Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2BzHD1a-qwtWbyiObjwb7PKHzHg.roa
File: 2BzHD1a-qwtWbyiObjwb7PKHzHg.roa (raw, json)
Hash identifier: xZxZc52Sal/qrB8U0CPxfthS9mw5tItKhaFqoBUbczI=
Subject key identifier: D8:1C:C7:0F:56:BE:AB:0B:56:6F:28:8E:6E:3C:1B:EC:F2:87:CC:78
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01840F45EE0DBBA989468978EF410E437FA3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2BzHD1a-qwtWbyiObjwb7PKHzHg.roa
Signing time: Tue 25 Oct 2022 13:12:31 +0000
ROA not before: Tue 25 Oct 2022 13:12:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0f:45:ee:0d:bb:a9:89:46:89:78:ef:41:0e:43:7f:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 25 13:12:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d81cc70f56beab0b566f288e6e3c1becf287cc78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d1:17:3b:c9:ad:d3:00:12:85:83:31:3d:12:
d8:e5:c6:c2:08:d4:2f:68:99:c0:fe:2d:9a:69:2d:
bc:73:ac:c7:13:e0:01:e9:06:c2:f5:52:cf:1a:43:
70:2f:ce:36:d0:f9:6f:75:52:d3:72:78:1c:82:a3:
7f:e8:ab:b0:41:fe:7e:a9:ff:84:30:36:c7:ad:26:
bd:b4:56:cf:c1:d6:ed:18:95:78:78:bf:56:e3:89:
72:2c:ab:e4:4a:bd:19:a4:08:89:40:af:f7:1e:3d:
ef:0c:1c:03:0c:bc:e0:d4:e7:96:e4:47:f8:b5:60:
ed:96:04:02:b7:f4:ec:8c:1b:77:9d:98:3a:00:4b:
fe:64:99:f6:45:0c:a6:6d:dc:bf:4d:b6:82:71:17:
5a:41:d6:af:85:f1:9d:a6:59:68:90:3b:0b:87:53:
16:e9:6b:ec:c4:0f:7f:96:96:ab:fd:27:27:2f:5d:
1b:05:83:25:a9:a1:47:5b:e9:f2:a7:e4:ae:a9:08:
06:d8:cd:11:a5:d2:29:fb:df:18:c6:86:4f:43:ba:
bc:db:b7:b0:71:fb:f4:02:36:9c:ab:3e:84:a6:2f:
e3:ac:9a:ba:b8:de:b2:f3:41:d1:ea:51:19:d5:98:
e2:06:ca:84:87:9e:67:0e:44:af:64:0a:c4:31:0c:
55:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:1C:C7:0F:56:BE:AB:0B:56:6F:28:8E:6E:3C:1B:EC:F2:87:CC:78
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2BzHD1a-qwtWbyiObjwb7PKHzHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2f:c3:58:8f:e1:39:90:fa:16:dd:b3:8b:b9:1a:b1:92:8b:0a:
f5:9e:78:5f:a3:9d:e5:ca:93:17:8d:dc:85:28:04:dc:b3:d0:
dc:48:69:22:eb:85:6b:0d:f2:81:3e:ba:98:56:fe:0e:e1:15:
e8:44:32:11:f8:d4:39:b7:4e:26:b6:11:d9:d9:d4:20:7a:b0:
5c:27:ab:1c:94:38:22:00:18:c4:9d:49:91:d2:8b:37:a0:d9:
84:0a:a9:0f:d2:84:39:76:b0:7e:34:dd:da:1e:25:83:d9:f0:
a7:3b:e9:de:4d:d4:0b:73:7a:b8:bf:dc:d8:48:47:3a:68:d6:
26:51:84:9a:eb:fb:3a:0a:df:ce:79:8d:6f:4d:1d:c5:dd:ea:
53:cf:85:73:d8:c4:17:09:d6:50:e0:e8:62:11:79:4d:4c:c3:
e2:39:1d:5c:a2:df:bc:bb:ef:13:5b:db:67:0d:22:ae:cf:a9:
42:f2:3a:cc:48:93:5f:b1:3f:93:1b:c0:bf:6e:00:0a:bb:5b:
c4:ff:d7:90:24:46:fe:00:e6:2e:05:e3:45:9d:d7:85:90:9a:
c7:99:19:f3:9f:1a:48:f2:c2:a4:80:cd:ea:e9:cb:27:0e:7f:
65:ca:d5:75:2f:7c:85:df:e3:74:ac:d3:65:94:dd:f5:35:3e:
97:41:87:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:00:09 2025 by rpki-client