Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/h4sAddAyA7_QDIk_fPkSiwdORgs.roa
File: h4sAddAyA7_QDIk_fPkSiwdORgs.roa (raw, json)
Hash identifier: NpDbJHZWCsdCf/JU+/10GLJTYbMSsKC2WaRmA9Lhngc=
Subject key identifier: 87:8B:00:75:D0:32:03:BF:D0:0C:89:3F:7C:F9:12:8B:07:4E:46:0B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018229DF1A3BB88A1ADA996C6E24FC3130E0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/h4sAddAyA7_QDIk_fPkSiwdORgs.roa
Signing time: Sat 23 Jul 2022 07:04:23 +0000
ROA not before: Sat 23 Jul 2022 07:04:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:29df:acf/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:29:df:1a:3b:b8:8a:1a:da:99:6c:6e:24:fc:31:30:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 23 07:04:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=878b0075d03203bfd00c893f7cf9128b074e460b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:71:bc:2c:77:5d:3b:cd:9e:ef:f0:34:a9:8c:
ad:c8:31:47:72:26:76:b8:6b:59:5c:aa:0d:67:24:
77:d2:73:5b:df:2d:20:29:1f:3c:d8:d2:2e:78:a4:
bb:79:f4:42:7f:21:c7:b0:f5:3b:22:d0:47:40:52:
a2:08:cf:88:30:cc:0f:86:d6:8d:6d:fa:5a:8c:1f:
2b:6d:1b:c4:c8:88:c7:bf:19:32:2c:2a:e1:86:60:
18:62:12:a5:fb:c1:87:f0:2d:f9:f7:02:54:09:04:
5c:d4:b7:85:bb:c3:a1:22:c4:e3:93:40:f8:cd:9f:
03:0c:ef:a7:f1:62:2f:55:d0:70:f7:68:e9:cc:3d:
97:b5:b2:6f:0e:38:3e:b5:bf:ca:ee:ef:96:e6:e6:
82:32:37:21:6d:02:73:1f:53:9e:b1:b4:9d:bb:6e:
4e:f1:0c:a0:cb:6b:a9:7d:7f:34:31:22:3c:eb:c6:
02:6d:ae:9e:c3:00:a8:e5:f9:cf:52:aa:41:20:08:
08:eb:40:0c:56:01:99:f6:49:06:6d:cf:d0:a6:39:
a7:89:ab:a3:51:b4:bb:1d:30:6b:0c:7d:7a:41:8a:
2b:0f:b3:34:30:9e:8d:1a:17:5a:92:62:87:c5:0f:
02:ca:3c:fc:c3:db:fd:41:11:ae:0c:11:a0:b1:b6:
1c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:8B:00:75:D0:32:03:BF:D0:0C:89:3F:7C:F9:12:8B:07:4E:46:0B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/h4sAddAyA7_QDIk_fPkSiwdORgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3f:ca:f0:66:be:da:51:66:5e:19:dd:71:3e:a1:e6:73:d1:46:
f1:4b:2e:cb:11:21:8e:70:98:1c:93:53:15:b9:e7:06:9c:bb:
71:9e:8e:eb:00:17:fc:43:2a:0e:20:90:de:da:de:b8:3b:8f:
2c:d8:9b:b0:f7:55:e6:6f:c1:80:ee:09:69:a7:83:6c:6f:76:
4b:c1:14:68:64:ac:0c:27:07:f5:a7:20:38:83:0b:e5:28:0a:
94:76:36:97:75:0a:ce:9a:32:46:78:fc:01:47:08:5b:59:73:
1c:e1:43:82:93:5b:fb:61:07:12:ae:b8:34:56:08:7f:73:e4:
c2:1a:43:87:ca:e8:30:22:1c:4d:20:05:cd:d2:41:f8:7d:81:
3b:1a:f0:a9:3b:5d:2b:2b:8d:46:92:79:d2:04:e2:05:53:24:
ae:1c:f7:df:a2:4a:a9:6c:51:e8:c7:d0:c9:7a:e1:6e:44:e8:
0f:84:44:ae:e8:a3:85:0f:25:27:3b:45:f2:55:37:be:f5:d9:
78:08:67:e9:89:db:4c:56:a2:81:c6:35:48:fb:dc:13:0b:f2:
cc:87:6c:7d:8e:50:8d:39:7f:5f:2e:63:aa:6a:dc:f7:f0:e3:
54:95:79:ce:a5:af:f2:e2:47:1c:81:14:37:44:27:d1:52:83:
e5:83:78:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:11:26 2025 by rpki-client