5:c8:25:1f:d1:9b:00:8f:2b:c2:bf:a1:
ec:e6:6b:0b:89:bc:1c:8c:f0:00:3f:3e:33:26:68:
20:08:0d:c5:72:4d:3c:2a:e6:3a:db:74:31:ec:b9:
86:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B4:00:9D:0B:C5:AE:4E:96:26:B1:AE:97:92:06:B8:10:97:22:3F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ErQAnQvFrk6WJrGul5IGuBCXIj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
09:ea:c4:cf:c5:f6:b9:af:f1:36:2a:9c:5f:99:f6:ec:fe:28:
96:df:03:71:d2:fa:4a:05:4a:72:40:e2:bb:94:f6:f7:64:c2:
7a:71:7d:00:47:25:0d:6d:2d:1c:a0:25:8f:20:43:41:2a:60:
05:46:94:40:72:73:90:60:f0:80:78:4a:38:a0:c4:8c:36:4c:
0f:69:aa:db:39:bf:a5:15:4e:c9:87:04:95:5f:de:3b:8f:37:
e0:7a:af:a7:e6:4b:bd:cc:67:9c:7c:75:d4:dc:48:86:65:42:
53:15:d7:aa:20:21:18:72:4a:c9:c0:2b:a1:c7:52:db:7d:b3:
50:4b:bb:7a:f2:2f:16:7e:1f:f8:40:fd:e6:56:d9:94:e7:d0:
18:aa:5b:f3:7f:28:31:61:eb:d5:fd:58:63:9d:fc:89:59:1f:
fe:55:b1:43:b7:b0:1b:7b:4b:14:b5:4d:f5:ff:e4:71:15:60:
cf:01:00:ba:92:10:4b:16:f3:ac:4e:40:21:41:84:15:c0:61:
25:70:51:21:3d:1d:f9:13:82:10:95:6e:dd:a1:83:11:eb:da:
4a:57:1d:bd:bb:f9:a2:5e:56:af:f2:78:df:0b:b8:32:db:ea:
95:8b:8c:15:87:04:34:07:12:fb:75:62:79:d6:3e:10:ad:1a:
0c:ae:e6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 23:49:40 2025 by rpki-client