Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bByISHf_p5NxS_jfSB0rgH_zIm0.roa
File: bByISHf_p5NxS_jfSB0rgH_zIm0.roa (raw, json)
Hash identifier: YEkaCI9RqH9zJ/EplDaZN9TO24rNoAkknTZGrw0bt4w=
Subject key identifier: 6C:1C:88:48:77:FF:A7:93:71:4B:F8:DF:48:1D:2B:80:7F:F3:22:6D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7A4BA454
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bByISHf_p5NxS_jfSB0rgH_zIm0.roa
Signing time: Mon 11 Apr 2022 02:09:32 +0000
ROA not before: Mon 11 Apr 2022 02:09:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2051777620 (0x7a4ba454)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 11 02:09:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c1c884877ffa793714bf8df481d2b807ff3226d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6b:ea:d5:02:94:03:68:ab:22:67:d9:c6:c4:
06:c7:d8:c3:c5:63:47:23:94:d0:f5:f0:41:56:a6:
48:50:c9:d8:9f:e4:da:a0:5d:36:60:e0:ea:ea:ea:
f0:47:22:29:d0:4f:6b:fe:00:45:54:b3:d1:dd:bc:
c4:1a:21:10:14:b2:47:7c:8a:28:74:c2:ea:c8:cc:
cb:c1:94:45:f8:81:ce:af:1f:cb:e3:75:b1:11:81:
c5:ee:7d:36:30:51:94:c5:a8:b1:7b:d8:38:70:cb:
1c:f2:63:ba:b9:02:6c:e7:c9:54:3e:ec:98:82:d1:
06:0e:50:6c:77:35:f9:a8:18:11:b1:47:80:d3:dd:
64:d7:ca:19:33:f4:07:70:08:b8:56:2a:d4:d8:2a:
55:ae:26:68:26:c1:7a:5a:6d:13:af:59:3d:f5:a6:
c1:3a:70:06:94:58:01:4d:7f:10:2f:e5:79:c4:41:
76:62:65:bd:8a:07:76:f7:cb:00:8e:29:59:4b:d6:
3f:9d:23:93:87:3b:81:40:87:74:d1:c7:b0:a6:51:
f8:a8:d2:5f:dc:01:47:19:20:b3:4e:7f:d8:e2:51:
ff:8c:b8:5a:70:34:da:dd:aa:58:6c:41:76:c7:55:
53:70:ce:ee:d2:cc:fb:ce:61:d4:1f:ed:23:b7:92:
f9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:1C:88:48:77:FF:A7:93:71:4B:F8:DF:48:1D:2B:80:7F:F3:22:6D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bByISHf_p5NxS_jfSB0rgH_zIm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
60:cb:2c:b7:2c:9f:d7:83:83:41:23:ff:d3:30:97:4c:83:8b:
ab:0c:5f:c2:7e:28:b7:97:b7:f4:ca:f5:27:d0:17:a5:1d:54:
d6:9d:e7:0c:2c:47:82:52:cc:0f:11:d2:74:f1:f4:d6:08:d7:
e3:4d:ef:b0:24:7e:60:27:2b:35:ab:bc:1f:0d:f7:e5:ff:f4:
7c:65:98:87:ca:d2:bb:ee:c2:89:d5:8b:e2:31:e5:66:57:56:
c3:40:79:b7:27:be:87:12:5d:a6:f4:7b:e1:3a:50:83:94:4a:
2c:ff:95:48:5a:e8:0d:f9:2f:88:e4:33:76:5c:a2:66:82:cf:
11:e9:25:40:8c:92:dc:5e:86:21:5c:d6:ee:fe:ff:5b:75:98:
7f:35:df:0a:8b:ac:c9:6e:eb:d6:08:ac:cb:05:f4:4d:01:0c:
52:80:77:09:b9:67:eb:63:13:55:f4:6f:00:42:9b:2f:db:c1:
00:88:2e:2b:7b:f0:70:cd:8a:d0:87:57:58:35:cf:71:72:19:
c3:73:fa:9c:5b:30:37:14:df:57:9f:47:3c:59:9a:a0:98:b7:
aa:74:f7:de:c0:2b:d6:18:10:95:bf:a6:dc:9e:75:72:d3:45:
fb:cc:96:e8:9e:3a:55:e6:d5:1c:79:a6:7e:1a:c7:b1:f3:43:
87:88:d2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:34:19 2025 by rpki-client