Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b4DjIZ1mhaS7Ny6CoOMZLIB8J4w.roa
File: b4DjIZ1mhaS7Ny6CoOMZLIB8J4w.roa (raw, json)
Hash identifier: Fkk/0LyjTjTZxN71NffojIVFGRDzbsq/rx7QnJEpHyc=
Subject key identifier: 6F:80:E3:21:9D:66:85:A4:BB:37:2E:82:A0:E3:19:2C:80:7C:27:8C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184ABEAD947AE950DF018D675A142F3AAC5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b4DjIZ1mhaS7Ny6CoOMZLIB8J4w.roa
Signing time: Thu 24 Nov 2022 23:13:25 +0000
ROA not before: Thu 24 Nov 2022 23:13:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:9f03:9814/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ab:ea:d9:47:ae:95:0d:f0:18:d6:75:a1:42:f3:aa:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 24 23:13:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6f80e3219d6685a4bb372e82a0e3192c807c278c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:4b:ac:5e:82:ce:18:ba:99:1e:08:9d:ce:6f:
c7:12:e5:7e:74:c8:54:c9:42:fa:4b:0a:2d:01:d8:
e6:3d:6c:86:e3:27:8a:88:47:1e:99:d2:23:34:8c:
b5:fb:74:a2:3d:37:e8:93:89:5a:af:0a:9a:34:4f:
3b:65:08:e9:bb:16:cd:b2:e9:a3:c3:53:1c:99:38:
fc:43:ac:10:9b:54:b4:1b:79:c0:81:92:3d:62:66:
94:02:b6:98:b9:5e:f0:37:6b:c0:ca:d6:a5:1b:ce:
d5:3d:fe:e5:85:9b:09:4f:f4:37:44:d6:e9:63:21:
62:35:53:2a:db:b6:1b:ab:49:33:ad:36:1b:58:a5:
df:84:a5:86:d4:67:a1:ba:0b:c0:40:02:af:ba:fa:
57:09:c8:b2:05:db:35:ca:15:64:94:86:2c:79:54:
53:1f:24:3f:2a:ed:b8:1f:c3:f2:61:be:ac:28:3e:
2b:c9:1f:b4:46:bf:f3:ab:61:99:4c:a6:db:d6:ec:
53:c8:08:63:01:e0:e8:44:d7:2b:85:fb:e3:c7:9f:
ca:bf:91:8c:dd:4d:78:7e:a6:fd:0b:1f:b1:2f:c7:
47:77:90:b0:16:c8:12:33:a7:58:85:56:3c:0a:4e:
55:9e:ce:3c:10:4d:3b:1e:82:74:87:a9:2b:75:f4:
fa:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:80:E3:21:9D:66:85:A4:BB:37:2E:82:A0:E3:19:2C:80:7C:27:8C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b4DjIZ1mhaS7Ny6CoOMZLIB8J4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2f:a8:d7:d3:8a:94:e4:76:67:5e:ce:27:89:ec:53:68:1a:e3:
33:28:de:8e:9b:b5:97:f0:dc:de:66:90:c4:e7:cc:a0:6c:72:
ab:3b:e6:a5:1f:73:5b:54:4a:3d:3e:d5:02:53:c5:1f:1b:76:
79:14:3b:cb:df:b4:52:dc:6a:32:5a:50:d3:e4:d0:be:de:5a:
94:d9:61:56:36:64:b9:0d:f3:6f:71:9a:67:2a:81:a2:3e:2c:
00:c6:7d:d2:fd:54:52:f1:78:c8:11:9c:a2:14:1e:22:c6:1d:
2a:ea:d8:63:57:dd:b9:a5:54:3b:90:10:cb:a6:94:15:db:48:
92:d6:ad:71:ea:ba:9f:2b:f6:08:79:b2:13:53:90:d1:ba:cd:
7f:6b:99:5e:fb:d5:3d:39:de:c7:6f:48:c2:bc:15:e9:d2:09:
0a:16:4b:f7:f1:65:f4:27:3d:c1:01:83:3e:7f:26:40:08:4c:
67:d8:a6:68:cc:d1:2e:53:86:34:65:dd:93:23:fe:99:e4:83:
3a:8b:da:3b:ac:29:88:f4:00:27:74:77:b9:87:fb:28:b4:f9:
7e:9c:f5:d9:16:7d:ac:9e:b5:83:3d:eb:ad:14:39:34:aa:63:
a6:d4:78:b1:70:87:33:cc:82:8f:37:2b:b9:0b:dc:c3:8e:4a:
df:04:90:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:09:17 2025 by rpki-client