Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RSs4gEU2xPOSvocV9uIcBHe4nVw.roa
File: RSs4gEU2xPOSvocV9uIcBHe4nVw.roa (raw, json)
Hash identifier: zjXMlNbsrFE7lo3HuAUIsIA2FGqvY4Ay2aOxld5sdEQ=
Subject key identifier: 45:2B:38:80:45:36:C4:F3:92:BE:87:15:F6:E2:1C:04:77:B8:9D:5C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 80EF5DD9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RSs4gEU2xPOSvocV9uIcBHe4nVw.roa
Signing time: Wed 04 May 2022 02:11:37 +0000
ROA not before: Wed 04 May 2022 02:11:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2163170777 (0x80ef5dd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 4 02:11:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=452b38804536c4f392be8715f6e21c0477b89d5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:38:1b:51:12:14:26:85:43:e2:61:a3:ef:18:
b0:f4:06:d9:2e:27:a3:1c:f5:6b:08:42:9e:6d:34:
9d:1a:78:92:e0:88:6b:fc:e7:e1:e2:46:48:2b:73:
45:cc:9f:cb:0a:e5:e4:22:51:f0:d0:37:01:e0:b2:
55:7d:23:03:61:e5:b3:cc:a1:3b:53:2a:9b:64:3c:
7f:9a:c4:a9:f0:2b:04:49:22:60:71:75:7c:0c:bb:
c3:bd:4b:cf:f2:bb:fe:64:b6:17:b5:55:14:a6:30:
1b:31:2d:e0:2c:13:53:06:36:16:6a:f1:2b:c2:d4:
bf:b0:f2:ed:96:4b:8a:95:f7:d6:51:61:59:15:40:
8c:b4:99:6b:b3:02:70:58:be:46:aa:34:13:b7:3c:
d5:f4:54:26:45:c2:76:9f:a2:dc:b0:f6:48:18:55:
4b:fa:06:05:7b:79:03:18:a3:77:c1:40:8b:75:22:
8f:9a:44:92:34:8d:02:26:a4:c6:14:32:3c:8b:42:
c3:e3:49:7d:53:4f:83:b0:6e:f6:e7:92:5e:2c:85:
26:7f:43:9f:93:4b:f9:bb:c3:32:8d:9b:8d:d3:5d:
73:e0:73:9e:14:7b:e6:cf:ae:6a:de:c6:d0:a4:cb:
1d:15:68:a8:e7:b6:10:fb:7b:1e:e0:95:f1:16:a1:
68:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:2B:38:80:45:36:C4:F3:92:BE:87:15:F6:E2:1C:04:77:B8:9D:5C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RSs4gEU2xPOSvocV9uIcBHe4nVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
26:6d:18:7f:83:d6:c2:7f:6b:79:e7:c2:40:8e:ed:2b:e8:ba:
b4:13:69:62:81:4b:dd:bf:22:22:f7:f1:1b:06:4f:71:9a:f8:
c5:91:09:8b:e5:9a:40:8d:fa:56:5a:b8:70:a0:98:9d:2b:a2:
63:9e:47:ed:69:e2:b6:97:c5:ae:15:3c:cd:e3:05:b0:19:1f:
fd:9c:30:58:ab:e7:24:ca:24:f4:7f:94:d3:ea:69:7c:93:91:
e1:1c:34:bb:db:98:21:a1:53:80:18:c0:9c:1d:04:e2:35:99:
46:e8:6e:07:8e:f7:50:a5:b2:17:88:2f:41:24:14:0e:d5:21:
f0:73:de:90:c9:22:35:27:bc:09:02:05:01:93:87:25:45:99:
f2:61:10:c1:ea:1d:c8:51:93:bd:38:0b:68:45:b9:c4:90:b9:
de:20:0d:20:cd:d8:cf:19:cb:c5:67:d0:12:46:b2:0a:e3:e3:
56:2c:24:91:85:58:55:96:61:c2:60:7a:c8:50:a0:2c:64:0a:
f9:f4:89:0b:16:15:40:2c:73:28:c3:af:38:d8:9c:ca:90:e4:
0d:12:92:42:68:3f:b0:c8:50:b3:96:00:d9:df:d6:0e:cb:f1:
34:ef:a4:ed:74:bb:28:d0:07:87:37:7c:85:ef:7c:6d:eb:0a:
87:0a:c6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 20:07:54 2025 by rpki-client