Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b7qUIfh3kpQneFsaZRBZBQZlbd4.roa
File: b7qUIfh3kpQneFsaZRBZBQZlbd4.roa (raw, json)
Hash identifier: havCxiGoiWmdSMAtWsOvysmTo4HoUQ5CSzegIvB/Ecc=
Subject key identifier: 6F:BA:94:21:F8:77:92:94:27:78:5B:1A:65:10:59:05:06:65:6D:DE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182DC66528976879B7E2C418127CA7F98D7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b7qUIfh3kpQneFsaZRBZBQZlbd4.roa
Signing time: Fri 26 Aug 2022 23:04:29 +0000
ROA not before: Fri 26 Aug 2022 23:04:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64:ffff:0:182:dc66:430d/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:dc:66:52:89:76:87:9b:7e:2c:41:81:27:ca:7f:98:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 26 23:04:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6fba9421f877929427785b1a6510590506656dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8b:c4:44:c9:24:c1:30:dc:50:cc:c6:d1:64:
a3:fd:95:63:ca:5a:4b:fe:05:72:a2:90:ad:73:6e:
ab:1a:fe:98:25:19:4c:37:8f:d8:b1:19:73:6a:19:
96:a6:78:d9:c8:c6:3e:b1:ca:18:c9:22:f4:33:16:
f7:12:30:7b:59:e3:b8:e1:5a:eb:91:26:d2:5c:3c:
19:f6:37:49:e7:03:4f:06:8d:19:37:96:4c:b5:6a:
7e:ad:1f:d5:b0:68:68:e1:5c:4f:a3:0f:71:e5:55:
54:91:91:2c:b4:af:8d:3f:cd:3b:3a:e8:00:26:1a:
e2:d2:38:d3:17:95:75:1d:bb:51:be:d5:59:f7:ab:
d2:52:a7:d7:c4:53:2a:cb:20:3e:6d:3a:36:cf:9c:
11:02:8d:69:6b:7d:23:bf:4a:09:05:5a:4f:1d:4a:
31:57:ba:f8:10:8b:54:e5:08:57:f4:ac:49:ef:fa:
13:d0:3c:cc:89:74:57:c7:db:69:19:fe:21:24:3c:
a6:aa:b8:2d:57:d1:31:94:a0:f1:92:46:40:6b:fb:
d4:d8:40:a3:9d:31:82:7a:45:5e:ac:8f:22:a6:ac:
f0:49:ec:fd:f4:06:48:f1:01:bf:75:6c:3c:95:1a:
36:98:17:a5:15:b6:d4:83:85:1d:82:ba:d9:27:b8:
6c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:BA:94:21:F8:77:92:94:27:78:5B:1A:65:10:59:05:06:65:6D:DE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b7qUIfh3kpQneFsaZRBZBQZlbd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
67:06:cb:1d:dc:e1:d1:d2:33:e0:d2:c8:fb:be:6a:69:7e:60:
fc:d4:65:91:2e:8b:df:26:34:64:55:a6:f0:da:25:09:01:5c:
47:c3:30:f3:73:ff:61:96:f0:5c:a5:07:78:48:0f:76:9a:b1:
6d:4c:77:7e:9d:01:ed:1d:91:66:4a:e7:1e:c1:ca:f7:e2:db:
45:fc:e3:ca:b8:27:02:0b:a5:9e:3b:db:84:3b:51:cb:1e:bb:
c9:e2:0f:01:e5:88:a8:15:c0:28:4f:15:38:42:b6:1f:f4:df:
eb:64:79:5d:28:e7:cf:b8:48:2d:4d:28:93:54:0a:4a:54:e7:
ff:56:b3:07:6e:5a:b9:07:a2:de:48:1e:70:51:67:0d:a9:87:
c8:f9:8a:24:87:e3:26:64:2e:27:67:c5:e4:4a:76:5d:a7:3c:
df:b2:1e:e7:4c:b5:68:43:79:71:5e:b5:c4:fe:f8:b5:8f:e1:
03:ed:5d:6f:0c:4a:44:50:dc:bd:11:f1:e6:11:da:63:16:07:
cb:6d:08:f4:69:35:7b:2e:34:14:ad:36:bc:ca:9a:3b:86:bf:
98:3d:0a:34:ec:1c:7c:c0:df:d3:7f:58:d3:48:5d:b6:5f:5c:
32:e0:73:2c:b6:42:93:f0:ea:55:96:2f:23:34:b0:8f:09:69:
bf:97:82:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:12:17 2025 by rpki-client