Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BS5Vxu0o03Uem8VuBH-MPWmIg-w.roa
File: BS5Vxu0o03Uem8VuBH-MPWmIg-w.roa (raw, json)
Hash identifier: B5D/tfSOhqpLYs9Fv8duntC92uN0EUPv2ZSnOvixoac=
Subject key identifier: 05:2E:55:C6:ED:28:D3:75:1E:9B:C5:6E:04:7F:8C:3D:69:88:83:EC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185131D6A7B7BADA22030DEF9529BE7F421
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BS5Vxu0o03Uem8VuBH-MPWmIg-w.roa
Signing time: Thu 15 Dec 2022 00:09:33 +0000
ROA not before: Thu 15 Dec 2022 00:09:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:13:1d:6a:7b:7b:ad:a2:20:30:de:f9:52:9b:e7:f4:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 15 00:09:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=052e55c6ed28d3751e9bc56e047f8c3d698883ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:76:46:b4:d3:89:e4:13:ba:46:f4:80:96:09:
95:09:47:42:f0:3e:a0:6e:4c:10:84:2c:a1:cb:c1:
65:c3:54:35:a8:a4:71:22:c1:35:6f:ad:e3:26:ec:
f4:ef:8b:bf:d0:59:f0:b7:93:42:93:c4:39:3a:42:
f4:86:84:be:44:b4:37:0d:5a:8d:55:b6:b4:d6:0c:
b7:6a:e9:3a:dc:b3:ac:a4:16:24:71:8a:39:b2:13:
b2:30:f8:eb:01:7c:d2:8e:96:0a:14:1d:85:f8:3f:
23:4f:aa:77:ba:8f:3e:ea:74:e3:08:a6:73:8b:14:
f5:2c:e8:cf:b0:0a:9c:10:7b:6b:e7:98:c3:e4:f2:
13:92:01:c2:c4:ea:fd:bc:d3:68:59:03:44:2e:c7:
89:bd:92:1c:97:b5:f0:64:11:75:fb:9c:40:d7:b7:
e1:fd:8c:ae:f0:d6:98:18:2b:e8:c0:64:f7:1a:af:
01:15:b5:cf:ed:ab:c1:c8:e5:11:78:f4:43:0c:ce:
11:7c:43:36:5c:c2:f7:fd:df:77:a4:f4:91:67:03:
41:df:d6:7d:2b:d1:27:01:e0:b5:b3:17:fb:7e:66:
1f:80:68:0c:a0:c9:dd:34:0d:d0:cc:f5:d8:ef:13:
b6:37:66:6f:1e:8b:7e:65:0c:f6:7b:e5:3e:84:63:
ac:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:2E:55:C6:ED:28:D3:75:1E:9B:C5:6E:04:7F:8C:3D:69:88:83:EC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BS5Vxu0o03Uem8VuBH-MPWmIg-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
54:68:00:a9:84:f7:fa:24:27:54:6a:af:9f:88:fd:a5:1d:eb:
c9:2f:48:93:2d:b9:53:79:f0:24:86:3d:78:6a:a1:c8:20:ac:
cf:dc:32:6d:f4:16:23:0a:60:b0:f9:ac:10:35:28:c8:6c:85:
d0:a6:b8:06:bf:3f:65:d5:b8:ab:88:f1:33:bc:67:f6:05:f7:
29:0d:54:91:f4:ca:43:b7:34:f1:fb:e1:a3:22:8e:cb:c9:c0:
f2:f3:17:7c:71:7b:0a:e0:13:40:ed:8f:4d:ad:5a:bd:a0:3d:
71:95:32:e6:89:8b:ec:92:b4:a3:b1:6e:1c:a7:79:ad:c1:89:
4d:65:b8:17:3b:dd:e4:23:2e:23:aa:41:64:32:b9:b8:5c:12:
7c:ea:58:35:ca:22:43:53:60:c5:61:cc:be:c9:d2:81:e1:62:
c1:b2:26:33:d9:0e:84:dc:7a:f8:93:d9:27:bb:ca:f4:3e:5e:
a9:d6:dd:52:78:65:85:d6:ed:88:68:84:8c:ab:c5:00:bc:a8:
c4:20:9e:cf:59:2a:a1:cf:72:2c:6f:4c:23:4c:31:3b:82:ee:
e7:e8:8c:3e:fd:98:a5:b7:a4:b7:a8:d9:5a:fd:c0:db:a8:b0:
a0:41:ed:67:02:6d:da:24:43:89:8a:c0:1c:a7:75:13:35:84:
4f:d3:09:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:49:16 2025 by rpki-client