Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sOeJap5tc4VvzRqpXaVisJ_51AU.roa
File: sOeJap5tc4VvzRqpXaVisJ_51AU.roa (raw, json)
Hash identifier: 58qFLBkjlf/Qi4IK9HzTp0DIZhqjr6ZIKe/vbD4iYMQ=
Subject key identifier: B0:E7:89:6A:9E:6D:73:85:6F:CD:1A:A9:5D:A5:62:B0:9F:F9:D4:05
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185BD10A143E0174D0D8DA7FD5BE95C4287
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sOeJap5tc4VvzRqpXaVisJ_51AU.roa
Signing time: Tue 17 Jan 2023 00:11:01 +0000
ROA not before: Tue 17 Jan 2023 00:11:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:ba40:6692/128 maxlen: 128
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:bd:10:a1:43:e0:17:4d:0d:8d:a7:fd:5b:e9:5c:42:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 17 00:11:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b0e7896a9e6d73856fcd1aa95da562b09ff9d405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:70:6f:48:bb:00:cb:8f:4b:10:f2:d2:b3:e6:
b3:0d:e4:2e:71:52:1b:0d:ff:db:b3:29:73:68:56:
9f:01:8c:1a:48:cd:63:80:a5:46:87:a7:29:15:af:
1a:81:3e:07:dd:e6:15:cb:81:15:e5:36:1c:28:e5:
c3:fc:b6:dc:f3:32:6c:7e:5b:a3:b5:ac:6e:ed:92:
e3:04:2d:ac:bc:79:ee:9c:b2:94:78:80:b1:a5:a8:
9e:b1:9f:b4:a8:41:db:2b:5c:5c:54:47:15:5c:0c:
5d:05:8f:ae:22:99:aa:c0:97:c6:a0:d3:c0:03:f0:
4b:f9:00:6e:b6:60:58:74:0f:27:9b:50:82:bc:d0:
b0:4f:f9:1d:d6:ea:4b:c9:7e:c3:99:76:67:58:78:
2c:f3:73:ef:83:a6:4e:7a:d1:c3:d3:d8:3b:5e:f8:
f0:28:cd:bd:1a:7c:62:b5:59:00:39:d8:17:aa:62:
cd:29:56:f9:fe:67:f5:07:39:fe:5e:08:eb:47:38:
dc:a5:79:f3:c0:b5:47:a7:a8:2d:96:09:0f:93:c7:
9f:9a:72:48:a0:f9:21:77:75:74:75:a9:41:2e:87:
58:0c:4e:10:66:7f:1a:20:84:a5:f9:46:86:53:ca:
17:9a:9b:cb:15:0b:1c:9a:52:b4:3b:2e:25:4e:d2:
12:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E7:89:6A:9E:6D:73:85:6F:CD:1A:A9:5D:A5:62:B0:9F:F9:D4:05
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sOeJap5tc4VvzRqpXaVisJ_51AU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0b:e9:48:f3:b1:33:fe:34:62:95:53:eb:87:c2:f5:4d:94:35:
53:4b:a7:b1:e0:34:67:61:6c:55:dc:0d:92:5c:55:d3:10:a0:
5a:e2:7e:66:d1:5c:ea:2e:a3:b7:19:23:b5:a3:46:58:ed:97:
44:07:fe:22:6f:1a:32:2b:92:d6:27:7d:93:e6:b1:92:74:63:
dd:e1:87:86:36:23:01:0a:9d:a0:f4:11:5b:21:9a:9c:f3:e9:
1b:14:a6:e0:03:c8:b2:de:61:9c:1b:d3:20:85:22:96:0c:aa:
dc:8a:e5:a9:f7:48:bd:6f:ff:d1:20:81:71:6d:d8:21:8d:ab:
33:f5:15:3d:fe:c1:2c:9a:be:36:ea:2a:b2:08:3b:e8:96:fd:
21:6f:0e:d8:93:d7:e9:21:7b:98:f6:9c:15:e9:da:74:6d:20:
09:89:c5:41:83:96:70:66:9a:4a:2a:be:5d:1b:1e:ba:a9:d4:
0d:59:b6:c2:f0:5b:73:27:f2:59:37:ad:fa:f7:11:69:4d:ee:
f6:70:37:d7:6f:c4:e6:2e:03:27:44:a4:80:d9:e7:f2:47:46:
aa:08:f6:cf:d2:95:7a:26:f1:61:d6:ea:56:6f:93:21:80:5d:
45:9b:e7:a9:b9:84:4a:1f:2d:e8:ac:96:d8:f3:59:7a:90:fd:
03:6f:54:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 18:01:53 2025 by rpki-client