Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-Bie9SBw_f1TiKt10Ji2-xWBa4w.roa
File: 1-Bie9SBw_f1TiKt10Ji2-xWBa4w.roa (raw, json)
Hash identifier: CVQu5Ec0tet5PnzUnmcg7S+jw6ieJWiMMTVA+/EExvA=
Subject key identifier: F8:18:9E:F5:20:70:FD:FD:53:88:AB:75:D0:98:B6:FB:15:81:6B:8C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7558FAA4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-Bie9SBw_f1TiKt10Ji2-xWBa4w.roa
Signing time: Thu 24 Mar 2022 16:10:54 +0000
ROA not before: Thu 24 Mar 2022 16:10:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1968765604 (0x7558faa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 24 16:10:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f8189ef52070fdfd5388ab75d098b6fb15816b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bc:31:70:8d:cf:3a:ed:1c:3e:5c:f0:4b:79:
1c:cc:60:ef:e8:f2:18:c5:21:0d:54:ef:5a:40:d3:
20:e9:4d:39:dd:86:02:d6:75:51:7e:28:d3:80:13:
ea:6e:4e:3d:e0:da:58:5c:0a:ec:d5:4e:80:b6:12:
30:25:be:49:ef:f2:5d:3f:5a:ba:fd:df:d9:4b:07:
eb:65:6d:a5:b9:ae:a9:61:75:e1:21:73:93:09:c1:
56:5d:ba:cc:71:7f:f6:d1:7c:62:3f:18:54:14:07:
fb:8e:00:40:a6:3a:6f:ad:1d:56:ac:41:49:84:ec:
59:e2:ca:ba:af:80:f8:29:1e:ab:2e:40:e4:53:3f:
7f:b3:f5:e2:0a:ff:7c:ad:35:fa:82:31:47:5b:fb:
73:4d:ad:74:c5:73:b8:48:2b:e3:e9:1f:6e:9b:a8:
7a:7f:88:03:f8:88:f0:1c:df:87:84:f4:3c:ce:6c:
e2:ce:bc:8f:c5:72:72:f6:04:84:60:bf:91:a4:03:
d9:1d:25:74:55:ce:ba:a1:4d:fe:3a:0c:44:e3:f7:
b7:61:ac:5f:b8:b5:47:1f:e7:fe:25:52:19:91:fe:
21:11:fb:ce:56:db:4a:89:09:c4:75:72:f4:51:5f:
7c:a3:e9:8e:7d:85:62:1f:27:f5:bd:32:50:45:2f:
65:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:18:9E:F5:20:70:FD:FD:53:88:AB:75:D0:98:B6:FB:15:81:6B:8C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-Bie9SBw_f1TiKt10Ji2-xWBa4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
12:47:7a:c3:69:95:bc:ce:5d:46:fc:00:27:79:98:b6:77:39:
b3:bf:27:e1:9d:e7:61:96:30:5b:a9:19:1f:c6:0f:3d:78:1f:
75:26:85:54:11:c5:dd:ad:93:7c:d4:bf:2d:95:50:09:ce:d6:
9a:20:f7:97:83:80:a1:3f:c6:cc:73:47:d3:55:12:c6:10:cd:
e9:15:5a:59:c8:63:a1:41:c2:0e:4c:7d:87:69:78:8e:92:dd:
57:fc:dd:7d:30:5a:fe:e6:65:29:2a:0d:18:a9:34:cd:6b:ba:
ef:aa:20:4b:5f:2e:5f:4a:8e:aa:a4:53:ad:bf:a0:b3:b7:90:
7c:ec:28:1f:b9:a8:3c:00:8f:33:52:11:f7:db:c0:e6:6c:4a:
8a:73:5d:5e:e5:6b:a2:99:27:5c:27:ad:34:f5:24:fe:32:a6:
66:27:c9:b0:fe:a9:2d:4d:40:2b:d5:3a:5b:31:e9:eb:3a:f7:
0a:2e:7c:3d:0d:7d:93:25:a8:2f:1f:38:7f:e6:c6:63:e0:fc:
20:2c:49:60:81:bf:96:66:f4:de:c0:75:ed:91:b5:39:04:1c:
cc:51:1d:92:2d:01:b6:1c:69:c3:16:bf:ae:4d:fd:4d:8e:84:
e6:40:5b:9d:e9:ce:e0:b9:db:8d:56:54:53:a3:7f:6f:fa:9e:
d3:02:62:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:00:14 2025 by rpki-client