Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eRVROVR3ZqV_HgF_NBnF8ATVSHo.roa
File: eRVROVR3ZqV_HgF_NBnF8ATVSHo.roa (raw, json)
Hash identifier: IOjIRQ1GwuEp/Cmck9Td72+KcGCCLg8FvuxAbcHZd6g=
Subject key identifier: 79:15:51:39:54:77:66:A5:7F:1E:01:7F:34:19:C5:F0:04:D5:48:7A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 753898B0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eRVROVR3ZqV_HgF_NBnF8ATVSHo.roa
Signing time: Thu 24 Mar 2022 04:10:15 +0000
ROA not before: Thu 24 Mar 2022 04:10:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1966643376 (0x753898b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 24 04:10:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=79155139547766a57f1e017f3419c5f004d5487a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f3:b5:05:a4:cc:06:8f:3f:8f:c8:ff:e8:1e:
1a:4c:c5:de:76:e7:1a:0f:88:d6:fd:de:fe:cb:4c:
cd:9a:f6:67:4f:b1:3f:b0:a6:a6:af:a7:7d:ce:ff:
c8:1e:70:be:87:55:fc:a6:04:88:aa:cb:c0:8a:2a:
aa:8b:f0:63:5a:6c:4b:7f:59:c9:ca:d8:33:3e:6b:
f2:98:e8:2a:28:9f:ff:6f:bc:36:68:58:a1:1b:84:
05:9e:50:ef:ac:04:96:7b:6f:b8:88:36:49:8c:d8:
c4:3b:a0:31:b0:c4:9d:90:3b:4c:09:f9:f7:e1:20:
2c:6e:8e:88:0b:f9:46:90:2e:6e:00:68:31:56:dd:
d4:59:a3:be:3d:ad:5e:d8:6d:ea:03:57:aa:86:ba:
d4:73:14:20:a7:8c:9d:76:af:4e:8a:02:53:ec:eb:
20:9b:90:46:9a:a9:18:7d:33:a8:4e:60:a6:ff:c0:
d7:f1:b0:f1:94:e1:be:45:e6:b7:f8:87:28:5e:79:
e2:0f:68:4b:7c:ab:86:3b:7b:49:a4:a5:70:71:c4:
cc:7a:7d:cf:4c:45:dd:b5:51:2b:d2:90:b0:c8:1a:
98:cc:10:ef:12:0b:40:f0:da:0e:e5:b7:2f:9d:7b:
b3:7c:72:69:cc:1b:ca:d8:9b:71:1a:39:f4:ac:ee:
6e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:15:51:39:54:77:66:A5:7F:1E:01:7F:34:19:C5:F0:04:D5:48:7A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eRVROVR3ZqV_HgF_NBnF8ATVSHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b3:82:26:12:c0:b6:43:81:53:88:98:a8:4b:d3:78:1c:24:d3:
b7:5d:0e:04:a0:6f:0e:7b:04:2b:e7:96:78:a8:e6:af:e2:b3:
2a:f7:8b:10:51:0c:dd:80:49:96:c2:25:7b:80:f2:ad:9a:a0:
88:bb:13:1e:84:61:da:71:5c:88:52:31:98:55:67:cf:3d:38:
ab:ff:81:58:d2:01:9a:3e:5e:38:f2:12:39:58:e2:3c:d7:69:
d3:34:a6:9d:19:a2:f4:a4:9b:18:66:fd:36:fb:8b:6a:2e:1e:
16:c6:e0:d3:9f:ed:6d:70:a9:99:5d:71:09:98:d7:2c:bc:bf:
45:39:92:17:d3:07:c0:60:24:dd:12:af:81:e3:12:d5:66:b2:
65:2c:75:5c:4d:f9:a8:41:f3:6e:50:9f:00:93:2c:86:08:ae:
14:1f:b8:22:70:62:ed:3a:49:6c:51:0e:10:26:7b:0d:55:10:
f5:45:d6:bb:04:58:2f:97:1a:a8:1c:07:3d:20:20:d2:7f:e5:
a7:b1:2c:a8:fd:77:b1:2a:2c:26:db:e4:8c:4c:b1:91:c7:85:
e1:51:90:bb:b1:0a:48:d3:c2:c4:db:13:ec:d6:f0:e4:13:ac:
25:77:4f:85:74:98:5f:fc:25:76:08:a7:23:87:bf:7f:ba:7e:
78:99:75:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 12:04:56 2025 by rpki-client