Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/11BzqGUWT1SoNoFBbkQPlsDflgI.roa
File: 11BzqGUWT1SoNoFBbkQPlsDflgI.roa (raw, json)
Hash identifier: VBOskC22V+rA2MJTBR8Pyw291ynhGNLRwGF8APf0XMc=
Subject key identifier: D7:50:73:A8:65:16:4F:54:A8:36:81:41:6E:44:0F:96:C0:DF:96:02
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182F408F08614D95B35C616AF1B91A52D64
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/11BzqGUWT1SoNoFBbkQPlsDflgI.roa
Signing time: Wed 31 Aug 2022 13:13:22 +0000
ROA not before: Wed 31 Aug 2022 13:13:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f4:08:f0:86:14:d9:5b:35:c6:16:af:1b:91:a5:2d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 31 13:13:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d75073a865164f54a83681416e440f96c0df9602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:9e:4e:83:80:c2:46:79:6a:50:2b:66:f6:de:
af:8e:59:6b:a4:a4:29:3f:d7:d7:a6:9a:30:cc:f3:
49:9c:07:fd:05:a0:96:ad:34:a9:f1:3a:98:20:e6:
bb:05:54:01:13:f4:35:50:04:02:62:f5:c2:4a:32:
bf:52:7a:b4:d3:7a:15:a7:e9:88:98:d8:d0:8d:33:
3d:62:be:bb:b7:c0:2a:e2:c6:11:a1:25:b9:03:29:
93:bb:b4:a5:7d:79:01:f3:a5:f2:4c:8e:bf:89:14:
bb:6a:61:58:94:db:8f:98:1b:fc:43:f7:db:ec:48:
4a:74:12:6a:ec:1a:ca:68:c0:3a:df:c7:0b:74:2f:
55:bb:2b:f1:85:6d:28:12:98:89:a8:31:4f:29:5a:
bd:0c:db:c5:64:d3:89:ff:b1:85:85:9a:84:e5:56:
08:a5:1b:a7:ac:69:f0:3a:af:04:e4:d3:9e:aa:a5:
d3:a5:c4:64:d3:32:a9:a9:8d:48:0f:db:55:61:59:
39:3d:00:17:46:ae:c8:50:9e:bd:3a:44:42:1e:0a:
5b:5d:ad:4d:80:97:f8:32:9b:5b:75:c3:7e:b8:77:
80:7b:f3:4f:6f:85:f2:0c:5a:ed:c0:27:f0:b5:60:
0d:07:b3:cd:b2:ce:0b:be:f4:2e:ad:97:a0:a8:d2:
67:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:50:73:A8:65:16:4F:54:A8:36:81:41:6E:44:0F:96:C0:DF:96:02
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/11BzqGUWT1SoNoFBbkQPlsDflgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3f:d5:f6:8b:92:c2:09:6d:dd:b6:76:f2:84:4f:94:81:a6:a1:
26:83:59:4c:d6:c9:43:20:27:f3:39:c1:2d:9a:bd:24:70:47:
2d:bb:56:d6:5f:8a:e1:24:e5:8f:71:32:82:0b:60:e5:be:eb:
30:89:fa:fa:f9:76:6f:9b:dd:b6:90:dd:97:c9:26:19:a2:2d:
bb:0b:8d:e8:c2:fa:c6:08:55:97:1d:2b:73:95:66:97:18:47:
44:91:68:5e:a4:60:3e:57:85:b6:db:e9:a5:ca:a0:59:5a:31:
18:ac:ad:04:8f:e6:54:ca:86:75:9b:65:bb:e4:de:5f:91:0c:
41:62:74:6d:a4:13:04:e8:30:9a:30:2a:84:f5:90:ba:87:43:
b0:4b:15:eb:ba:fb:e4:a0:55:5a:1b:6e:31:35:cc:74:93:f8:
63:d9:80:a2:c7:15:0a:80:b1:40:22:2d:e6:56:18:9c:5b:9d:
e2:0a:30:e2:80:24:b8:ad:75:26:0e:6f:bf:e3:4b:c9:10:f8:
b8:16:ba:c8:c1:2d:c4:e7:15:00:ff:8c:85:ec:f9:6e:1c:89:
6b:92:ca:c2:2b:b9:8e:19:70:58:56:38:d5:d6:a2:f8:cf:b5:
9f:55:08:e4:2d:e7:b1:b5:01:89:13:ea:73:79:5e:76:58:d9:
f6:a8:ba:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 16:20:58 2025 by rpki-client