Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bCHkAdJrTEFfgNZ9yM24bFFHXi0.roa
File: bCHkAdJrTEFfgNZ9yM24bFFHXi0.roa (raw, json)
Hash identifier: tHBDF4bxwAazRt1QrqE05BGa2nQC4oSS5VlhvgBxTcc=
Subject key identifier: 6C:21:E4:01:D2:6B:4C:41:5F:80:D6:7D:C8:CD:B8:6C:51:47:5E:2D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018224892232E32A8281743EE5BA9BA051F2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bCHkAdJrTEFfgNZ9yM24bFFHXi0.roa
Signing time: Fri 22 Jul 2022 06:12:23 +0000
ROA not before: Fri 22 Jul 2022 06:12:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:24:89:22:32:e3:2a:82:81:74:3e:e5:ba:9b:a0:51:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 22 06:12:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c21e401d26b4c415f80d67dc8cdb86c51475e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:eb:f9:8d:b0:bb:c2:f6:32:40:63:ec:f0:eb:
32:e9:73:97:18:4e:49:1e:71:21:d6:f6:52:ba:70:
d4:44:91:6a:5d:1e:75:f7:db:59:cb:e7:8d:8a:40:
09:b8:6f:eb:0d:7d:93:75:6f:26:6e:0d:cd:e5:3f:
ea:a4:c6:cb:53:6c:d6:19:01:4c:e3:4d:f4:6b:fc:
8d:38:4f:71:56:3e:b1:d8:15:5c:eb:9d:33:38:cf:
cc:cb:fe:78:08:06:e1:c7:66:3e:94:83:e9:2e:a0:
5c:0e:83:e2:d4:65:f2:0d:22:d6:e6:85:aa:db:6f:
8c:32:7e:fb:ec:9a:89:e7:25:cc:02:2c:25:0d:f8:
ad:d9:12:d0:21:1b:27:d0:40:ea:1c:9e:7e:33:b4:
f8:b6:bf:82:fe:59:95:f5:0f:c7:e6:fe:6e:42:4e:
3b:db:cc:f5:a9:c7:ef:3d:63:9f:52:b6:1b:a1:21:
ff:d5:7d:1a:00:bd:46:ca:55:68:95:5b:d0:91:14:
01:4c:93:73:ee:09:03:58:16:a4:4e:15:40:f6:a8:
64:1c:cd:5e:a5:51:ba:fd:1f:e5:0c:51:42:87:78:
ee:f9:0a:df:39:8b:98:a6:bf:4c:6e:96:cc:e0:c7:
06:b1:eb:4d:87:2b:83:2c:bd:a3:a3:56:35:63:8f:
61:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:21:E4:01:D2:6B:4C:41:5F:80:D6:7D:C8:CD:B8:6C:51:47:5E:2D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bCHkAdJrTEFfgNZ9yM24bFFHXi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
18:00:90:0a:c4:f9:98:f3:3c:16:94:ad:9b:07:80:1e:0f:3f:
a6:7e:b5:8a:b2:fc:05:36:8f:f9:09:34:b2:2d:d7:4c:ab:93:
60:5b:7f:cf:59:56:24:32:0e:e5:3c:2e:cd:21:04:2d:8c:22:
8c:fc:9e:73:34:f4:0f:fe:8d:67:c8:4d:77:36:2f:a7:4f:2c:
33:8a:3c:c6:8d:d6:3f:ba:eb:b0:84:23:3e:a2:16:4a:4e:91:
93:ee:ac:75:28:e3:5e:61:d4:bc:25:aa:1d:d6:c6:46:f2:81:
83:da:1d:fe:c0:ba:d4:30:0f:2a:16:3c:bf:51:1e:e3:f5:f6:
37:a2:c9:5e:2a:45:ff:d4:d4:31:b8:c0:eb:14:33:f3:86:99:
2c:20:b4:a9:41:f1:4b:a9:e4:29:30:9d:25:e1:57:ef:71:51:
df:1e:60:60:c9:02:ca:65:07:68:91:44:37:bc:e9:77:b3:ec:
29:0e:54:4e:03:fa:7f:d8:41:d0:43:47:fd:8d:70:f2:a8:7a:
30:35:31:df:12:e1:7f:b2:ef:69:cf:da:3b:c1:7f:47:d7:ae:
93:02:b2:8d:47:4a:51:03:ca:22:20:8d:00:1f:c7:8b:19:3d:
5f:b7:a9:5c:de:62:07:ed:0e:e4:a2:18:43:23:55:44:54:13:
39:3a:08:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:03 2025 by rpki-client