Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/etZvTrUQA41zqHlRUvcB3I3tSFc.roa
File: etZvTrUQA41zqHlRUvcB3I3tSFc.roa (raw, json)
Hash identifier: TrwrrcDUhU0gmP9Dq0UTk/cDdLak4y3w/QKfnWhmZDs=
Subject key identifier: 7A:D6:6F:4E:B5:10:03:8D:73:A8:79:51:52:F7:01:DC:8D:ED:48:57
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018556E84A24BDD2E179651E0B0F53FEB62D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/etZvTrUQA41zqHlRUvcB3I3tSFc.roa
Signing time: Wed 28 Dec 2022 04:05:41 +0000
ROA not before: Wed 28 Dec 2022 04:05:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:56e7:c463/128 maxlen: 128
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:56:e8:4a:24:bd:d2:e1:79:65:1e:0b:0f:53:fe:b6:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 28 04:05:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ad66f4eb510038d73a8795152f701dc8ded4857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:dc:d5:5f:f4:b5:c2:48:57:55:a9:40:36:b4:
05:67:c8:62:33:9a:76:58:01:db:2a:e0:9d:95:98:
2d:85:3d:14:2d:15:de:7a:c4:d5:8c:eb:51:49:d1:
f5:d7:2a:89:7e:c4:1b:d9:f8:88:05:95:ce:35:27:
9e:d8:cd:7c:e5:3a:3a:3a:c8:40:9c:f0:6e:ac:48:
13:ce:d3:07:27:92:d6:e1:f5:27:7c:32:68:d5:48:
d7:3e:6e:ab:f7:55:6f:16:16:e2:de:ba:dd:74:77:
9f:a0:dd:11:81:bc:66:4e:1c:f2:f9:23:0d:f4:62:
aa:aa:be:a6:07:85:2b:27:dc:8f:26:c2:92:12:3d:
a2:bf:39:44:56:15:a4:2f:71:a6:b8:cb:6a:18:ff:
96:38:7c:5a:f9:7c:92:3d:9b:42:a9:2d:bd:4f:18:
80:63:0d:e1:5d:23:f2:a9:0c:6a:9d:96:4d:94:38:
ab:2b:5e:f2:69:97:82:a8:50:82:6e:9b:8e:b8:21:
87:94:65:1a:a5:c8:25:c9:bc:4e:ad:f9:03:ec:9f:
8a:fe:f1:4d:18:1a:6c:db:e8:ee:11:52:6f:59:30:
e1:d1:80:92:32:02:a3:34:f5:29:88:89:d7:da:89:
4a:5b:5a:c1:4e:e6:1e:f9:ac:6d:f7:64:a6:c5:5c:
86:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D6:6F:4E:B5:10:03:8D:73:A8:79:51:52:F7:01:DC:8D:ED:48:57
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/etZvTrUQA41zqHlRUvcB3I3tSFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
92:a7:7d:31:5e:d4:15:d4:16:89:e7:a3:a4:48:65:92:2f:56:
51:d5:39:58:7e:69:0f:ce:9b:52:75:49:d7:5b:11:11:0b:6e:
22:16:ef:9b:c3:84:1a:74:83:29:9b:f4:ad:a4:66:df:9c:88:
65:fb:e9:a9:55:db:0e:c3:94:38:2e:4d:a2:57:e0:77:2e:1a:
61:19:cc:eb:28:a8:a1:44:a8:5e:3e:b9:eb:a8:07:53:5f:77:
bc:f8:54:52:44:26:c7:e7:75:24:bc:ab:06:4c:d4:dd:cf:20:
0b:c6:bc:4c:a2:23:11:39:c4:ae:06:01:24:9d:43:5b:4c:d0:
40:e6:62:60:db:98:6e:06:fa:a6:83:18:95:3b:54:ff:39:fa:
4e:6f:0a:6c:db:62:38:fc:92:53:ef:1a:71:a6:6f:63:16:dc:
ce:27:55:f4:47:23:64:bc:9d:e3:c6:24:12:2d:dd:a9:1b:ae:
58:89:c8:89:49:fc:33:28:c7:56:64:36:48:5f:33:ef:91:89:
c4:0a:59:cb:66:29:ca:e7:ec:32:2d:0a:6c:a2:c2:75:1d:b3:
06:4c:1a:52:94:86:e6:c8:24:b6:38:e4:a3:a6:df:5c:3e:95:
21:71:f5:a1:e4:3a:b9:db:bd:97:80:8c:ea:80:c8:df:db:21:
38:6e:1c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 10:10:06 2025 by rpki-client