Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/B6ZK-_mP2obylekaLQgln9J8FF0.roa
File: B6ZK-_mP2obylekaLQgln9J8FF0.roa (raw, json)
Hash identifier: BZ6IetTeqsixAIIgDwiKQGpEQp+lR3sW0CZRxrn5tDY=
Subject key identifier: 07:A6:4A:FB:F9:8F:DA:86:F2:95:E9:1A:2D:08:25:9F:D2:7C:14:5D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01855722E095DD5FAC381601C730BDBA62CE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/B6ZK-_mP2obylekaLQgln9J8FF0.roa
Signing time: Wed 28 Dec 2022 05:09:41 +0000
ROA not before: Wed 28 Dec 2022 05:09:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:57:22:e0:95:dd:5f:ac:38:16:01:c7:30:bd:ba:62:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 28 05:09:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=07a64afbf98fda86f295e91a2d08259fd27c145d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3a:5d:8d:3a:f2:b5:58:6e:3e:82:6a:d0:06:
08:b2:03:8e:dd:84:e4:c6:43:61:f6:55:98:96:aa:
2d:4c:b9:f8:77:fe:d3:a6:7b:c2:f3:f6:59:84:4b:
91:47:36:8b:3b:83:39:27:2a:2f:49:ea:02:90:05:
21:ad:37:a5:a7:45:16:52:f6:5c:8e:6f:93:8a:71:
08:b4:a2:39:0d:84:30:be:c1:ef:15:7e:4f:f3:76:
96:13:92:0f:8f:7f:ec:0a:67:70:00:10:ae:4b:7c:
14:a4:3a:0f:17:32:e6:64:68:48:ed:d0:d6:b4:3f:
4d:5d:85:5a:e0:a3:bf:b6:21:a6:1d:1f:21:25:ac:
a9:93:88:9c:5a:be:c5:0e:0f:d5:f9:a5:39:42:69:
1a:79:33:a8:b8:bf:97:89:d2:f2:bf:5b:56:b1:0a:
d5:8b:09:f7:b5:04:a7:9a:6c:84:a8:90:92:74:3c:
9e:dc:c3:4b:be:8d:69:75:37:1a:9f:38:dc:81:25:
ee:77:a0:d9:ba:a0:31:82:2a:fc:00:dc:98:15:16:
d8:93:7e:37:68:f0:ec:11:fc:e1:3f:c1:ac:59:fa:
63:0e:af:fd:1c:44:7a:04:93:c2:a9:87:11:79:42:
e4:89:98:83:15:01:52:d5:a3:18:44:68:1b:ef:1b:
23:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A6:4A:FB:F9:8F:DA:86:F2:95:E9:1A:2D:08:25:9F:D2:7C:14:5D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/B6ZK-_mP2obylekaLQgln9J8FF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
16:ff:5e:61:cb:5a:a3:c1:75:d4:50:ea:4a:46:b2:58:be:53:
c5:eb:f5:bd:da:1a:35:de:29:b9:31:df:d6:1d:62:94:07:5f:
18:5f:49:dc:1a:18:13:d2:fb:d8:aa:7d:11:0b:2a:d4:12:0a:
65:ab:8f:e1:71:13:5c:72:02:28:d5:ee:95:dd:1e:78:9e:b0:
8c:60:5d:c2:96:f0:0f:fc:63:ba:aa:83:03:f7:08:19:66:17:
a5:ee:29:23:bb:87:7b:a8:39:4a:91:68:02:c6:ae:c3:70:c5:
f2:60:3c:75:d2:33:e6:88:a2:b3:91:65:cb:95:94:fa:62:12:
b1:ee:91:07:cf:1d:6b:c4:b6:66:89:0c:f1:4d:f0:9d:1b:89:
fa:af:aa:cf:97:86:08:9d:32:71:0c:9a:3d:d0:bb:db:09:ea:
e8:cd:fc:f8:76:ed:e8:41:1f:8f:2b:34:99:6f:94:19:21:b6:
d7:54:00:6e:7a:02:2d:75:53:6c:fc:ca:5d:b9:87:2f:eb:20:
ab:fd:ec:96:b0:d6:e4:60:05:52:31:12:2d:bc:b6:52:53:04:
93:c5:a1:45:fd:b5:e8:32:cd:36:47:1c:af:f6:25:fe:36:78:
69:7a:62:95:bf:7a:a2:e3:4b:3d:09:39:30:6d:a2:0c:99:de:
da:f5:ca:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:57:04 2025 by rpki-client