Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CnObBz0AsU6Bqcn8g_ffpShyBak.roa
File: CnObBz0AsU6Bqcn8g_ffpShyBak.roa (raw, json)
Hash identifier: wugKxr1JUY9b4Nuv3FMz5UEy0RJPVU9tFL9/55/ja9U=
Subject key identifier: 0A:73:9B:07:3D:00:B1:4E:81:A9:C9:FC:83:F7:DF:A5:28:72:05:A9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8B04045B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CnObBz0AsU6Bqcn8g_ffpShyBak.roa
Signing time: Wed 08 Jun 2022 14:06:02 +0000
ROA not before: Wed 08 Jun 2022 14:06:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:43a2:5e02/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2332296283 (0x8b04045b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 8 14:06:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a739b073d00b14e81a9c9fc83f7dfa5287205a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:dd:95:00:8b:eb:fe:67:ff:b0:2d:9a:70:05:
2a:77:74:b2:38:e2:2b:82:70:e0:e7:b4:d5:9f:f7:
7e:a4:aa:7c:33:46:be:fc:16:8e:6c:ec:df:b3:5d:
67:6b:e5:42:d0:96:c5:ea:96:50:6f:51:3c:2a:39:
c9:e7:be:07:ba:ff:f9:d7:71:df:b4:f3:29:6b:c5:
21:19:1c:49:76:26:35:bb:55:3e:fa:fd:3c:8e:9b:
2f:b5:64:d2:8f:d2:77:24:f5:51:65:42:eb:47:c7:
18:15:08:f6:dc:42:50:16:e0:62:92:77:90:e5:a9:
91:de:5b:18:23:64:39:bf:35:cd:57:7b:c8:cb:67:
85:4c:09:2f:a6:25:e6:da:88:4d:ef:9b:ee:f1:92:
4c:fd:4a:bb:5a:d5:57:26:ec:03:64:21:fb:24:c3:
cc:67:0f:ed:8b:28:69:93:00:21:9f:20:74:18:07:
9f:2f:be:78:ea:07:c4:ea:55:fe:31:c2:3e:1e:87:
05:40:66:0d:ed:c2:e4:da:ab:4c:39:34:ff:d5:d2:
1a:1a:50:28:57:e0:27:b6:76:b7:05:c9:d4:a6:8d:
3b:9d:42:59:02:3b:1d:f0:20:93:42:3d:96:5d:05:
dc:28:2a:19:68:5a:cc:e1:7f:7e:cf:18:15:97:f3:
72:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:73:9B:07:3D:00:B1:4E:81:A9:C9:FC:83:F7:DF:A5:28:72:05:A9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CnObBz0AsU6Bqcn8g_ffpShyBak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:ff:35:12:e7:0b:ba:c8:95:3f:c8:d7:36:7b:b4:c1:d7:38:
42:d1:de:09:8b:07:ed:56:aa:d4:0f:9c:c8:fd:ca:e0:93:2c:
c0:dc:ba:e8:9a:ae:a3:7a:84:79:8d:bd:69:7a:00:de:24:da:
4d:d6:a7:8f:76:91:5f:79:a7:ce:26:9a:1f:15:9c:e7:9b:4c:
31:c7:26:78:96:3e:37:42:df:8b:97:aa:11:e6:e5:9c:f0:db:
45:11:d4:ee:1d:27:e8:16:f3:03:61:3c:69:8e:cb:ec:bc:e6:
6c:ae:52:f9:26:bc:c7:7b:5b:39:90:6b:2a:60:15:c9:6e:66:
05:53:67:13:f5:ec:26:eb:13:da:e7:63:1e:c2:e0:87:76:7a:
a9:a2:7a:4d:2f:72:02:d9:92:58:3d:6e:f4:94:9e:03:79:ef:
87:1a:77:cb:e6:c3:83:36:de:f9:6c:55:a8:ee:69:ea:b8:8d:
99:51:f2:e1:a5:db:04:1c:ca:f7:8f:33:b0:6e:3b:c0:ae:81:
ed:c6:0e:56:e0:cd:ed:3b:6e:9f:78:d2:7f:f4:34:3b:b0:0e:
04:8a:bf:57:f3:b8:cf:c7:d9:5a:ab:ca:63:07:fe:81:c6:c4:
13:c3:9a:fb:b0:33:5d:de:1a:4c:2b:3b:8b:b8:b3:8a:a0:be:
97:3d:1b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:29:13 2025 by rpki-client