Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BAn9OSEgRKMSmzWZU3loDBUZtgw.roa
File: BAn9OSEgRKMSmzWZU3loDBUZtgw.roa (raw, json)
Hash identifier: nE8j6YOYRTv+J8rzPMAP55VuP6VnNN+MzDJvLbzJmV4=
Subject key identifier: 04:09:FD:39:21:20:44:A3:12:9B:35:99:53:79:68:0C:15:19:B6:0C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01865A5B2C0AC1288FAF33F70D41FF49791F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BAn9OSEgRKMSmzWZU3loDBUZtgw.roa
Signing time: Thu 16 Feb 2023 13:12:49 +0000
ROA not before: Thu 16 Feb 2023 13:12:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5a:5b:2c:0a:c1:28:8f:af:33:f7:0d:41:ff:49:79:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 16 13:12:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0409fd39212044a3129b35995379680c1519b60c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1c:b0:d5:2c:29:52:5c:54:e8:1a:21:7e:8a:
d8:29:94:66:4b:64:6a:ef:43:42:17:13:13:8a:02:
1d:be:06:f3:be:a2:67:eb:50:c9:59:a3:d5:94:1d:
33:1f:e8:53:5c:96:08:70:25:15:42:f9:8e:ed:1b:
99:1c:23:02:cf:43:36:cd:a7:c5:3d:ad:03:0c:7c:
45:3a:5b:2a:f3:30:cd:43:d7:08:e7:2e:24:71:c0:
b2:85:91:9e:1f:a5:2f:57:33:8a:9a:f1:b2:ac:b4:
47:66:60:ad:3f:63:80:be:89:d1:10:6f:04:01:97:
45:96:5d:4b:e4:b8:7f:34:cf:c5:20:86:78:e9:ef:
04:c7:6b:91:eb:a5:91:1f:e6:28:b0:cd:5b:f1:35:
81:e8:f6:17:62:4d:03:bd:b5:cc:d9:1e:22:17:8d:
9a:b6:7d:c7:75:98:c5:ed:4c:b1:56:89:8d:dd:bd:
8e:d8:e8:be:f3:60:38:d5:10:17:f8:59:81:ec:eb:
74:6e:49:82:81:a4:11:6e:8d:92:03:ad:a2:76:3e:
22:33:de:5a:99:89:54:1c:49:62:48:ea:00:55:8d:
e2:72:3c:93:af:8c:a8:3f:43:38:f0:92:52:f9:f8:
3f:21:21:f0:78:0f:7c:05:e0:a6:8f:75:7d:ce:b5:
98:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:09:FD:39:21:20:44:A3:12:9B:35:99:53:79:68:0C:15:19:B6:0C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BAn9OSEgRKMSmzWZU3loDBUZtgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
04:32:3e:38:55:76:59:13:07:50:04:52:3d:27:0f:9c:44:90:
26:35:3d:c0:da:82:91:93:0f:45:ea:9d:08:9d:42:81:99:6e:
27:96:d6:bb:d1:ed:94:a4:db:8b:31:2e:31:fc:44:56:7f:83:
78:83:7b:c9:9d:d4:a9:e7:a1:58:dd:9c:38:0b:8a:1d:15:9c:
a6:28:ae:7b:23:65:41:67:df:cc:ed:d4:dc:db:78:0c:e5:5a:
6e:85:e9:a2:bc:69:dc:b8:94:40:ee:c4:95:28:51:fb:79:b5:
38:44:e0:32:ae:8b:b5:c9:a2:a8:76:cb:eb:6e:67:9c:20:3c:
d3:3e:23:cd:22:63:22:6d:ca:05:bb:ef:bc:6a:b9:26:b1:9e:
89:68:87:f8:a8:46:da:19:2e:7a:b7:71:12:26:aa:26:76:77:
76:f7:e4:b3:19:bc:82:1f:bb:95:88:cb:ee:63:8d:00:0e:7a:
9f:1a:49:2e:e7:e6:04:1f:c8:85:4c:f4:1d:ec:fb:58:50:ff:
73:88:7c:29:e3:fe:03:d5:37:5a:a8:5b:41:a2:4b:89:fa:09:
c4:40:39:36:7a:90:98:4e:7e:9a:ae:82:d1:76:c8:8f:1f:a4:
56:c4:1e:38:99:9b:f5:b3:26:86:24:2b:0d:58:3c:74:0c:54:
4f:1e:79:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:27:27 2025 by rpki-client