Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bBh0TnxgYG5TdwI3vfQ_3G0UpE4.roa
File: bBh0TnxgYG5TdwI3vfQ_3G0UpE4.roa (raw, json)
Hash identifier: tTbcfchLpWIe9R0OaCuG8qq+ShVfAY+E66s4vepl7MA=
Subject key identifier: 6C:18:74:4E:7C:60:60:6E:53:77:02:37:BD:F4:3F:DC:6D:14:A4:4E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184C5DFF9630C5C02076201B51720DF8EE2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bBh0TnxgYG5TdwI3vfQ_3G0UpE4.roa
Signing time: Wed 30 Nov 2022 00:11:40 +0000
ROA not before: Wed 30 Nov 2022 00:11:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:ae77:4719/128 maxlen: 128
2001:67c:64:ffff:0:184:9f03:9814/128 maxlen: 128
2001:67c:64:ffff:0:184:bdea:9abb/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c5:df:f9:63:0c:5c:02:07:62:01:b5:17:20:df:8e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 30 00:11:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c18744e7c60606e53770237bdf43fdc6d14a44e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4a:c2:a3:6b:40:11:13:5a:b1:e3:a2:ce:ff:
3b:22:12:fd:4f:92:4f:1f:87:01:8c:9c:ed:6b:82:
d4:5a:1e:f3:9e:54:0c:02:54:21:bb:6b:fd:c2:eb:
8c:77:89:2a:c1:ce:57:86:b6:d3:e8:15:76:15:de:
81:e3:87:9c:8d:6b:2f:e9:00:6e:ca:e7:1b:db:ed:
4c:f8:d1:83:e4:e2:35:69:28:d0:65:e4:05:7b:e2:
9b:c4:d5:71:11:49:35:fb:61:2c:55:e7:ff:f2:cc:
3e:d2:3c:b5:92:74:17:38:6b:59:33:cf:30:a6:78:
96:45:e0:4b:fe:01:43:99:a8:e9:92:42:9d:c9:3e:
92:f1:86:82:bf:52:ca:ea:95:dc:3f:5b:69:94:ba:
ab:f5:5d:5e:f2:8a:d3:39:e3:43:74:d3:6b:4c:1d:
67:03:00:a2:6d:a8:9c:6f:38:2d:aa:45:e0:96:fb:
81:52:55:a9:b5:8b:de:a0:84:b7:c7:0b:ff:06:a0:
10:2a:c2:e4:0c:4a:1a:d4:76:7d:85:b4:c6:2b:2f:
89:b1:fb:6d:d3:af:f2:b6:17:29:1e:47:08:6e:e5:
0b:91:f0:c2:75:c4:ff:3d:6e:03:fb:f7:28:34:02:
de:6a:f9:3f:90:ca:1b:bb:d3:fa:62:da:05:c0:27:
b0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:18:74:4E:7C:60:60:6E:53:77:02:37:BD:F4:3F:DC:6D:14:A4:4E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bBh0TnxgYG5TdwI3vfQ_3G0UpE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
72:79:36:a4:15:17:1c:08:63:30:37:fe:b2:31:a0:3e:66:26:
05:14:da:15:50:bf:eb:af:d3:8f:8a:0a:83:df:49:2a:48:07:
9c:75:62:28:a1:c1:0c:63:f6:70:b4:93:c0:1f:e9:43:c9:5a:
43:52:10:68:bc:35:c7:dc:8a:fe:58:1e:cb:fb:b6:e0:2b:b8:
2a:1d:6b:6a:23:f4:bb:fe:e5:4c:5f:3e:b7:84:cc:0d:fe:c6:
7e:57:20:32:31:08:da:d3:b0:6b:f8:46:5e:02:cd:5f:27:18:
ef:6f:69:3a:da:84:4f:2f:e1:9d:5f:7d:e8:f6:7f:f6:91:ec:
c4:1e:7c:cc:b4:45:81:89:4d:35:37:a3:1a:76:b2:49:24:a0:
2e:e4:7f:99:94:1c:7e:33:00:38:da:7d:5c:48:3d:ce:19:a4:
b8:d5:a3:9d:53:c4:11:81:c3:e1:77:bd:b1:58:1b:af:ec:15:
f3:26:41:2e:80:04:1d:01:82:d5:62:9f:0e:d6:76:a8:f8:6b:
95:ad:08:bd:1c:f7:0e:61:42:b3:a0:99:0a:3d:47:0c:23:5c:
77:f6:a4:f7:b0:00:27:5b:7d:3c:e4:d0:04:c4:60:a6:27:8e:
8b:91:a9:98:e0:b9:ce:0c:90:4d:5a:41:68:2a:60:d6:77:e7:
78:06:94:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:47 2025 by rpki-client