Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/T1SiBSavshRGphzcJrw1NooJ6Ng.roa
File: T1SiBSavshRGphzcJrw1NooJ6Ng.roa (raw, json)
Hash identifier: 4o0dylYFOLXzAcL2xLdIDDnU6iGCbiTTpajrwuPXwhU=
Subject key identifier: 4F:54:A2:05:26:AF:B2:14:46:A6:1C:DC:26:BC:35:36:8A:09:E8:D8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018533844B1695516162FDB7CD4434474D78
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/T1SiBSavshRGphzcJrw1NooJ6Ng.roa
Signing time: Wed 21 Dec 2022 07:09:45 +0000
ROA not before: Wed 21 Dec 2022 07:09:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:33:84:4b:16:95:51:61:62:fd:b7:cd:44:34:47:4d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 21 07:09:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4f54a20526afb21446a61cdc26bc35368a09e8d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f7:33:f4:c7:c7:8a:72:74:c6:a7:e6:ab:c3:
c8:95:37:0c:2b:fb:f1:09:37:53:c8:f0:2b:cb:87:
82:b8:1d:c7:47:ad:94:0d:c1:7e:16:4f:cf:70:e3:
38:4c:ea:12:59:4b:d9:c5:56:b1:ec:25:67:d3:39:
d1:99:6b:70:7c:58:05:0c:f1:83:21:ef:20:2e:51:
a3:28:92:a6:e2:d2:c0:2e:d7:b6:73:be:4b:6f:a0:
87:ae:93:87:b7:67:73:6b:e0:20:f5:fc:7d:f5:88:
63:18:ac:73:ad:97:f0:9c:c0:84:22:33:76:8e:23:
d1:37:24:7f:4d:83:7c:37:bc:80:1b:cf:bf:07:a4:
f3:9d:c2:99:49:0f:9c:21:39:ec:09:98:21:90:f2:
3c:6e:78:fa:6e:85:c7:54:f0:6a:7e:c7:05:cf:bb:
6f:ed:af:46:e0:83:60:43:59:f8:d9:75:5f:f4:d1:
57:2b:d8:86:03:b4:b3:65:c7:ba:88:53:43:9f:d0:
98:ce:d4:d6:3d:87:90:c0:15:f5:8e:06:67:49:d4:
04:61:3e:73:cf:c4:7c:fd:c3:e9:45:03:e6:a7:3a:
62:c3:9c:c3:c9:80:4d:5e:ea:e0:41:6a:a2:20:d9:
3e:45:89:7e:2a:17:68:dd:4c:94:70:c3:36:65:e3:
9f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:54:A2:05:26:AF:B2:14:46:A6:1C:DC:26:BC:35:36:8A:09:E8:D8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/T1SiBSavshRGphzcJrw1NooJ6Ng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
59:78:1c:d0:53:2b:8e:60:22:00:c6:97:9a:f4:8f:dc:51:72:
5d:ef:d3:62:48:51:dd:50:ae:e3:47:a5:21:13:7a:d8:a4:09:
d0:78:0f:24:73:bc:2f:e7:d4:47:e3:1d:71:39:0c:0f:30:33:
50:67:fb:75:95:64:0e:ef:1f:9d:f8:8b:e9:e0:40:60:06:f4:
08:be:a7:20:81:33:45:0a:6c:7f:00:48:75:7b:d1:48:28:9d:
87:c9:e3:b6:08:a1:86:d0:cb:64:0b:63:c0:16:2c:2d:c4:c2:
6b:7c:5c:6d:1c:7e:30:33:8f:9c:c9:a6:6b:d2:4c:ad:c5:90:
7a:28:38:13:9c:41:dc:cf:62:29:74:7f:5b:5d:d3:df:be:e5:
57:a3:79:ef:89:78:54:99:74:76:a0:5e:f3:d8:46:c2:0a:05:
69:93:54:30:c8:83:83:17:99:0b:30:a7:56:f7:38:cb:8a:8e:
e8:27:f5:4d:02:f8:12:69:26:bc:2f:9c:57:64:3a:69:aa:a9:
b1:41:23:7b:1a:b9:68:7b:ed:4d:bc:e2:27:20:1d:ca:64:93:
89:61:9c:a7:cd:67:9b:1a:77:08:6f:18:07:d7:a7:54:7f:67:
90:8b:2c:68:6f:d7:85:7d:db:26:97:db:78:4c:b3:33:9f:da:
e8:ce:62:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 14:56:27 2025 by rpki-client