Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d4aNxDGArItKOywa0z8iBRpMvY0.roa
File: d4aNxDGArItKOywa0z8iBRpMvY0.roa (raw, json)
Hash identifier: ryn2ncnWXmnN8sy/HIjGlzHrRtgi9ne7WjR/JVa+TT0=
Subject key identifier: 77:86:8D:C4:31:80:AC:8B:4A:3B:2C:1A:D3:3F:22:05:1A:4C:BD:8D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8162A5E0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d4aNxDGArItKOywa0z8iBRpMvY0.roa
Signing time: Thu 05 May 2022 13:09:28 +0000
ROA not before: Thu 05 May 2022 13:09:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2170725856 (0x8162a5e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 5 13:09:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=77868dc43180ac8b4a3b2c1ad33f22051a4cbd8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d1:5b:d0:8f:d2:1e:f5:0b:1e:74:a1:ed:94:
67:8c:5f:c6:ba:dc:b3:cc:b4:f5:dc:7e:d2:dc:d9:
2c:77:e6:ec:56:2f:13:cd:a8:a9:ed:eb:5a:0e:a1:
7e:47:b6:ba:a0:8e:5e:e5:6a:a8:b3:cf:5c:eb:cc:
e9:4f:7c:f5:24:be:81:6f:35:fe:13:90:1c:40:b3:
0f:6c:d1:25:fb:02:d2:4b:28:f0:b5:cc:1a:97:cb:
75:83:19:4f:7e:12:3c:3d:81:99:f9:b0:b0:b5:63:
85:7b:94:48:69:0e:2b:60:8f:93:6e:ed:a5:83:b0:
86:bb:cc:b3:4a:4f:49:1a:1d:af:e2:2b:84:16:bd:
7f:3a:e7:3e:74:f6:ce:81:18:08:60:05:0a:10:65:
5d:b0:5b:74:ab:89:ad:0c:27:d8:e0:b3:c4:12:e3:
ac:be:1b:9f:b3:1b:dd:5f:44:84:61:3a:8d:87:e7:
da:1f:cb:a9:0b:bf:3f:4e:ca:f5:a8:23:64:7b:bf:
8e:50:b0:1a:70:d5:9b:b0:76:7f:c3:3e:f5:2e:8c:
9f:32:bd:eb:98:87:1f:96:23:f0:58:17:b5:17:42:
da:26:ac:ec:01:b1:71:3a:11:4c:26:e8:6b:96:39:
f1:eb:fd:4b:22:63:17:7e:85:26:ee:4a:da:70:62:
f4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:86:8D:C4:31:80:AC:8B:4A:3B:2C:1A:D3:3F:22:05:1A:4C:BD:8D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d4aNxDGArItKOywa0z8iBRpMvY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
11:a4:5d:43:10:64:2b:df:92:1c:f2:41:92:cb:03:06:aa:62:
02:1d:01:16:83:d3:64:c0:df:ef:c9:ba:06:96:44:ff:2a:a9:
c4:09:0b:14:74:34:64:8b:06:b5:cb:45:78:f0:63:a6:31:e4:
3a:4b:2d:d7:b9:7f:d2:cc:e3:97:a6:d2:9b:7d:3e:c3:00:40:
c0:7f:ef:cc:72:04:71:f6:8f:d9:ac:06:fd:43:8b:ed:c1:37:
94:ad:ca:45:b0:39:e0:6d:cc:31:89:31:7c:8f:07:55:6a:a2:
ef:9c:01:bf:27:ad:e5:53:59:8f:3f:2c:6d:fa:a1:57:9e:16:
3f:1d:9c:ab:11:2e:01:c6:93:df:52:26:64:b4:5c:4f:44:d7:
71:2c:d9:b5:59:47:f3:da:2e:d3:ef:5e:da:e6:61:db:55:31:
a0:c4:0d:4d:cd:be:e7:b0:6f:46:8d:07:bc:b5:eb:78:37:69:
b9:09:a7:06:18:da:70:12:64:44:e2:b2:59:fa:4f:7a:0f:c7:
a7:aa:8c:22:b9:1b:a8:80:87:26:76:fc:3f:3a:f2:9a:fe:de:
c6:57:b4:12:78:1a:f8:b1:6a:bb:d3:4f:02:7e:91:4e:cc:75:
db:33:f1:e7:60:30:d3:d5:a6:b7:57:80:cd:86:38:19:cf:35:
36:d9:42:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:48:48 2025 by rpki-client