Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6bruzf0Q_UjZuHotJ2hTICAroJQ.roa
File: 6bruzf0Q_UjZuHotJ2hTICAroJQ.roa (raw, json)
Hash identifier: Y/M1oFzjFT56q6Mr4gx4bYT29DKZcDwZ8Ni1/eCIIOg=
Subject key identifier: E9:BA:EE:CD:FD:10:FD:48:D9:B8:7A:2D:27:68:53:20:20:2B:A0:94
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018654FE3B531BC77C70687EA097DAE6AD85
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6bruzf0Q_UjZuHotJ2hTICAroJQ.roa
Signing time: Wed 15 Feb 2023 12:13:12 +0000
ROA not before: Wed 15 Feb 2023 12:13:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:54:fe:3b:53:1b:c7:7c:70:68:7e:a0:97:da:e6:ad:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 15 12:13:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9baeecdfd10fd48d9b87a2d27685320202ba094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7e:e2:a2:62:2b:b2:04:79:6a:f6:74:2c:b3:
e0:e4:4f:65:65:43:28:87:64:5d:8c:0c:bc:39:74:
42:42:e7:a9:83:94:3a:ef:9c:43:c6:d5:9c:14:3b:
2c:4e:cb:f9:a4:e1:88:27:20:8b:da:74:64:69:b1:
85:8c:67:94:cb:7b:f7:38:81:00:0e:e1:70:90:f5:
01:c0:67:88:e3:9a:21:6a:f8:db:d1:66:2a:ec:b4:
3d:f3:df:cb:47:25:47:fc:ff:79:e1:41:3f:47:66:
a2:50:2d:44:aa:54:a7:d4:95:29:2a:ae:59:50:d3:
69:3d:d4:e8:37:d6:e5:dd:29:b3:6a:9b:97:35:57:
b5:4a:84:c3:ba:0b:57:de:4c:89:65:d5:81:19:4f:
1f:e8:e6:42:18:e0:fd:be:78:7b:4a:e1:5c:6e:5c:
3f:75:53:e1:1b:f2:f5:a4:a0:76:4a:ef:a2:66:24:
81:72:5c:31:1a:4c:b0:97:14:97:ca:c8:2c:55:33:
74:97:dc:c5:2d:63:6c:74:98:17:93:0b:9a:4a:c1:
c8:db:06:31:31:65:fe:e1:d3:ca:04:34:24:62:24:
79:d3:84:1d:9d:6e:5d:94:fb:27:14:5c:14:dd:79:
f9:d7:f2:91:70:27:a1:c2:79:46:f9:c9:32:ee:78:
d1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:BA:EE:CD:FD:10:FD:48:D9:B8:7A:2D:27:68:53:20:20:2B:A0:94
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6bruzf0Q_UjZuHotJ2hTICAroJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9b:3a:77:6a:87:b6:dd:bf:c9:e6:fc:c1:4c:59:88:72:e9:ef:
69:a2:6e:28:85:ef:1f:a4:2f:80:bc:da:9c:2f:ec:b9:6c:91:
6d:00:af:d0:a6:38:aa:18:3f:9d:64:db:74:a3:56:28:84:53:
29:45:3f:44:90:4e:24:13:39:f9:78:13:ac:7e:c1:8e:64:17:
b6:d7:e0:06:f4:f5:40:93:68:5b:3a:eb:37:71:6a:9e:60:06:
c9:a9:c5:82:60:9f:43:df:04:ad:a0:97:b5:9e:1c:a8:d6:3c:
8c:5f:a4:40:fb:5d:16:12:81:04:67:43:5d:0e:6b:12:f0:fa:
f2:e0:bd:23:d8:dd:c8:13:d2:ae:a8:99:3f:bd:9a:f4:cc:d7:
96:3c:27:7c:c2:5d:1d:04:54:ad:76:bd:13:ac:b6:73:42:1b:
c6:34:75:cc:62:d9:99:15:75:f8:e9:c5:40:8d:81:1e:d4:41:
96:fd:fd:5a:40:02:5d:2b:04:5d:09:1d:ce:ad:f6:80:38:b1:
b5:8d:07:54:62:b5:0e:e3:da:f8:42:21:2e:27:2c:d9:69:57:
3e:ea:1e:82:01:ca:2e:b9:09:4b:a5:c3:a5:b9:27:17:b4:24:
6b:aa:14:a9:76:0f:9f:e8:e5:14:36:a2:da:a7:ce:75:6f:a2:
05:2d:6e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:11:40 2025 by rpki-client