Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BbezpVX_AeBSdB7QX8_AuxHVc30.roa
File: BbezpVX_AeBSdB7QX8_AuxHVc30.roa (raw, json)
Hash identifier: PuaSZo7Gr/aUzwpgRBnSTYvw+Uy+jOTkOE9/NV9npgA=
Subject key identifier: 05:B7:B3:A5:55:FF:01:E0:52:74:1E:D0:5F:CF:C0:BB:11:D5:73:7D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185F4DAA63B523C290F5FEB09E1B3BCF9E8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BbezpVX_AeBSdB7QX8_AuxHVc30.roa
Signing time: Fri 27 Jan 2023 20:10:48 +0000
ROA not before: Fri 27 Jan 2023 20:10:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f4:da:a6:3b:52:3c:29:0f:5f:eb:09:e1:b3:bc:f9:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 27 20:10:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=05b7b3a555ff01e052741ed05fcfc0bb11d5737d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7a:1c:48:09:44:65:be:88:9c:b8:7c:ab:23:
8e:bc:cd:28:c9:1a:11:da:46:b9:5c:86:59:4f:eb:
ee:c2:8f:8b:37:49:d5:cc:77:3e:4b:17:d7:c5:40:
92:42:db:c3:c0:d5:ed:22:a1:2b:aa:fb:97:db:e1:
c9:d8:3c:eb:41:35:e4:38:11:b8:16:5c:9e:1c:6f:
d8:de:6c:1c:a2:e6:ea:2a:50:fe:f3:fb:96:31:f3:
65:cb:f7:c4:13:1f:4b:65:28:1e:65:e4:52:d9:7d:
9f:13:76:dc:2c:1a:cb:09:a0:c5:0c:42:de:9e:3b:
91:ec:3f:0e:82:a1:30:31:ff:7b:49:46:99:08:7a:
de:83:4c:bf:b0:64:a8:a4:7d:6b:30:57:65:dc:53:
de:d8:bd:6c:3d:c5:c3:6b:e3:90:d6:88:ba:8b:0e:
6d:c4:fc:de:c7:dd:04:90:ff:12:33:45:25:61:9c:
72:8d:03:c7:df:2f:10:1e:52:24:f8:c6:85:7e:4a:
d7:45:7b:11:e8:71:5a:f6:bd:7f:eb:6a:c8:f8:d7:
59:46:f5:3b:e0:45:40:89:95:d4:01:be:1f:f8:29:
ab:85:61:d8:0b:35:f1:b2:d2:40:29:7b:1b:ba:29:
b3:1a:98:d5:6f:cb:f9:a1:8a:c4:61:9f:3e:25:a6:
4e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:B7:B3:A5:55:FF:01:E0:52:74:1E:D0:5F:CF:C0:BB:11:D5:73:7D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BbezpVX_AeBSdB7QX8_AuxHVc30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5d:8c:29:fa:76:b0:35:a6:18:48:b2:30:92:be:1f:c6:a3:a0:
ef:e5:64:82:95:90:1c:ef:ca:ba:45:e3:44:25:8e:a9:85:34:
a3:1f:65:ca:ac:9e:10:76:a2:e1:e5:50:53:8c:45:e2:41:26:
c6:e7:07:01:70:5f:7c:3b:49:0f:50:1e:c7:2d:bc:a3:e6:d3:
b8:38:d2:1b:91:b2:bf:bb:c7:b6:31:11:04:a3:25:85:8a:11:
07:ba:bf:0a:af:46:91:01:b4:a5:93:5c:ce:4f:8d:42:5a:a9:
b6:1f:1f:18:4d:4f:c3:9b:66:e0:4e:c0:4b:11:cf:80:a5:0a:
79:52:9e:22:a1:5f:cd:dd:18:f8:ea:a4:8b:8e:da:b2:02:7d:
be:2b:00:0c:0a:48:f9:d4:9e:c1:38:37:1f:d5:7d:d8:1e:a1:
b9:cd:78:ea:82:93:af:0c:39:6a:c6:ef:7b:b6:c7:ea:1d:bb:
c7:ae:06:9f:f9:2d:5c:99:a6:98:8a:c7:66:d3:d8:a8:2c:ae:
7d:53:21:38:a2:bf:4d:d8:bb:39:dc:6f:51:17:bd:ee:a0:84:
3b:37:f0:e9:46:b9:9a:3e:7c:9f:20:8e:98:80:94:85:13:a4:
5d:15:5d:00:4e:d3:b4:2d:f5:5e:b9:a8:e7:c2:4d:92:b7:4c:
b7:40:42:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:48:58 2025 by rpki-client