Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SBOsKP5HUKoROqwUIsyiJGaQBj8.roa
File: SBOsKP5HUKoROqwUIsyiJGaQBj8.roa (raw, json)
Hash identifier: Pwd5KxHxchvQEThGA8Qvhkwd2HLW+euYBe6wNtM2y9k=
Subject key identifier: 48:13:AC:28:FE:47:50:AA:11:3A:AC:14:22:CC:A2:24:66:90:06:3F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181FC9DD259B8702A21FC27B7027FB44AAF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SBOsKP5HUKoROqwUIsyiJGaQBj8.roa
Signing time: Thu 14 Jul 2022 12:10:10 +0000
ROA not before: Thu 14 Jul 2022 12:10:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:fc:9d:d2:59:b8:70:2a:21:fc:27:b7:02:7f:b4:4a:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 14 12:10:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4813ac28fe4750aa113aac1422cca2246690063f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:40:1d:12:78:cc:43:ad:09:f3:9e:61:8b:ab:
81:08:ea:aa:85:aa:06:6b:1f:99:ca:d4:70:06:de:
db:50:76:aa:67:b7:d9:5b:84:dd:38:ad:36:18:1c:
40:c6:3b:dc:f8:8a:36:36:ca:56:a3:3b:0c:af:0f:
6a:97:ce:79:d6:aa:bf:f0:00:c4:08:40:fc:15:19:
f1:10:b6:61:d2:0f:c5:c8:f3:5b:cf:b0:e2:5e:e5:
7e:5f:c8:17:13:c9:ec:b9:6d:d1:8e:5f:dc:9f:31:
3d:eb:e0:be:23:26:97:5a:98:1e:2a:cf:7f:52:b5:
e9:72:37:c1:4e:53:54:6a:63:c6:0e:b3:ec:90:70:
8a:ba:09:3f:c8:b1:18:66:8a:80:c5:eb:f6:b8:7b:
4b:ca:32:c2:57:fd:55:dc:67:85:ed:ed:20:ed:95:
23:0d:d7:c5:72:06:4b:de:e9:a8:8a:ae:30:53:32:
f1:43:64:7a:d9:50:4d:69:ad:23:9a:2c:9d:91:bf:
9e:57:9f:6d:e1:ad:78:33:fe:a2:77:37:a4:7c:18:
e6:41:27:bb:7b:2a:a8:48:bd:38:46:8a:37:b9:14:
6a:79:60:09:19:6f:1d:b5:29:9c:f3:98:e1:25:fc:
0d:3b:2c:8b:a3:e6:ca:f3:ea:d3:59:da:d9:b0:dd:
9d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:13:AC:28:FE:47:50:AA:11:3A:AC:14:22:CC:A2:24:66:90:06:3F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SBOsKP5HUKoROqwUIsyiJGaQBj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
88:6b:c2:11:b8:4b:23:9b:a6:88:9e:7b:be:a4:7b:96:b0:46:
7a:7d:3b:6a:c9:ea:24:9c:7e:23:15:b6:93:a8:35:90:ad:20:
aa:4c:f8:ff:71:51:69:f7:39:0f:e3:48:e6:71:91:49:f2:83:
99:a7:b0:5e:17:4e:37:31:65:1a:8d:42:14:9d:b3:7f:b8:ef:
e2:77:21:04:e3:1c:34:69:5b:e9:37:3f:1a:72:53:29:58:cf:
2c:dd:55:9c:82:d8:bd:f2:00:dd:e4:2d:34:dd:29:6c:b9:e4:
26:63:f5:3a:2b:20:9d:87:ea:39:73:91:8c:c1:70:d9:67:02:
1d:c4:ce:93:bf:0d:cb:db:b2:e7:f2:68:a8:2f:f0:ca:b9:5c:
56:ab:b9:6e:10:06:bb:ae:df:d4:cf:11:69:31:20:6a:08:fb:
93:b0:0a:e3:81:a1:2c:37:5c:8c:40:ba:d7:71:1a:c0:25:3a:
10:92:60:53:97:60:e8:56:f5:24:77:29:dd:af:d2:40:f3:71:
00:3c:16:b1:d3:32:4a:1b:3a:c2:45:67:15:18:23:bd:90:c2:
1f:85:09:ae:f1:47:17:46:9c:3f:c8:4d:10:fa:ad:00:5e:7d:
b7:7f:6d:2c:2d:6e:b5:e3:ba:c0:0c:97:36:4b:3c:82:40:62:
4a:47:4f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:53:12 2025 by rpki-client