Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rvY2viuFsBEi9g97NkS-6y4b92c.roa
File: rvY2viuFsBEi9g97NkS-6y4b92c.roa (raw, json)
Hash identifier: H9dTRgZ7rFHfwt6UbKsyZsesTNme1wRv1lXvDpByQJM=
Subject key identifier: AE:F6:36:BE:2B:85:B0:11:22:F6:0F:7B:36:44:BE:EB:2E:1B:F7:67
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184DC9F76010F9ACCB803350D3587BC162F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rvY2viuFsBEi9g97NkS-6y4b92c.roa
Signing time: Sun 04 Dec 2022 10:12:28 +0000
ROA not before: Sun 04 Dec 2022 10:12:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:dc:9f:76:01:0f:9a:cc:b8:03:35:0d:35:87:bc:16:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 4 10:12:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aef636be2b85b01122f60f7b3644beeb2e1bf767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:91:87:dc:4e:32:9b:fd:d8:6f:71:a0:61:85:
cd:69:88:71:d1:ed:4c:68:2e:87:06:10:7e:4c:0e:
5a:f6:65:c9:24:68:f7:c3:a5:46:f8:13:ad:4c:d0:
2e:dd:f3:66:05:f0:fa:75:36:a1:54:7f:65:1b:4e:
b3:9f:52:8a:c4:03:2a:c3:de:91:b1:63:3d:dd:7c:
38:c8:b3:ff:a4:e3:fd:79:af:17:35:3e:c8:35:c2:
39:e6:1a:9d:dd:fd:1f:4e:9a:ad:64:76:62:7e:d0:
b1:86:bf:44:1c:fa:1c:c5:f0:e1:86:95:ba:df:ff:
34:6e:8c:29:48:3e:7f:62:15:71:72:31:8b:f8:70:
b4:78:03:a6:f8:46:27:b2:79:00:aa:e5:c0:3e:cd:
db:b3:54:c4:0a:0f:71:a3:0d:af:60:80:a8:3a:00:
e8:a5:f0:1f:8f:17:4e:df:fa:8a:fc:e6:6f:74:b2:
d3:34:2b:a0:1b:32:22:e7:b4:58:4d:d1:89:35:dd:
5a:aa:b4:ce:57:b1:55:42:32:5c:4e:2a:b6:98:b2:
b4:4d:50:21:bf:0c:6b:e6:4a:89:9b:33:8a:7a:20:
7b:5a:fe:03:37:e5:93:22:1c:5d:9e:f0:84:90:6b:
d3:73:3c:a1:46:34:57:48:77:c2:0c:be:9e:c0:6b:
40:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F6:36:BE:2B:85:B0:11:22:F6:0F:7B:36:44:BE:EB:2E:1B:F7:67
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rvY2viuFsBEi9g97NkS-6y4b92c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
04:4c:d0:32:57:13:ce:c2:4f:14:21:a6:fa:96:af:28:9c:b1:
78:68:ee:a7:2d:4a:5b:e9:b1:51:cf:e7:b3:ab:89:ac:42:b5:
fe:fa:15:e2:4e:52:de:a3:8c:94:a4:29:e0:e9:41:bd:9e:ba:
c5:59:62:32:18:86:fb:8d:a3:3e:2e:8c:23:28:17:2b:83:04:
a0:79:6d:01:18:62:c7:3a:f6:a4:28:4c:aa:50:2a:5f:97:3d:
89:16:d0:73:1b:31:fb:54:94:27:2a:3e:13:5e:37:ba:8b:bc:
4d:34:76:8c:45:55:f8:3e:47:f8:b4:50:95:23:97:60:05:06:
1e:a0:f5:1f:cc:f7:06:5e:e9:af:e9:de:21:8a:c1:aa:fb:c7:
29:0f:34:4e:24:87:94:c6:29:31:41:7d:7f:07:a7:7f:cd:a5:
d3:9a:e6:fe:36:05:8f:df:43:54:f6:41:af:d5:ab:44:8f:6c:
7c:e9:62:c3:62:90:0e:5a:5f:35:87:4f:e4:7b:44:32:05:d5:
06:40:52:3f:0a:4b:ca:fd:9a:8c:19:82:e3:c5:14:9b:1c:7e:
f9:15:f6:dd:46:9d:38:85:33:30:3d:26:b5:7a:1a:78:0c:75:
63:60:5f:f6:c2:84:da:ec:d3:70:00:34:25:09:64:44:e5:2d:
4d:4c:2d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:11:37 2025 by rpki-client