Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rgZaKnH4jQokSwdmfjKvdqqh9GQ.roa
File: rgZaKnH4jQokSwdmfjKvdqqh9GQ.roa (raw, json)
Hash identifier: JjzXUA5TSAT/vTnllYo/DHNj51zmehGPQDajJNGJrZo=
Subject key identifier: AE:06:5A:2A:71:F8:8D:0A:24:4B:07:66:7E:32:AF:76:AA:A1:F4:64
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183BC7313725EF74BF3CE1D17CC7BF53332
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rgZaKnH4jQokSwdmfjKvdqqh9GQ.roa
Signing time: Sun 09 Oct 2022 11:13:21 +0000
ROA not before: Sun 09 Oct 2022 11:13:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:bc:73:13:72:5e:f7:4b:f3:ce:1d:17:cc:7b:f5:33:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 9 11:13:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ae065a2a71f88d0a244b07667e32af76aaa1f464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0e:5c:55:83:6e:02:c8:13:f7:98:42:c0:a1:
7d:73:2a:7b:96:73:22:90:c5:ff:83:7f:37:f3:78:
57:31:b4:b1:7b:ce:8c:f9:08:12:9a:83:5b:aa:ee:
a3:d0:01:b0:1f:72:dc:31:15:98:fa:d8:59:00:09:
9c:72:3e:8c:db:49:a2:27:64:1a:7b:9f:fb:e1:49:
38:c9:b3:75:ee:d4:49:a3:a0:e0:db:f9:ee:85:24:
3c:ac:f6:ef:f0:13:52:0a:85:13:80:f6:9a:2d:4b:
b3:17:4d:24:fa:ca:7e:21:31:23:ad:99:fe:5f:e7:
ad:54:01:43:9f:ec:c3:e8:fc:83:3d:b6:91:bb:76:
5c:67:6f:26:ec:65:5e:57:f0:a9:cc:24:97:3f:af:
e2:17:67:4c:d2:d9:53:9e:c1:53:df:d7:18:9b:ef:
b9:e8:98:37:dd:7a:93:29:e5:b1:58:2f:d6:11:13:
ff:97:d6:12:47:f1:f4:60:c6:ea:5e:a8:81:7d:53:
ab:75:45:9b:fa:cf:03:ce:df:1b:12:15:ab:32:2d:
2f:ac:98:35:a2:2c:81:ff:fa:76:a1:a8:b6:36:91:
4b:a8:18:a2:13:d0:8e:16:6d:95:5b:03:e9:2e:03:
df:33:2b:0d:dd:4f:c6:db:f5:f0:d2:17:db:e3:9b:
52:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:06:5A:2A:71:F8:8D:0A:24:4B:07:66:7E:32:AF:76:AA:A1:F4:64
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rgZaKnH4jQokSwdmfjKvdqqh9GQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ab:38:44:fd:0c:8a:80:4b:b4:04:dd:8f:01:2a:33:53:4c:c5:
ba:ec:c4:23:7d:90:90:68:3e:fa:73:c3:b7:fd:94:ed:23:e2:
8a:b1:c6:82:ad:65:cf:a8:e3:c2:3e:18:32:2b:eb:fe:8b:0e:
e7:13:0e:92:f7:ee:61:71:f8:94:3a:5d:46:aa:8e:2b:cd:be:
9c:e6:ff:81:33:3c:35:c0:55:11:a1:85:c3:32:6e:81:62:87:
b7:4f:b0:b3:63:1f:e6:c3:aa:7c:31:f7:af:83:38:e5:40:25:
2d:0f:da:cb:f7:91:36:b3:0a:76:c1:39:26:ec:25:04:b2:52:
cc:57:a8:5e:e7:0a:7f:3c:56:30:ea:62:bb:fa:95:f1:be:31:
2a:3b:5f:a4:14:28:f3:68:bb:43:e6:95:d3:4d:db:5f:a9:bd:
11:5d:59:82:2e:bd:ee:bf:92:c9:2f:ba:89:ab:3e:85:24:83:
a0:7f:0e:03:c0:8b:99:5c:3c:a8:a9:2f:d5:8f:45:69:d4:dc:
cf:68:67:74:bc:6e:69:ba:44:d1:dc:af:81:00:db:9b:59:9d:
7c:2e:16:11:e2:20:8c:4f:87:23:8c:34:8a:20:77:1e:b5:c4:
ad:5f:0b:e2:da:cc:cf:05:8e:0c:83:e2:d4:3d:d7:a8:b2:fb:
cb:56:30:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 07:58:22 2025 by rpki-client