Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-BB0S6enQB8y1j8gN2Kvgd75qhM.roa
File: 1-BB0S6enQB8y1j8gN2Kvgd75qhM.roa (raw, json)
Hash identifier: yaO4vuGpOFAVnKmO0wSUb1qxL5eIr1CNb+JjdyLh0TE=
Subject key identifier: F8:10:74:4B:A7:A7:40:1F:32:D6:3F:20:37:62:AF:81:DE:F9:AA:13
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01863A28F8033C426795F365BA1D897C1201
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-BB0S6enQB8y1j8gN2Kvgd75qhM.roa
Signing time: Fri 10 Feb 2023 07:10:08 +0000
ROA not before: Fri 10 Feb 2023 07:10:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3a:28:f8:03:3c:42:67:95:f3:65:ba:1d:89:7c:12:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 10 07:10:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f810744ba7a7401f32d63f203762af81def9aa13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c6:2c:b0:69:0d:8a:12:2b:1c:27:d5:a4:bc:
02:2b:e0:58:0d:b2:90:3a:ad:3b:4a:63:ff:0e:e6:
de:ab:73:12:c0:01:9e:4b:24:6a:09:2a:f3:28:78:
ea:e7:6b:83:85:e8:fe:17:95:64:d3:f0:71:c0:e1:
50:1c:06:d2:80:f9:57:96:f9:4b:6b:c7:a8:2b:c4:
64:48:7f:09:a9:03:e0:fc:97:e0:eb:a7:34:65:9d:
60:91:70:e7:4b:fe:87:8f:69:aa:5b:10:fc:29:f5:
02:10:74:10:d7:75:72:b3:1d:f6:e6:fc:73:c7:8b:
d0:a7:7d:16:e3:82:39:c7:1b:5d:00:90:24:0f:c8:
8d:19:0c:ab:a6:02:25:e6:ef:78:29:27:3a:4a:94:
83:11:6e:e8:c7:da:53:c2:2c:49:a9:f7:ae:53:cf:
58:73:5c:91:e8:1d:92:84:e7:0a:bc:c1:cc:b0:21:
3a:a6:9b:69:c9:91:41:d8:93:34:13:b1:c7:88:c3:
57:9e:9c:d1:29:3f:e2:f5:5c:6d:94:8c:3c:76:49:
c7:57:c0:ea:fe:f1:c2:c0:15:c9:1b:7c:ac:d3:43:
36:14:57:3f:d0:b7:58:b9:60:41:d9:88:35:ac:fc:
3f:66:dc:41:bc:ae:d5:88:0c:cb:c4:07:18:39:e9:
e2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:10:74:4B:A7:A7:40:1F:32:D6:3F:20:37:62:AF:81:DE:F9:AA:13
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-BB0S6enQB8y1j8gN2Kvgd75qhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9e:f7:d2:80:3b:18:f1:55:cd:4a:1f:54:20:dc:90:cb:4c:26:
7a:af:74:0a:fe:3b:72:c2:33:0c:8b:dc:50:89:8e:3d:f8:1a:
aa:d8:8c:30:f0:32:db:f7:a4:41:d9:71:bd:4e:15:ad:97:3a:
31:78:90:4f:ef:e6:16:77:df:f8:18:6b:2c:a1:4f:e2:9d:4c:
d8:2f:04:2f:47:50:4c:bd:a7:b4:37:56:9a:49:4d:fb:ca:ce:
0f:99:bc:3f:39:80:4d:d6:a0:3e:65:96:d3:d7:8a:cc:13:76:
db:e8:3b:e1:b1:ac:f8:c6:4b:5a:81:85:5a:2d:39:db:37:e1:
93:3b:a6:fa:90:7e:fa:93:68:bb:2c:13:9d:c4:7c:6b:2d:6d:
14:24:9c:33:89:5e:27:dd:a1:3a:2b:c6:03:72:29:06:8b:96:
cc:53:e0:ea:15:98:f8:37:1e:2b:0d:8d:bf:0a:26:1e:27:ef:
1a:60:c5:6e:19:f6:9b:9b:0f:87:fd:dd:8e:c4:9b:5d:92:d1:
a6:00:e9:4a:18:7e:75:54:92:47:4f:57:6f:ce:ba:14:35:52:
28:98:69:be:02:d0:f8:f2:ca:c7:c4:ae:30:1f:e5:a5:dc:90:
ec:8c:d2:a2:53:d1:e4:dc:76:c7:4a:76:f2:2a:bc:d6:c2:18:
00:3f:01:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:55:02 2025 by rpki-client