Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/onEkiu8n282tiESwYy_5ppiOTBo.roa
File: onEkiu8n282tiESwYy_5ppiOTBo.roa (raw, json)
Hash identifier: gylwXKgkdzRU3EDhZjsOPPy87h/K9iVSnmtV0rNsY70=
Subject key identifier: A2:71:24:8A:EF:27:DB:CD:AD:88:44:B0:63:2F:F9:A6:98:8E:4C:1A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01828B136B32B37D453E85669457C5E62E25
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/onEkiu8n282tiESwYy_5ppiOTBo.roa
Signing time: Thu 11 Aug 2022 04:04:41 +0000
ROA not before: Thu 11 Aug 2022 04:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:8b13:6893/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:8b:13:6b:32:b3:7d:45:3e:85:66:94:57:c5:e6:2e:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 11 04:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a271248aef27dbcdad8844b0632ff9a6988e4c1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:03:eb:7c:a4:34:3c:9f:ca:4e:aa:bd:da:98:
1e:69:1f:5f:b5:32:db:08:f9:33:73:9d:45:f7:c2:
fb:4c:61:77:88:40:8d:ee:36:b3:38:ab:d2:25:0f:
69:62:20:16:07:d1:fd:62:18:6f:cb:57:16:7a:e0:
47:e8:13:bf:b6:ac:a6:98:85:f7:9c:8c:8f:67:b0:
74:6a:d3:49:cc:79:ed:11:57:a7:21:d0:ef:09:ad:
92:92:9b:fe:53:76:02:07:7c:8f:de:8b:89:77:94:
36:f1:03:ed:21:c3:84:ce:b7:73:f6:34:b3:25:2a:
85:d5:7a:38:db:bc:68:ec:ef:cf:a1:15:4d:9c:8c:
16:fd:b3:b5:c8:18:a0:5f:03:92:30:5f:6f:c8:49:
2c:da:34:6c:3c:98:8f:93:cd:63:58:33:3f:65:02:
34:17:b3:d5:09:ab:fe:5b:a9:c9:83:db:0e:52:9e:
09:86:94:89:59:b9:73:2b:d9:04:b7:23:43:68:ba:
0e:79:43:46:7a:9a:2f:20:c9:40:cc:e3:49:48:c8:
04:eb:82:e1:f1:9f:b3:c5:5b:39:13:e1:c6:2d:40:
c8:90:41:00:b9:54:7a:80:cd:c3:08:40:91:5f:ae:
1e:26:0e:b6:94:bc:d9:98:4c:7f:60:c5:93:c8:44:
53:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:71:24:8A:EF:27:DB:CD:AD:88:44:B0:63:2F:F9:A6:98:8E:4C:1A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/onEkiu8n282tiESwYy_5ppiOTBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4e:48:f9:9d:15:10:00:cb:fe:98:ad:ad:e0:46:b8:3b:07:2a:
7f:f1:f6:3a:1f:33:27:80:77:6f:1d:75:7c:0b:91:8a:6d:38:
43:f1:47:41:70:e8:25:65:51:8e:91:ba:0e:7d:38:a6:13:ad:
c5:8a:93:47:36:44:ac:29:df:59:65:bf:2d:90:91:a4:8d:f7:
5c:5d:ff:5d:29:86:b1:c5:4b:b0:b2:18:41:bf:90:eb:52:1d:
19:16:4c:6e:14:29:70:dc:66:37:02:09:c3:9d:e9:23:4e:09:
8b:df:a0:8c:76:6a:11:0f:a2:4e:06:f6:fb:e9:d1:71:25:db:
96:83:ac:bc:1c:ff:d3:c8:78:2b:04:56:0f:cd:64:b9:9b:aa:
65:f5:3b:8a:d0:fb:45:1c:44:bd:2f:d6:36:9a:c6:9d:2a:44:
7f:0e:f3:0d:36:3a:39:47:a6:3a:bc:f0:08:63:c9:b1:b7:db:
29:32:80:40:cb:bd:fd:eb:a0:8d:47:c7:d6:73:1a:69:01:8b:
45:3a:ea:8b:03:24:01:27:0d:9c:29:8f:28:97:b0:7b:4d:d0:
91:d5:f3:62:c1:38:23:bd:2c:e9:5e:d0:31:91:9c:99:18:30:
26:3d:16:7b:fb:98:52:63:7f:8f:6a:d6:3e:0d:9b:62:ed:af:
92:ab:61:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 07:57:35 2025 by rpki-client