Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b7cv-BHy8fK0RyF0lxO5qKPGkWY.roa
File: b7cv-BHy8fK0RyF0lxO5qKPGkWY.roa (raw, json)
Hash identifier: Oa0Xqmz6pS3XE57R5ZHjalhzo/pbAdLkCKd4rc1k77s=
Subject key identifier: 6F:B7:2F:F8:11:F2:F1:F2:B4:47:21:74:97:13:B9:A8:A3:C6:91:66
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182707FD9E9B6BC9103B688A7B4E08A305D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b7cv-BHy8fK0RyF0lxO5qKPGkWY.roa
Signing time: Sat 06 Aug 2022 00:13:23 +0000
ROA not before: Sat 06 Aug 2022 00:13:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:70:7f:d9:e9:b6:bc:91:03:b6:88:a7:b4:e0:8a:30:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 6 00:13:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6fb72ff811f2f1f2b44721749713b9a8a3c69166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:86:e4:76:c5:ac:ee:45:2a:f7:95:a6:65:e3:
c7:91:e3:83:5b:64:7e:01:7a:80:ea:28:e6:d7:b9:
d1:6b:58:60:14:82:5c:01:21:7c:f5:ab:cc:35:58:
22:bc:09:02:00:7c:cf:a8:33:4e:db:0c:0d:88:3f:
f4:a2:66:b5:6f:1f:75:53:4a:31:fd:ad:9e:34:ad:
2f:a5:da:e5:b1:58:65:f3:31:f6:01:17:df:cf:77:
18:a6:17:3f:32:c4:f7:5a:27:56:c6:e1:d4:65:04:
4b:ac:33:94:d9:51:b2:65:75:7a:c1:94:7f:0b:0b:
95:9e:59:80:77:e1:c9:dc:09:8c:5c:7e:5d:63:d5:
0b:99:41:3d:d4:c9:ce:06:c1:14:6d:d2:1e:31:96:
8c:e1:2f:88:aa:07:91:fe:56:96:57:00:04:58:28:
4b:d0:ca:48:73:21:f6:fd:6c:03:31:8a:2d:10:89:
d2:17:80:2f:12:4b:aa:6b:84:1d:7a:55:d9:75:63:
9d:79:93:69:c0:19:fc:58:c1:2e:0f:47:22:41:18:
36:37:8e:32:68:2b:ea:32:b1:de:ac:20:36:4a:bb:
c8:9b:8b:e4:bf:fe:9c:da:70:4b:3c:82:05:97:36:
4f:0c:5f:a1:93:4e:d9:31:d4:99:ec:92:6c:a2:d9:
53:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B7:2F:F8:11:F2:F1:F2:B4:47:21:74:97:13:B9:A8:A3:C6:91:66
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b7cv-BHy8fK0RyF0lxO5qKPGkWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
01:a9:ef:d2:2e:0f:94:84:c1:06:a5:e5:b9:ca:7f:dd:88:3a:
97:f1:a2:72:57:83:d2:c3:b9:74:82:d3:3f:83:b4:85:3b:57:
99:57:81:54:46:eb:ce:12:47:90:47:66:5b:cd:4c:c2:be:df:
09:31:28:c9:ae:7b:80:d2:13:58:3d:89:4b:4e:65:e4:fd:f3:
d4:6a:29:c7:84:12:ac:46:23:87:8c:ee:0f:97:24:69:4d:60:
f8:76:9f:64:fe:e7:8f:50:11:29:dc:78:36:8e:f7:73:1e:d9:
f8:56:61:12:8e:16:b1:56:3c:3f:e2:07:5e:36:75:2e:53:9b:
93:04:f0:c2:30:ff:c8:1f:f0:a6:50:af:f3:03:c6:36:88:ca:
7c:87:c9:5f:8f:30:29:9a:f3:9b:a0:38:51:52:14:63:b1:aa:
7e:2e:fc:3a:62:5e:93:47:c2:1f:94:1c:aa:14:c7:d3:04:47:
26:4a:94:99:96:2a:b7:e1:6a:c4:f7:82:65:25:d2:36:e7:cc:
fe:16:4d:41:53:db:d3:34:8f:b0:42:e2:c1:6e:97:f9:c3:f9:
d8:3c:92:ba:16:e9:aa:0e:56:aa:b8:0d:e3:3f:07:3b:15:8e:
fc:5d:65:cf:0c:dd:67:a3:30:bc:b2:c9:71:b7:ef:2f:0d:91:
87:3c:ce:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:52:13 2025 by rpki-client