Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t130FHX9KdDqyUG6J294H1nqLj0.roa
File: t130FHX9KdDqyUG6J294H1nqLj0.roa (raw, json)
Hash identifier: kXswt/HEME/rkechQTCPWoaUNVlEVb3Zya49TNlKBbA=
Subject key identifier: B7:5D:F4:14:75:FD:29:D0:EA:C9:41:BA:27:6F:78:1F:59:EA:2E:3D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018250861F340E15FC101A67B3CDF2981E51
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t130FHX9KdDqyUG6J294H1nqLj0.roa
Signing time: Sat 30 Jul 2022 19:12:23 +0000
ROA not before: Sat 30 Jul 2022 19:12:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:50:86:1f:34:0e:15:fc:10:1a:67:b3:cd:f2:98:1e:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 30 19:12:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b75df41475fd29d0eac941ba276f781f59ea2e3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e0:db:18:bd:49:62:85:52:95:fc:a5:70:a5:
01:70:cc:81:f0:6c:73:c0:c3:e5:27:03:df:66:20:
54:8d:ae:f7:4a:8a:97:01:c3:fe:3a:b4:09:e9:21:
f6:25:40:c3:c0:7a:df:e8:96:e7:2f:fd:69:f8:6a:
b5:2e:6a:e2:43:68:29:81:fd:1e:bb:ac:51:1f:52:
78:55:56:d1:54:f0:c8:60:2c:dd:c8:9b:a9:8b:b2:
7e:d0:63:97:2b:29:ad:bc:47:f6:23:62:d5:d6:f0:
2a:d4:34:e2:a0:3c:09:31:00:62:52:92:6c:9b:b6:
62:73:c8:1e:e8:0e:02:0f:76:32:a2:89:cc:7b:74:
6f:1d:2b:2c:f7:5d:70:68:a3:ec:81:4d:ce:29:58:
e4:81:b5:f1:3b:40:a4:42:65:ec:18:d5:ca:49:0d:
f3:e8:0c:b3:30:36:6d:a9:c4:cc:47:21:6c:f7:9b:
24:cb:80:6a:a1:55:c1:5d:dc:7b:c2:3c:79:17:8d:
40:13:7a:a8:0c:96:d6:db:66:dd:a9:ef:17:2a:de:
f0:30:c4:1e:80:84:79:39:e7:92:13:38:dc:5a:55:
a0:3d:ae:98:31:66:d7:ee:3d:9c:c5:29:9e:f4:73:
fb:2e:47:b6:67:75:24:35:ee:6d:35:09:d0:d6:fb:
2b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:5D:F4:14:75:FD:29:D0:EA:C9:41:BA:27:6F:78:1F:59:EA:2E:3D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t130FHX9KdDqyUG6J294H1nqLj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
46:50:c8:d7:6d:d5:e7:c0:30:5c:af:3d:64:c8:3b:aa:6f:33:
79:14:61:11:89:3f:e3:38:8c:8f:6a:7c:90:02:1f:63:50:5f:
b9:25:bd:42:d2:7a:b8:9a:69:7d:ff:65:13:36:4e:30:03:4b:
71:b4:a5:b0:1d:08:0b:76:ba:a7:28:6b:79:72:f1:e0:e1:d7:
80:00:78:b7:0d:41:8c:b9:d7:12:36:8f:c2:2e:55:a3:0d:ed:
29:ed:cd:12:97:41:41:ab:5d:5e:cc:56:0f:c9:f7:f5:cf:20:
a6:45:96:73:1d:b8:de:33:ae:d7:b1:43:87:7a:ff:0e:f5:cf:
2f:b2:e5:69:02:07:09:6e:cd:04:4c:af:cb:e2:33:14:bc:46:
66:97:68:7d:c4:21:0e:10:fa:1c:49:b4:32:6a:c9:e1:ec:41:
49:55:02:bd:17:5e:ae:f5:53:00:10:e2:16:8e:94:37:a1:28:
b8:8e:5a:52:b6:d9:a0:48:cc:01:46:b8:13:ec:0c:07:83:7a:
7b:6b:c5:8d:4d:ae:7f:d4:8b:24:f3:eb:82:4c:e3:e2:e7:d1:
9b:4e:cb:4b:ba:aa:d0:e1:d4:49:63:6d:69:3a:b6:e1:1a:6c:
d5:95:e9:7d:75:82:56:0c:9c:66:b2:03:33:fa:30:ac:05:a2:
95:eb:32:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:11:04 2025 by rpki-client