Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sEcztQthBwNEF3f5ynGKPj-ABCw.roa
File: sEcztQthBwNEF3f5ynGKPj-ABCw.roa (raw, json)
Hash identifier: yPDvRhJ1Q9jGcdy7Tm2fF54yrsVFJT7ykeLSdeaPfHM=
Subject key identifier: B0:47:33:B5:0B:61:07:03:44:17:77:F9:CA:71:8A:3E:3F:80:04:2C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 927D1A7D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sEcztQthBwNEF3f5ynGKPj-ABCw.roa
Signing time: Tue 05 Jul 2022 04:11:25 +0000
ROA not before: Tue 05 Jul 2022 04:11:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2457672317 (0x927d1a7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 5 04:11:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b04733b50b610703441777f9ca718a3e3f80042c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:29:d6:96:94:58:69:b5:e9:17:86:45:5a:db:
95:2a:8c:fe:27:d0:e4:2a:46:92:e8:f3:cf:73:a1:
91:c3:49:7d:a3:50:24:8d:bb:9d:73:d0:7d:3e:04:
96:13:87:a5:39:9d:73:aa:b8:56:ee:86:f2:10:b7:
f9:8e:87:f5:c5:af:94:f2:f5:c5:f0:40:18:a1:5f:
68:38:fc:f0:ba:7e:6b:16:59:89:a5:67:52:4c:9e:
39:63:dc:81:87:20:09:36:7e:15:0c:e5:92:80:40:
e2:26:d7:a3:01:78:46:89:27:13:5b:9a:ee:b2:3d:
ce:55:6e:fc:a8:61:33:1d:69:3f:7b:01:8b:67:d9:
88:f6:ef:6a:f2:fd:ec:89:99:b1:1c:49:c2:a3:71:
6f:2d:e2:93:78:7f:ae:f9:0f:32:99:cd:7c:64:a2:
05:ba:88:d0:dd:95:73:87:da:80:a6:9f:ae:36:ce:
8f:4b:c2:46:a2:b0:6b:ca:a7:54:53:4d:6e:fd:0e:
d2:4d:6b:ba:2c:47:82:f3:2f:92:9b:b8:ad:d4:7b:
38:e3:73:4b:fa:92:71:62:29:43:eb:29:9f:de:fc:
bc:28:b7:c4:c1:78:46:c3:f6:77:18:b4:aa:7d:fa:
f9:48:99:05:c6:35:9d:34:23:3d:f1:ef:ad:fd:5d:
a7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:47:33:B5:0B:61:07:03:44:17:77:F9:CA:71:8A:3E:3F:80:04:2C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sEcztQthBwNEF3f5ynGKPj-ABCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8f:9b:ff:df:91:d8:1c:8c:6b:c9:a4:66:4e:5f:63:66:f0:48:
ce:71:53:12:74:30:00:a7:d4:2d:e6:5f:3a:da:5f:1d:2a:00:
14:bf:c2:90:4c:24:ce:b5:de:1d:37:92:58:06:0d:28:64:13:
e6:28:47:fe:ae:2a:d2:8d:5f:3a:6a:47:bf:be:de:48:ac:ae:
cc:89:7c:23:a0:64:f7:da:32:2f:cf:8f:30:31:9c:d0:61:0b:
52:25:32:dd:3e:de:4d:3a:70:b6:27:20:27:b7:8b:1e:9c:2a:
c9:4e:7b:ac:a8:91:c5:e7:01:47:47:fe:39:fc:b6:70:24:18:
4b:c9:54:b1:57:1d:a8:d6:b9:3c:90:62:e7:6c:13:a3:73:19:
1c:fe:86:f8:5f:dc:88:c1:71:e3:71:16:92:54:70:8d:32:92:
71:9a:07:b9:9c:1d:b4:4d:70:39:db:3b:a2:8a:4a:64:97:48:
2e:ef:ae:5b:54:16:3e:34:24:a6:e3:9f:58:01:88:47:c6:cf:
a8:4d:63:96:45:96:a4:6a:9a:0d:b7:ed:38:8f:68:70:db:88:
91:01:09:9b:e2:86:13:da:7c:6f:39:1b:a5:94:8f:22:65:b9:
51:6d:74:87:09:0a:46:15:66:4c:a8:fb:8f:d1:ab:17:e3:29:
ee:0f:08:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:20:17 2025 by rpki-client