Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/i0OlHajJDS9QfpJLWU8g3Jig5IY.roa
File: i0OlHajJDS9QfpJLWU8g3Jig5IY.roa (raw, json)
Hash identifier: yH7LFwt5f1lvYfN+OLQmx9okOC5fbGJNFLh/NfxyY3o=
Subject key identifier: 8B:43:A5:1D:A8:C9:0D:2F:50:7E:92:4B:59:4F:20:DC:98:A0:E4:86
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184E1C97B5897DCF623A3FB145FBAF14F56
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/i0OlHajJDS9QfpJLWU8g3Jig5IY.roa
Signing time: Mon 05 Dec 2022 10:16:28 +0000
ROA not before: Mon 05 Dec 2022 10:16:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e1:c9:7b:58:97:dc:f6:23:a3:fb:14:5f:ba:f1:4f:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 5 10:16:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8b43a51da8c90d2f507e924b594f20dc98a0e486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f1:c1:cf:6a:1f:bc:81:08:62:ea:59:69:68:
47:e5:e0:7d:86:8d:94:dc:f8:43:29:00:95:26:1f:
6c:e2:30:1c:25:d6:28:ee:23:3a:4f:c8:ad:80:de:
e8:6b:2a:d5:95:e7:e8:5d:d6:36:87:f5:6f:aa:03:
91:09:01:27:47:9e:5a:5d:82:14:c1:26:be:a6:4a:
ce:8e:ab:df:8d:cc:9b:bd:8d:db:11:ca:89:ce:cd:
41:f7:19:75:7e:7d:d6:45:df:8c:6c:ba:b2:3a:be:
33:bd:6d:4e:50:70:6b:85:7e:3b:8c:26:81:8b:e4:
45:4c:e0:0a:29:fb:92:58:18:b7:fe:84:6b:e5:24:
05:c2:94:c1:51:90:7e:b3:bd:9b:33:9d:c2:03:1d:
ac:e2:1b:db:8e:d5:6d:76:22:2b:54:f3:32:a0:7c:
4b:29:ae:6a:d5:ad:84:79:a9:a9:2c:e3:62:5f:74:
51:10:27:34:3c:f7:4c:6e:46:78:a3:0f:94:e4:30:
3c:16:66:95:51:ec:a2:de:57:8d:87:82:c6:fe:d6:
6f:fe:1a:83:d5:33:73:f1:1b:88:7b:3e:90:8c:44:
03:33:10:9a:5b:fd:34:aa:db:c8:60:a8:c1:08:50:
2c:b2:69:db:75:25:b9:a2:ac:58:b1:45:8b:24:6c:
bb:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:43:A5:1D:A8:C9:0D:2F:50:7E:92:4B:59:4F:20:DC:98:A0:E4:86
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/i0OlHajJDS9QfpJLWU8g3Jig5IY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b0:b8:62:8b:6e:84:e9:87:0f:7e:c7:ac:e7:1f:83:c4:d4:21:
79:30:76:45:ca:2f:00:96:db:83:e1:2b:29:ca:c7:7d:be:c7:
63:37:f9:84:33:f8:eb:9c:96:7a:8e:15:85:8c:0a:67:cf:ca:
f8:35:4e:e4:4a:3e:e3:0f:be:dd:e7:06:01:6c:27:69:b3:67:
79:05:aa:2f:fc:3f:2e:93:59:3d:15:30:54:66:19:9c:a7:6e:
4a:55:67:81:e3:df:1f:7a:40:23:d3:a4:92:81:43:81:35:3d:
0f:fe:a7:60:06:e5:21:47:fd:3b:c4:65:dd:b8:2f:43:d1:0e:
a2:ac:c6:06:fe:51:ce:48:9a:20:26:18:95:2d:1b:aa:25:84:
b8:ae:2e:f6:30:48:de:2c:0f:65:48:10:61:a1:f0:e9:b4:9e:
c8:85:b4:9b:d3:83:66:89:eb:19:38:f7:0a:9e:80:53:b2:65:
f9:66:dc:33:8b:f7:f6:d5:8a:de:d3:24:1d:cd:f8:87:7a:03:
34:c6:6d:21:a1:8f:86:24:7c:de:17:22:15:32:54:c5:e1:ca:
7a:3e:3e:fa:aa:d0:1c:78:7a:c9:3c:55:33:33:f9:25:e5:9a:
12:8c:e5:52:33:2f:37:da:76:da:1a:ba:9d:55:af:fc:a0:2b:
e0:80:9c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 18:56:37 2025 by rpki-client