Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/a7mcj4UCOOQMQU3VVtqH1vrVEzc.roa
File: a7mcj4UCOOQMQU3VVtqH1vrVEzc.roa (raw, json)
Hash identifier: iYt47w23HUnXiHYV5aVsF7bvnrX5NJu0OaIrA3Wzbs0=
Subject key identifier: 6B:B9:9C:8F:85:02:38:E4:0C:41:4D:D5:56:DA:87:D6:FA:D5:13:37
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184613E00C2B2C3C99B553486B1273809EA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/a7mcj4UCOOQMQU3VVtqH1vrVEzc.roa
Signing time: Thu 10 Nov 2022 11:12:44 +0000
ROA not before: Thu 10 Nov 2022 11:12:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:61:3e:00:c2:b2:c3:c9:9b:55:34:86:b1:27:38:09:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 10 11:12:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6bb99c8f850238e40c414dd556da87d6fad51337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3d:ca:97:25:cf:3d:63:88:d7:36:a2:32:3e:
c7:d6:cf:ae:89:3a:97:54:fc:f2:eb:46:00:e6:17:
77:8c:01:f5:34:6f:c0:29:c6:1f:8b:b4:53:87:da:
f8:66:78:2f:dd:86:a3:02:43:12:c6:87:ef:13:e8:
ee:c5:16:fa:55:80:c5:8a:5e:b2:ef:aa:b7:63:77:
d0:fc:38:14:44:21:1b:fc:bd:27:f5:e7:ac:b8:86:
f6:fd:bd:d3:18:4a:4d:f6:9a:1d:5c:4f:5f:a1:85:
e0:38:1d:54:52:bc:89:b3:0d:bd:a2:fb:2f:bd:9f:
f4:8b:61:7c:e8:a4:6b:bb:bc:ec:1b:f8:b5:a2:49:
1a:b0:cd:1f:94:8d:ea:28:8b:d5:cc:ba:fa:71:e4:
96:d9:e9:94:24:9a:29:5e:30:a3:c6:f0:1a:25:81:
cf:69:34:bf:95:52:cb:b5:79:e8:a0:2e:9c:03:48:
be:78:a7:b2:a0:8e:e7:38:7b:50:9f:6f:7b:b0:9b:
e9:9b:9d:40:d1:a9:83:f7:af:8f:79:6e:9e:09:6d:
ce:da:96:db:ad:55:06:cf:c7:65:e1:af:b5:a7:e5:
62:51:04:ed:9f:fb:42:a9:77:da:2b:80:ba:42:bf:
52:3d:b0:10:ca:f2:52:04:47:42:a7:b0:3a:e5:da:
30:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:B9:9C:8F:85:02:38:E4:0C:41:4D:D5:56:DA:87:D6:FA:D5:13:37
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/a7mcj4UCOOQMQU3VVtqH1vrVEzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6b:72:27:aa:ab:44:7e:76:65:de:70:02:fe:f2:a2:39:bb:6a:
db:49:26:7d:2d:f9:fe:05:74:4f:a1:51:6a:4a:c5:b2:2f:b8:
98:71:90:22:f9:09:11:e1:24:a5:72:49:2b:ae:30:3e:f1:c0:
da:7a:d9:ff:31:66:62:2a:f6:a5:5f:18:e6:7e:b6:b5:49:ba:
b5:26:97:8f:5a:66:b8:d9:19:6f:1d:f5:f9:57:77:3d:37:24:
30:91:19:03:3d:5f:87:e9:7a:bb:55:5e:3b:1f:67:70:da:da:
b6:94:96:34:32:a0:28:11:46:4e:66:d1:e7:ad:88:6e:32:35:
3b:19:6a:19:dd:2c:9c:94:d6:ec:13:dc:2a:af:09:8e:1d:94:
db:6e:16:bf:3d:02:c7:95:66:44:7f:a0:f9:2c:dd:d4:54:f1:
d1:c7:86:b8:b5:ad:73:cb:72:44:08:5a:25:23:5f:15:59:7f:
98:c8:6f:1a:20:77:7d:87:37:72:bd:a4:02:62:a9:9f:3a:95:
5a:ac:4d:d7:e7:99:36:1a:f8:21:eb:32:ce:4e:77:a2:56:35:
1f:f1:6e:41:5c:cb:66:40:b2:71:e3:19:36:36:75:24:4c:ef:
ec:91:20:f5:09:68:97:60:df:88:ff:9f:46:49:7c:a3:9b:0d:
0f:df:e1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:09:41 2025 by rpki-client