Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_XNAtXI0kOfjHlW8rT4Pi8Gr4Yo.roa
File: _XNAtXI0kOfjHlW8rT4Pi8Gr4Yo.roa (raw, json)
Hash identifier: Jd+strFsZV6N6yJxKKSCFH87Z+BuPmAwlnbNvjP4plY=
Subject key identifier: FD:73:40:B5:72:34:90:E7:E3:1E:55:BC:AD:3E:0F:8B:C1:AB:E1:8A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7EBDF349
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_XNAtXI0kOfjHlW8rT4Pi8Gr4Yo.roa
Signing time: Tue 26 Apr 2022 19:09:29 +0000
ROA not before: Tue 26 Apr 2022 19:09:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2126377801 (0x7ebdf349)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 26 19:09:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fd7340b5723490e7e31e55bcad3e0f8bc1abe18a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:90:3a:74:dd:7a:6c:29:40:da:c3:b4:63:83:
37:36:f0:7d:27:e4:e8:d9:1d:fe:5f:22:6f:16:f0:
04:00:79:74:e5:a2:6e:d7:c8:77:ba:e6:45:4c:df:
e2:bb:74:a0:e3:62:f5:df:63:eb:37:9b:86:65:dd:
0d:f1:5d:17:6b:9e:39:ce:6c:61:b6:d0:93:a4:25:
d2:78:3f:ab:48:b1:10:51:8d:7f:78:19:cb:ec:c9:
b6:cc:82:5f:4f:37:ab:59:a4:b2:c0:0e:84:6c:44:
07:77:ef:c9:d2:c5:c4:28:8e:c9:57:50:89:33:4f:
41:d5:6f:f7:c0:5d:d3:ee:63:b8:ef:95:55:ec:bd:
94:bc:c9:46:7e:1d:9b:ac:a5:a5:29:d3:c6:a5:e7:
37:ed:0b:c0:d5:e7:1e:1d:b9:b3:2c:9c:d2:3b:24:
0f:8a:4c:88:eb:cb:1b:6b:9b:ae:f7:f3:a1:d3:e4:
60:bc:12:a6:ce:aa:05:0e:a2:fb:cf:13:67:69:72:
e2:96:9b:00:ae:5c:cb:6d:de:fc:3b:23:7e:b7:cd:
35:5e:1e:80:ed:19:bf:b5:0e:88:5a:de:f1:4e:de:
e2:a6:f1:3b:80:f4:eb:ff:95:43:49:6a:63:f7:99:
98:d9:20:b7:6a:43:7b:8f:42:d0:0e:f9:91:a3:02:
5c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:73:40:B5:72:34:90:E7:E3:1E:55:BC:AD:3E:0F:8B:C1:AB:E1:8A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_XNAtXI0kOfjHlW8rT4Pi8Gr4Yo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0c:26:7b:e0:5a:f4:ab:ee:d4:f1:97:9a:0b:d0:b9:6c:56:de:
24:28:9b:ca:bf:c6:a2:fb:b0:aa:6a:44:1c:52:fc:2b:5c:b8:
1a:18:02:c3:74:63:74:0b:ce:da:a7:97:26:1f:00:35:ed:31:
39:85:65:b5:a1:09:7c:13:25:32:33:97:f0:39:51:84:45:17:
f8:20:a3:52:f9:f9:66:04:55:62:0c:cc:fb:2c:54:2a:6c:fe:
aa:36:51:95:4d:e0:51:b6:31:7e:16:cb:9d:50:1c:a2:2a:7e:
07:2b:26:8b:1a:34:ad:6b:f3:24:d6:4e:3c:01:30:a9:13:43:
e0:bf:b5:7b:75:52:ca:06:1c:80:18:13:06:4e:3c:8b:03:ea:
e1:40:3c:bd:09:37:03:b5:a2:fe:5c:cc:af:e3:ef:47:1b:19:
6c:5d:dc:36:73:7e:cc:b2:89:3e:ed:17:03:cb:53:51:6e:59:
de:14:b1:cb:7a:41:28:76:18:65:b5:cd:4f:db:3d:e2:1c:1d:
ce:83:9e:77:84:9c:bb:d1:d4:ce:eb:77:a1:20:a0:70:73:87:
42:bd:b6:cd:02:4b:ce:7c:06:f2:d4:7e:58:c8:cc:ae:ed:31:
e5:96:02:21:88:36:3b:d7:08:d8:9e:c2:d9:09:75:e9:d3:d5:
33:1b:54:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:41:33 2025 by rpki-client