Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-Bb6hrbZzQe_2PSCrt-U2OXaAt0.roa
File: 1-Bb6hrbZzQe_2PSCrt-U2OXaAt0.roa (raw, json)
Hash identifier: 4jjkdoinuEat0S7FG1h2EzUvHw+Z/DSzGPjA7VlcQO8=
Subject key identifier: F8:16:FA:86:B6:D9:CD:07:BF:D8:F4:82:AE:DF:94:D8:E5:DA:02:DD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 83B23DF5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-Bb6hrbZzQe_2PSCrt-U2OXaAt0.roa
Signing time: Fri 13 May 2022 15:10:40 +0000
ROA not before: Fri 13 May 2022 15:10:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2209496565 (0x83b23df5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 13 15:10:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f816fa86b6d9cd07bfd8f482aedf94d8e5da02dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:30:3d:ba:71:9e:37:b9:6c:00:cb:94:69:c0:
31:6c:f6:fa:fc:b8:43:8a:a5:00:44:0d:2f:4e:40:
ee:2c:e8:e1:0a:46:07:b8:97:2c:ad:22:f0:41:c5:
ed:e8:45:ae:77:10:d2:29:8f:b7:7c:39:1b:0e:20:
05:32:a0:40:24:18:95:41:a4:a1:a7:35:44:ea:8f:
ca:7b:a9:65:12:1d:a3:15:67:8f:0b:f2:51:4e:b1:
8e:f0:8b:3f:39:3d:18:32:c0:f3:e1:3c:e3:71:11:
3a:74:69:14:09:04:c9:89:cb:e1:47:2f:09:de:de:
35:a8:4c:c2:ca:6c:d1:ed:83:bb:56:76:ef:9e:7a:
82:93:da:51:4f:7f:79:50:e6:29:7f:3f:8c:11:bd:
e7:db:c4:c5:8a:9f:2a:a0:73:b1:54:62:fd:f6:8a:
59:08:8f:cd:eb:90:19:c1:fe:12:27:6a:92:5b:67:
db:11:90:a6:1b:46:c7:b8:63:21:03:aa:30:62:94:
50:f7:0a:cc:ad:97:04:74:04:96:b8:c5:e4:94:db:
fe:74:22:d8:e4:a0:97:d3:8a:a7:d3:f3:00:0a:6b:
f6:12:c0:f0:92:a8:ae:37:98:41:de:01:32:0c:9f:
e9:ea:49:d3:b1:13:23:5d:9c:dd:72:60:65:70:a7:
30:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:16:FA:86:B6:D9:CD:07:BF:D8:F4:82:AE:DF:94:D8:E5:DA:02:DD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-Bb6hrbZzQe_2PSCrt-U2OXaAt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a1:21:76:33:07:f3:9e:19:c0:ac:c5:6f:8d:b6:b7:c5:10:a8:
b0:ad:0c:02:be:57:c2:bc:23:b0:97:29:78:cc:7e:75:c1:a4:
8d:27:2f:0c:82:b8:5f:58:82:7e:67:f6:95:42:7c:6b:2c:51:
e7:7b:a9:27:9e:75:a0:05:f4:bb:13:64:6c:cb:e3:db:70:27:
5f:f9:6d:d3:de:f9:00:79:bb:72:df:13:a6:2c:70:b2:f2:d0:
08:6a:c6:ad:22:03:36:4d:b8:50:84:5d:0f:c6:43:14:e2:0b:
48:68:2f:39:ba:1d:87:da:48:0e:2a:32:ba:64:65:55:de:64:
f9:99:0a:1f:d1:8a:d2:e3:00:04:2c:db:7e:c7:2e:62:23:1b:
d9:54:ff:d5:01:fe:d5:61:57:7e:29:04:de:f5:f9:d9:ce:be:
9a:f0:64:17:1a:31:1a:99:13:7b:53:26:eb:18:ff:14:3a:16:
f2:77:4c:ad:1f:79:e2:fb:5f:37:4a:cd:1f:00:a8:04:9d:f9:
e1:bd:a2:8b:87:e1:a1:a1:fa:49:e3:f4:28:24:ed:b0:09:f4:
c4:5c:1b:ec:1e:75:19:6d:35:e6:c9:91:b1:e8:9d:1e:6d:17:
91:94:cc:e1:b6:7a:ee:84:5b:ff:47:d8:1f:3a:f0:58:a8:97:
82:1c:82:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:06:11 2025 by rpki-client