Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eyktu1zHt6wqYqVsOoQp_i0A3F8.roa
File: eyktu1zHt6wqYqVsOoQp_i0A3F8.roa (raw, json)
Hash identifier: VCdICf58XFhiPT/1S5tLcdwH29H1InY1XTqyo470lhM=
Subject key identifier: 7B:29:2D:BB:5C:C7:B7:AC:2A:62:A5:6C:3A:84:29:FE:2D:00:DC:5F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 728FE21E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eyktu1zHt6wqYqVsOoQp_i0A3F8.roa
Signing time: Mon 14 Mar 2022 23:10:18 +0000
ROA not before: Mon 14 Mar 2022 23:10:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1922032158 (0x728fe21e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 14 23:10:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7b292dbb5cc7b7ac2a62a56c3a8429fe2d00dc5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:07:d7:85:44:86:37:34:b7:e3:86:f2:83:d6:
b0:a7:11:45:ff:ef:d1:bc:22:33:88:99:6a:5e:8c:
50:63:3d:c0:12:42:60:ca:6a:7d:9e:a9:43:48:f7:
6c:40:12:3f:de:b2:4f:92:9e:7f:1f:d2:36:e6:01:
8f:8a:2f:4c:2f:c5:a3:7a:a7:65:2c:d1:1c:89:a2:
1b:24:0c:86:aa:73:b6:e0:0d:9b:5e:0e:33:b5:dd:
71:16:49:fd:08:09:1e:b7:57:4e:51:c4:2a:82:f8:
06:5a:be:0b:75:e1:ff:19:db:a8:c9:33:7a:94:ae:
fc:7b:83:20:8d:35:77:7a:2c:09:5a:75:70:2b:e6:
7e:db:6c:4d:36:67:57:8c:dd:66:1c:27:d2:1d:8b:
df:a3:52:e3:f0:28:c1:ab:0b:80:fd:6a:88:a2:22:
51:70:da:65:95:58:0e:65:a9:3d:bb:6b:62:fb:6c:
bc:e1:35:12:c8:2d:62:7c:9d:94:9b:77:89:3c:54:
92:59:73:8a:fa:14:71:82:14:22:4b:0d:e9:82:18:
5b:22:e5:54:69:2e:07:a2:03:af:00:db:c1:df:95:
d2:28:54:54:aa:f4:5b:3e:05:15:d3:11:5a:f3:c4:
44:b9:3d:4b:34:30:65:f4:50:0f:64:6f:3c:b1:32:
04:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:29:2D:BB:5C:C7:B7:AC:2A:62:A5:6C:3A:84:29:FE:2D:00:DC:5F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eyktu1zHt6wqYqVsOoQp_i0A3F8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9c:69:94:0b:1a:6f:a8:25:55:d9:3e:3f:eb:69:24:8c:dc:a2:
90:be:d4:fd:64:84:5e:1b:fd:12:44:cd:73:5e:ab:0f:4e:b7:
69:25:c7:a1:05:f1:df:9f:69:3e:b0:c6:09:60:b2:ea:ff:cf:
e6:cb:f6:af:d8:45:52:6d:5c:ad:e2:1a:3b:2a:c9:7c:3e:06:
f1:bb:b6:44:a6:b4:69:68:d7:17:75:85:42:41:4d:a2:8f:94:
cd:52:8c:f5:31:cf:65:5a:ca:40:25:38:83:f0:64:ef:fd:fa:
f4:44:90:07:6d:23:5b:6c:f3:8a:ea:b2:c6:02:66:aa:e4:a8:
5b:90:24:e1:a4:a8:73:26:ca:c9:68:44:04:43:32:11:b0:1c:
20:ce:80:0c:df:02:09:5a:c9:e3:b1:f7:96:4a:78:7a:12:90:
a6:c6:87:2a:69:6d:e0:b0:bd:77:22:de:9a:14:1a:1e:5d:1e:
ed:e8:f2:0e:0f:72:c5:fe:ab:92:95:12:a4:14:d3:61:a9:07:
91:b2:18:4d:35:f4:a0:8d:ce:6f:f4:79:b5:51:ca:3a:84:f9:
b2:d4:b4:d7:da:27:2c:9c:7b:6b:d4:d7:a7:ca:72:77:d7:33:
22:35:4e:ef:e3:bd:61:44:80:27:2a:a2:b4:b5:97:88:0a:53:
e0:a3:81:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 01:37:38 2025 by rpki-client