Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t3_s0KfCeTqdMGubUoaj7tjL6us.roa
File: t3_s0KfCeTqdMGubUoaj7tjL6us.roa (raw, json)
Hash identifier: obXPDfuIn5Kjnb7A9Baf3mJkpB906LWqjnStnJBSP40=
Subject key identifier: B7:7F:EC:D0:A7:C2:79:3A:9D:30:6B:9B:52:86:A3:EE:D8:CB:EA:EB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01822DFBF535C35A538D6EFA926F238F9A1D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t3_s0KfCeTqdMGubUoaj7tjL6us.roa
Signing time: Sun 24 Jul 2022 02:14:23 +0000
ROA not before: Sun 24 Jul 2022 02:14:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:2d:fb:f5:35:c3:5a:53:8d:6e:fa:92:6f:23:8f:9a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 24 02:14:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b77fecd0a7c2793a9d306b9b5286a3eed8cbeaeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b9:d5:a3:a4:b1:95:0a:ab:77:82:b1:a6:f4:
02:40:72:32:6d:e6:eb:47:40:11:fe:50:24:1b:bf:
e7:a0:90:46:1d:fd:25:a0:f0:fd:fa:14:80:83:06:
83:82:35:f1:0e:6d:c5:0b:44:26:7f:f9:f1:34:a1:
61:62:04:56:41:de:6e:d3:32:f6:2a:77:b5:69:7c:
d9:c8:bb:da:ba:ea:8b:60:ec:44:c4:b5:73:3b:4b:
be:a8:ab:de:1a:b7:b7:14:d1:aa:ee:16:81:07:48:
13:bd:ed:a5:ae:9f:94:c2:a7:16:2b:15:af:51:30:
31:3c:fa:43:46:be:e7:78:0c:e6:f8:5a:5d:ba:8e:
2f:da:90:77:27:1d:a5:31:ec:3d:41:ad:d0:ff:31:
ca:25:fe:1f:0e:11:66:cd:cb:bc:38:e8:23:db:2e:
0c:a8:98:a4:e3:7d:d8:0f:c0:62:a6:bb:a4:04:40:
e2:02:8e:23:7e:71:0b:f5:0e:53:c7:5a:d4:e0:b3:
02:10:25:5d:35:22:ee:15:de:83:3d:36:2e:6b:1e:
15:5b:3a:1a:a3:f1:d7:de:da:9b:df:46:59:07:56:
bd:f4:ca:4e:15:27:26:91:15:57:98:d2:af:81:1c:
aa:8a:bd:8f:9b:c2:dd:ec:51:10:38:74:39:08:83:
66:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:7F:EC:D0:A7:C2:79:3A:9D:30:6B:9B:52:86:A3:EE:D8:CB:EA:EB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t3_s0KfCeTqdMGubUoaj7tjL6us.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3e:65:8d:05:09:48:9b:56:86:d9:24:43:85:cc:19:18:2e:3f:
a9:df:74:64:ff:0f:d3:89:e2:18:a7:52:9b:22:65:14:7f:62:
ad:8d:08:55:7e:b3:7d:19:3b:4d:55:4c:da:86:8d:9e:78:dc:
75:26:d7:e3:ec:6f:b9:23:dd:fa:0f:dc:13:7b:63:98:5a:6e:
a5:2b:34:ad:33:ef:94:4d:3a:59:35:7c:85:3d:e0:5f:87:80:
ce:6c:40:4b:cf:ad:13:46:bc:38:36:3c:ae:b9:1a:f1:75:65:
b7:ce:b8:df:5a:5b:14:80:85:27:64:34:45:8f:bd:cc:e5:a8:
b5:3c:fe:71:33:92:f0:53:59:47:0e:e0:fe:3e:96:17:5f:6b:
32:ea:e9:5a:50:98:06:41:37:a5:2f:0b:a5:01:07:8c:2c:6f:
10:10:e3:00:eb:b8:04:71:c6:55:9f:b5:28:82:57:1e:31:08:
88:34:8f:bc:31:9c:ed:b3:ab:b0:5a:98:46:ce:1a:ab:be:2c:
5a:a9:45:89:69:f3:3a:42:5f:51:32:c5:c1:32:6c:a7:0b:de:
9f:48:84:d7:8c:29:fa:34:e0:50:ce:57:79:e2:39:81:4f:01:
8d:a8:13:da:9a:19:de:33:e8:47:43:a6:0e:ec:16:ed:cf:a1:
10:b3:22:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 07:31:10 2025 by rpki-client