Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rrdponbhHkH940V44t12RgoJ4GM.roa
File: rrdponbhHkH940V44t12RgoJ4GM.roa (raw, json)
Hash identifier: 7tUAAzrNbJdkjB4Mh7F86abcxPbpQWGDfF9xUmvJoB8=
Subject key identifier: AE:B7:69:A2:76:E1:1E:41:FD:E3:45:78:E2:DD:76:46:0A:09:E0:63
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 71E02E5C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rrdponbhHkH940V44t12RgoJ4GM.roa
Signing time: Sat 12 Mar 2022 09:09:55 +0000
ROA not before: Sat 12 Mar 2022 09:09:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1910517340 (0x71e02e5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 12 09:09:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aeb769a276e11e41fde34578e2dd76460a09e063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:39:c6:75:61:fa:35:d3:aa:04:8e:ca:5a:b2:
4d:dd:1d:83:50:32:18:cb:fe:9f:27:d1:f5:72:aa:
c8:f1:2c:4b:ea:a2:05:fa:c5:b9:f7:77:84:68:b1:
eb:f5:12:ae:56:e0:71:eb:b5:af:a9:77:39:43:84:
7e:38:de:ae:53:0f:d0:81:9c:b2:8e:df:96:30:51:
da:be:55:80:0d:8c:10:be:d9:3b:73:ce:ab:47:9e:
ab:81:b5:b5:03:f0:37:af:af:49:ec:f6:5a:8e:a5:
70:43:1d:df:ab:74:5c:52:c4:b4:4d:ea:58:0b:af:
d2:b7:33:55:58:f4:b7:51:13:cb:05:ab:93:15:29:
bd:7f:2c:77:4a:ab:d4:9b:20:57:3f:3f:90:c3:e4:
bc:cb:53:03:3f:31:ea:af:74:5a:30:d1:4c:69:41:
96:99:59:f9:eb:50:1f:76:28:22:27:03:5f:2a:89:
e5:86:75:1b:32:16:7f:c3:99:bf:3f:60:90:8b:40:
b3:c5:10:6b:a8:96:05:79:62:32:11:39:22:0a:37:
cf:a6:86:06:f8:5f:41:e3:f5:39:67:b7:dd:54:c3:
85:e2:0d:63:b4:d5:16:82:10:55:fc:32:bb:80:e9:
08:05:04:47:ba:a8:c6:ee:ae:6a:3c:d0:62:11:57:
2d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B7:69:A2:76:E1:1E:41:FD:E3:45:78:E2:DD:76:46:0A:09:E0:63
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rrdponbhHkH940V44t12RgoJ4GM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
42:ca:6b:a5:50:e3:cf:4c:6c:ea:d5:a4:33:06:dd:d8:87:f9:
e7:1e:a4:c4:19:4f:14:3c:41:28:07:a6:ce:ff:fd:77:ef:e6:
f6:56:5d:f8:57:a1:b7:10:5b:22:e4:f4:b9:28:25:fd:51:a1:
29:f0:81:22:ec:80:43:57:ea:d9:9f:13:8a:fe:37:eb:3d:de:
c8:69:ab:1b:0e:58:29:e0:43:8c:87:86:2c:85:83:b4:71:f0:
88:76:31:f6:23:e4:81:c8:64:36:91:0d:7f:1e:db:e9:46:12:
f3:29:15:54:61:46:fe:d2:d1:04:0a:19:16:da:e3:ab:ff:af:
c2:37:43:87:3d:98:d6:a0:7b:42:d5:3e:3b:72:fe:9b:fe:5d:
83:7c:c1:17:41:50:e6:2b:87:cf:22:aa:87:de:ff:14:43:d5:
b9:08:8c:c0:e5:70:56:3b:29:74:d3:9d:65:d5:81:be:20:cc:
3b:4b:b7:b1:00:fd:eb:19:4d:d8:f6:ec:a1:1b:77:32:f4:0f:
22:2f:0d:61:c1:b5:ae:45:bc:5c:b8:6b:53:d3:3a:ba:1d:3d:
f2:5b:8c:ca:13:9c:a5:59:b8:e7:7d:08:71:21:bc:7d:27:1a:
51:56:ef:8d:e6:8c:7d:bc:7f:9b:b9:ab:5e:96:b4:20:43:e8:
8e:9c:03:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:15:34 2025 by rpki-client