Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/N7ExBdyP5S1vbx8_DEX4_BC3TaI.roa
File: N7ExBdyP5S1vbx8_DEX4_BC3TaI.roa (raw, json)
Hash identifier: LG7h8/mHBkyMlpSXo5yvBd4PxZ4P/1u5ahSjaf1+y70=
Subject key identifier: 37:B1:31:05:DC:8F:E5:2D:6F:6F:1F:3F:0C:45:F8:FC:10:B7:4D:A2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6F331FDC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/N7ExBdyP5S1vbx8_DEX4_BC3TaI.roa
Signing time: Thu 03 Mar 2022 03:08:49 +0000
ROA not before: Thu 03 Mar 2022 03:08:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1865621468 (0x6f331fdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 3 03:08:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=37b13105dc8fe52d6f6f1f3f0c45f8fc10b74da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:85:d0:da:b2:72:a0:f8:26:22:a7:a3:3d:a7:
bb:67:94:34:9b:ef:5e:27:67:65:53:9a:40:f9:74:
cf:2f:26:26:53:96:4c:ef:7f:cc:97:18:fa:4d:af:
71:1e:7c:f6:bc:52:5e:78:02:ad:d6:be:58:9f:53:
5d:eb:86:7d:25:09:93:5e:05:7e:e7:84:43:e8:23:
0a:1e:87:c9:72:c6:1f:84:d6:71:e1:8b:40:21:2f:
13:11:be:46:5f:ed:a1:a4:b8:50:9d:60:2d:31:52:
40:1a:e0:07:60:2e:2b:e6:f3:35:58:09:73:cb:3c:
ee:27:d2:e4:c0:45:87:e3:8c:44:85:33:cd:a3:6b:
f5:1e:11:e6:2b:51:64:10:5b:4e:c1:b6:f5:ae:0c:
d0:c6:ca:ce:6e:01:85:34:03:30:00:61:9f:57:65:
43:3c:81:25:8f:99:13:0e:96:bb:c4:2a:a9:cf:ef:
ce:13:88:0b:e2:21:dd:9b:ba:80:e4:53:50:f9:9e:
6c:f2:95:66:7a:bd:f6:f1:13:86:8e:d7:b8:40:d9:
73:6c:ce:ff:ad:40:be:48:9e:35:f0:15:3c:13:3d:
ef:a6:fe:21:34:55:b6:87:6b:f2:98:8a:83:8a:1a:
cd:c3:48:c8:3c:da:3c:5c:3e:b7:ba:3d:9c:26:f5:
25:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B1:31:05:DC:8F:E5:2D:6F:6F:1F:3F:0C:45:F8:FC:10:B7:4D:A2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/N7ExBdyP5S1vbx8_DEX4_BC3TaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
43:ab:43:4d:9d:67:31:ff:46:fd:3a:38:85:f1:fe:58:55:ea:
6f:c6:d8:19:88:a0:bb:f7:6e:37:9b:d3:1b:e2:76:17:d4:a1:
d9:d8:fd:27:82:60:12:ad:7f:47:c4:55:ee:bc:1d:97:ca:97:
e1:5f:e4:e0:17:61:79:e6:4e:93:04:21:cc:e5:cb:a6:9c:1c:
07:09:90:7a:6c:27:7c:2a:44:16:69:2b:fc:16:95:85:84:13:
e4:88:b0:59:56:5a:14:70:ef:2c:46:56:85:d5:5d:27:d5:30:
00:ad:f0:84:53:0a:46:88:24:7d:9c:5e:31:64:50:9c:47:5c:
83:9b:fc:04:d7:26:61:22:24:3b:52:ac:21:eb:91:79:3e:ed:
38:66:f7:c5:b7:26:dc:3a:58:32:34:dd:9e:35:fb:c8:de:73:
68:bb:0f:9c:43:6a:05:9a:9c:d2:cd:75:ad:6b:93:23:4f:a2:
23:26:d5:5d:d8:86:2d:d7:dc:89:18:5a:8c:25:bf:02:48:be:
7b:63:06:b0:f0:73:a4:8c:cd:6c:3f:ba:13:1f:15:74:18:68:
6d:a0:a2:42:27:88:ad:f1:15:b3:de:36:03:1b:b9:0e:6e:bf:
a0:3e:cd:e3:d9:4e:c2:a1:fd:79:a8:b2:23:28:f8:03:a4:f5:
fc:02:5c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:05:12 2025 by rpki-client