Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/azBrZvOg2_RhE8rM2P6a-c3ZYf4.roa
File: azBrZvOg2_RhE8rM2P6a-c3ZYf4.roa (raw, json)
Hash identifier: teFeGGng8dDdjuPOH9ZwCkicQizFePCQUFsEAwTb89w=
Subject key identifier: 6B:30:6B:66:F3:A0:DB:F4:61:13:CA:CC:D8:FE:9A:F9:CD:D9:61:FE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6B895351
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/azBrZvOg2_RhE8rM2P6a-c3ZYf4.roa
Signing time: Fri 18 Feb 2022 02:18:14 +0000
ROA not before: Fri 18 Feb 2022 02:18:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1804161873 (0x6b895351)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 18 02:18:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6b306b66f3a0dbf46113caccd8fe9af9cdd961fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9a:d4:e1:2a:9b:e7:63:d1:74:c5:1b:4c:32:
22:1e:3b:9c:04:46:9a:35:c0:d0:af:33:ea:aa:3f:
db:44:51:f8:e6:7b:1a:25:02:a7:83:87:93:7a:49:
71:9c:fb:bf:c6:df:00:12:49:2d:db:0d:64:fd:50:
b0:01:ac:46:57:e3:18:df:3d:5f:ad:46:09:32:5b:
c3:7d:e6:68:11:6c:d1:ce:4c:9e:85:fb:63:47:42:
5e:1a:b1:44:ba:f5:31:bc:5b:86:9a:54:4d:0d:f9:
ff:f2:79:9c:7d:73:96:ff:bd:8a:e8:27:b8:2e:60:
49:58:94:5c:76:1b:27:f3:54:a0:b1:cd:a8:17:c4:
93:b4:e9:01:0a:4c:e3:69:45:8d:cb:5b:26:b5:8c:
8a:d3:5a:cc:fa:9b:ce:41:0b:bc:4e:d3:a1:5f:83:
72:18:09:37:56:01:af:5b:3b:e8:43:e9:ee:58:bf:
1e:83:e8:fd:e6:dc:7b:1a:0b:c9:fa:43:6a:a2:89:
d9:97:3c:3f:20:e6:07:d8:72:cc:e7:53:2f:e2:86:
5c:66:0c:dd:6e:78:aa:63:fc:14:64:6a:80:f1:15:
f5:33:6b:70:cf:97:38:18:5e:3d:a4:31:a6:57:45:
f1:85:41:cf:f3:0a:b1:95:d5:62:99:da:ca:e7:ad:
f6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:30:6B:66:F3:A0:DB:F4:61:13:CA:CC:D8:FE:9A:F9:CD:D9:61:FE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/azBrZvOg2_RhE8rM2P6a-c3ZYf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
65:4a:ce:d0:a0:a4:7d:a1:5e:0c:9b:5c:0f:00:53:28:f3:42:
81:95:70:75:52:5e:e3:3f:6a:24:df:0d:35:7a:27:2a:4e:5a:
02:0c:9e:f0:7c:44:1c:44:b9:40:e6:ae:c4:1b:d4:d2:6d:4a:
87:a6:cd:90:40:50:52:aa:56:aa:e2:6d:9c:85:e7:24:59:cc:
4f:79:56:74:6a:fb:1d:15:9d:b9:48:0b:be:7d:b3:82:b2:ca:
56:de:27:c6:4e:17:fa:6a:19:2b:a2:9e:2e:dc:3e:54:83:67:
dd:93:4b:22:3f:74:c0:0c:d7:df:5f:1f:f4:92:90:c9:30:31:
3a:d1:09:ac:e1:57:74:59:f0:ad:f2:20:7f:dd:c1:f5:05:78:
53:ef:b0:58:9f:d0:1e:07:a6:eb:ad:44:55:31:e4:60:8c:d5:
cf:9f:2a:eb:ff:ef:53:de:4b:f2:bf:c8:5e:cc:d2:72:a7:17:
59:5a:7c:3c:f3:26:ee:9e:8f:96:e4:11:74:6d:74:32:4f:a7:
21:c2:74:12:82:75:17:e0:c2:3d:02:b1:90:27:c2:1e:a0:2d:
4f:d0:a4:98:a7:c6:14:83:e6:b7:56:c5:9d:ae:f7:df:ea:18:
6d:53:93:c4:e0:7f:b7:d1:f8:c0:e0:ba:d3:22:d4:e4:86:36:
6e:e9:a0:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:58:03 2025 by rpki-client