Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iS1FTUI5OgFgsDuzQ8rS_J6bKOk.roa
File: iS1FTUI5OgFgsDuzQ8rS_J6bKOk.roa (raw, json)
Hash identifier: NThKmU3DI9KjXs+lZpuMQt8zFWhN5n+ciAaG3q367DY=
Subject key identifier: 89:2D:45:4D:42:39:3A:01:60:B0:3B:B3:43:CA:D2:FC:9E:9B:28:E9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01857419BDEA420BE20600110E30CC31136C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iS1FTUI5OgFgsDuzQ8rS_J6bKOk.roa
Signing time: Mon 02 Jan 2023 20:08:42 +0000
ROA not before: Mon 02 Jan 2023 20:08:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:74:19:bd:ea:42:0b:e2:06:00:11:0e:30:cc:31:13:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 2 20:08:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=892d454d42393a0160b03bb343cad2fc9e9b28e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f5:54:c0:c9:dd:1c:f9:40:03:02:fc:2b:23:
f1:cf:b2:c5:91:f6:aa:db:45:6c:bd:4c:61:99:e0:
c3:7a:07:79:ee:8e:fa:00:fd:a9:5a:95:7e:be:1d:
e8:e6:39:7f:76:ee:4c:84:38:fe:56:c5:93:18:f2:
c4:73:83:5f:f0:23:0f:3c:02:00:5c:9c:3d:64:f8:
02:03:b2:2e:c5:3d:08:a5:e0:b5:f0:fb:c1:6f:53:
ed:d7:a8:49:55:f6:de:09:49:16:37:a7:01:7b:6e:
ff:d2:bf:a4:14:a3:19:40:31:56:1e:9b:fd:04:1d:
7a:23:38:02:02:15:0b:75:fb:c4:2b:91:22:c7:79:
52:03:3a:06:65:28:df:6e:7e:8f:b5:37:bd:6e:b8:
03:d6:8f:95:5c:01:1d:a1:a1:14:1e:45:a4:1d:55:
d0:72:a1:09:a4:3c:a4:3b:f4:53:67:26:74:e1:c3:
5f:4f:b9:bd:ea:92:b8:2c:d5:77:f8:9c:92:8b:3a:
98:d9:20:2f:a1:f1:85:ff:fb:bb:9d:1b:2d:44:95:
87:3a:e4:b2:09:0d:c2:cd:ed:25:56:49:f8:7b:69:
10:1c:1c:94:42:40:43:60:70:4f:78:54:35:0d:59:
b8:5f:62:c1:9e:00:08:a5:93:93:9e:e8:b9:1b:80:
25:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:2D:45:4D:42:39:3A:01:60:B0:3B:B3:43:CA:D2:FC:9E:9B:28:E9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iS1FTUI5OgFgsDuzQ8rS_J6bKOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
40:13:74:02:b1:e4:b0:99:96:ac:e1:26:a2:1d:77:17:97:c0:
21:51:3d:3e:4f:a0:1d:5f:64:51:1c:49:74:da:a9:2f:89:3f:
54:99:c7:f7:0e:d1:69:7a:a4:0e:d6:2d:bb:23:09:97:f8:09:
ba:a4:39:5c:d6:55:5d:79:a7:06:be:ca:a3:61:4a:fe:90:c9:
a0:5c:79:d8:04:3d:22:6e:d2:d3:90:ec:ec:c4:9b:55:0c:ae:
dc:d5:d5:85:2d:10:b2:72:72:48:f4:81:36:69:be:f8:30:a2:
91:24:80:d1:30:fe:75:3a:00:81:fe:9e:1a:e4:37:ca:ee:24:
34:75:7e:da:3a:a3:5c:cb:a5:10:77:d1:99:0c:5c:85:48:84:
fb:b1:20:47:fd:81:f0:6d:2f:50:95:6f:b2:00:6a:32:c5:81:
1b:99:83:92:6c:29:24:8a:7e:a2:a0:9d:44:dc:89:c0:3a:b8:
c8:d3:54:fe:0b:1f:45:ff:97:c9:30:76:dc:e8:a8:9c:3d:bf:
c4:c0:a8:1a:4c:3f:2d:31:00:1c:a8:89:af:a8:09:52:55:6d:
21:b8:dc:29:14:83:4d:a8:de:d2:7a:26:9b:92:06:04:fa:86:
32:3b:0e:f9:c5:a5:96:96:be:51:89:25:3a:c6:f8:34:5c:7a:
04:8d:17:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:36:55 2025 by rpki-client