Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/27RJyT-A6hm5utVXO53116Hx69g.roa
File: 27RJyT-A6hm5utVXO53116Hx69g.roa (raw, json)
Hash identifier: vm4ETm8vbgAip/M2264PkuKhLiEiXyZH0twKfOvI8oA=
Subject key identifier: DB:B4:49:C9:3F:80:EA:19:B9:BA:D5:57:3B:9D:F5:D7:A1:F1:EB:D8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6B67754C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/27RJyT-A6hm5utVXO53116Hx69g.roa
Signing time: Thu 17 Feb 2022 15:16:21 +0000
ROA not before: Thu 17 Feb 2022 15:16:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1801942348 (0x6b67754c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 17 15:16:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dbb449c93f80ea19b9bad5573b9df5d7a1f1ebd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:73:68:bc:02:cf:33:d4:1d:ea:c5:8a:16:f7:
bd:68:fa:0f:58:1b:c4:9f:02:fc:c1:51:e9:f0:f9:
7d:9f:61:94:e7:3e:59:18:ff:b0:60:2a:7c:53:31:
33:61:53:7e:79:c4:f6:a9:dc:36:fe:f2:f5:fa:c1:
48:9c:d1:22:f7:d5:8c:34:b3:91:fb:9b:0b:fd:a3:
11:8d:99:b9:b2:82:66:ab:c3:6a:eb:5c:ed:e3:ba:
e8:9f:74:aa:d3:dd:a3:2d:3a:c5:5a:04:aa:83:50:
bb:5f:62:97:2a:da:e9:dc:b3:df:6a:10:29:83:b4:
67:1d:cf:cb:f8:b4:95:58:b0:d5:26:fb:c8:a0:30:
a4:f6:ce:73:f4:8d:a3:99:43:48:11:3d:83:b5:01:
a4:08:11:4d:f3:6f:fc:bc:a7:cc:5d:43:fc:bc:5e:
14:c1:b6:9d:a1:cd:18:77:8a:ff:a6:bc:6b:ea:65:
c6:02:dd:b1:a4:04:62:03:23:f9:f4:28:5f:0c:df:
d7:24:9c:60:72:ca:4e:e1:d7:c7:a3:32:cc:f4:95:
16:fc:b4:48:b6:ca:8b:46:4f:6b:73:5a:01:17:66:
47:c3:fb:94:ad:25:54:36:e1:2d:5c:10:3c:1a:e0:
08:d7:94:53:1b:65:ee:10:41:a3:f5:a1:5a:ad:7a:
0d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B4:49:C9:3F:80:EA:19:B9:BA:D5:57:3B:9D:F5:D7:A1:F1:EB:D8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/27RJyT-A6hm5utVXO53116Hx69g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
05:90:ee:30:4c:38:bd:a2:e1:8d:89:e8:79:0d:75:14:bd:75:
8f:f8:30:29:2d:08:0b:20:36:67:b2:d1:d6:f8:76:2c:bf:b4:
cf:17:66:3b:f1:95:fd:03:fa:1b:32:b9:59:89:6e:c1:68:ae:
25:5d:29:23:19:f6:37:c4:59:c4:30:f7:b2:ec:5f:49:84:11:
05:1a:e1:bf:85:c3:b3:63:a4:3b:f4:06:9b:e4:9b:b9:c2:70:
46:7b:cb:7a:4e:d8:6e:59:99:43:19:c7:33:ad:86:05:16:67:
ec:c8:96:40:17:5e:94:2d:87:b1:fc:2a:22:f5:84:5c:2c:5a:
7f:19:81:b6:3b:b5:fc:3c:7e:0a:62:04:17:ea:9a:82:ac:d4:
f1:db:a3:e3:bb:89:43:66:7a:e2:99:48:f6:87:11:6d:48:e8:
69:14:d5:af:5c:b2:ff:14:2d:f7:31:45:85:45:96:49:5d:1f:
22:40:1f:86:03:02:b5:89:06:9d:e5:f8:49:39:b8:57:53:12:
d2:05:b4:a0:dc:9e:8a:4a:56:99:7f:84:b5:07:90:73:f0:7d:
d4:d9:37:e2:01:da:23:ba:d6:1d:b7:56:9d:e1:c3:28:b1:c6:
1c:c7:e7:55:1f:aa:99:f5:61:af:aa:7a:d6:14:aa:11:85:c6:
ee:69:12:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 01:31:15 2025 by rpki-client