Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b-M0VEQcbxKW7MCT9mn2dqHG1SU.roa
File: b-M0VEQcbxKW7MCT9mn2dqHG1SU.roa (raw, json)
Hash identifier: Q0CnyKt1YVEc0uZ0FwB782K/e0V3+MRn2uOmpQBx6pU=
Subject key identifier: 6F:E3:34:54:44:1C:6F:12:96:EC:C0:93:F6:69:F6:76:A1:C6:D5:25
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183EC8352B104883C750E7E420889D8B238
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b-M0VEQcbxKW7MCT9mn2dqHG1SU.roa
Signing time: Tue 18 Oct 2022 19:12:52 +0000
ROA not before: Tue 18 Oct 2022 19:12:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ec:83:52:b1:04:88:3c:75:0e:7e:42:08:89:d8:b2:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 18 19:12:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6fe33454441c6f1296ecc093f669f676a1c6d525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:72:a6:33:57:e9:d7:6b:3b:ad:56:06:00:c7:
c6:ce:9f:0f:6b:d3:93:c2:99:f8:2d:54:aa:d1:ee:
63:9c:5b:bc:d8:ab:25:3c:91:ed:99:a1:b7:e9:28:
ef:1b:59:98:94:e0:e1:42:82:b9:2f:75:3b:63:6a:
ad:b9:e5:d8:c3:04:14:7f:72:50:60:64:b1:69:5d:
3f:a9:57:b7:e5:60:fd:0b:13:4b:87:5d:e8:2b:74:
20:04:6a:bb:76:56:2b:2e:32:23:3c:9f:7e:0d:5a:
1f:31:94:c1:af:9a:52:a4:c8:1c:01:cb:5a:eb:b3:
96:e6:46:1b:2b:8a:bd:94:92:59:a7:58:0d:e3:6d:
b9:57:60:3b:38:36:5b:86:22:e5:e2:6d:0c:0d:c3:
9d:3a:a4:b0:27:a8:59:c8:1c:2c:5c:06:bd:29:7e:
e1:d8:e3:85:fb:e2:dd:4f:19:68:ed:33:9f:df:03:
08:b2:41:b5:5a:8c:80:14:f3:6f:cd:d3:65:7a:b4:
2a:ff:18:3c:72:c1:b7:3f:3f:c7:54:9c:af:38:8e:
5d:43:1e:90:8c:47:f1:ff:f2:84:fe:65:47:f1:16:
11:03:14:a4:a4:ee:8e:00:2d:4a:0b:a5:6c:f9:4c:
2e:e8:58:e7:e9:a7:1d:f0:d9:cd:a1:a8:c6:95:f1:
c7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E3:34:54:44:1C:6F:12:96:EC:C0:93:F6:69:F6:76:A1:C6:D5:25
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b-M0VEQcbxKW7MCT9mn2dqHG1SU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ad:18:39:7c:03:8d:ca:e0:15:3f:fe:92:d1:ee:33:52:35:a8:
31:ed:d2:f0:57:c5:44:a6:db:74:88:b2:04:f2:51:4e:18:06:
48:31:01:b3:fd:25:af:e5:1e:49:45:48:bb:61:62:cd:fa:c6:
57:b5:f9:1a:28:37:33:3b:8d:54:08:db:5f:15:8e:40:e8:1c:
c6:60:68:c0:6e:8c:82:6a:68:65:0d:67:aa:76:f4:1f:14:e1:
73:88:c4:35:ce:89:58:50:83:c5:2c:3d:ac:5b:42:ca:89:06:
98:e9:66:40:b3:1d:87:84:8d:dc:54:62:9d:da:8c:b2:ef:f6:
f2:74:7c:6e:e6:ec:89:d3:8d:19:54:31:e6:73:c7:49:1a:f6:
8c:f2:af:ff:f1:0f:bd:7d:b1:23:ac:f4:74:d7:a7:d7:24:7d:
1c:25:65:93:42:2e:84:35:9e:00:40:fe:7b:fd:dc:60:df:84:
10:93:49:d0:09:e2:15:d2:eb:0a:3c:04:4d:2f:18:da:3c:a1:
b4:34:ac:d5:35:52:c6:76:88:4b:7c:9d:ef:17:ec:03:3d:d6:
1c:c4:b7:57:3c:2a:24:8d:b8:f5:d4:af:78:06:15:d8:6a:5f:
e6:80:17:6a:80:00:3e:13:9f:e6:ba:4c:bc:70:6d:d3:1d:bc:
cf:bb:23:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:17:50 2025 by rpki-client