Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bCSOsW84Rs5zeMLVSbXc2NVQcRk.roa
File: bCSOsW84Rs5zeMLVSbXc2NVQcRk.roa (raw, json)
Hash identifier: 6dzDhkqCPWIBpTnXurr3N+8vXZDqOiIABAAI8vFnBGY=
Subject key identifier: 6C:24:8E:B1:6F:38:46:CE:73:78:C2:D5:49:B5:DC:D8:D5:50:71:19
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 69D28CCB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bCSOsW84Rs5zeMLVSbXc2NVQcRk.roa
Signing time: Fri 11 Feb 2022 22:09:23 +0000
ROA not before: Fri 11 Feb 2022 22:09:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1775406283 (0x69d28ccb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 11 22:09:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c248eb16f3846ce7378c2d549b5dcd8d5507119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:b7:fb:43:ff:07:ed:47:55:06:77:09:2f:24:
7a:00:28:fb:e8:26:b3:6c:a7:87:92:2d:18:2c:42:
91:04:a3:21:8e:d6:80:4a:43:9c:e9:ca:18:06:64:
70:cd:e5:d6:da:bd:ce:b0:19:e0:ac:0e:88:bd:65:
bb:de:37:e6:5c:47:fd:f3:e8:30:32:0c:1b:99:59:
91:4f:a2:59:fe:11:3c:30:2e:53:66:c1:5d:45:68:
10:c5:48:85:58:9f:18:ba:0c:55:1c:01:93:f3:0c:
32:18:45:ce:df:a2:6c:a8:b0:df:48:07:70:97:43:
b1:f1:05:86:72:33:64:96:a3:ae:c7:3d:66:da:69:
8a:70:a8:27:f1:d4:45:ce:ba:9c:1b:82:28:0d:28:
5f:88:17:b4:4d:b4:13:c1:4e:42:f7:5f:c4:ea:f5:
b9:61:9a:a0:9c:73:b1:57:6e:b4:9a:78:5c:93:9d:
f9:93:c4:05:a2:e4:3c:12:2c:a7:ff:69:b8:88:9a:
43:8f:58:40:f2:20:0a:17:68:80:f7:e4:34:7a:29:
cc:86:3d:2e:55:50:b7:9e:b9:cc:4f:05:c5:49:f2:
80:00:d3:36:85:f4:33:2f:a2:36:1d:bd:ae:bb:0d:
f4:3a:0e:ab:ec:22:e9:26:0a:b7:69:3e:bd:99:ac:
a4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:24:8E:B1:6F:38:46:CE:73:78:C2:D5:49:B5:DC:D8:D5:50:71:19
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bCSOsW84Rs5zeMLVSbXc2NVQcRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
86:81:d4:48:7a:ff:44:a0:29:fb:b6:fb:da:42:57:04:a6:93:
c6:70:48:5c:2b:c0:c1:f3:53:dc:65:95:bd:12:0a:a9:65:c8:
e5:5c:b5:d7:ce:f5:4e:70:c8:cb:ac:72:d7:42:dd:69:4b:08:
db:eb:aa:4f:35:ca:4f:46:a8:3f:c3:8f:85:e8:5f:13:ac:bb:
35:50:bc:96:cb:41:b1:47:ec:83:58:8b:1f:f9:95:c8:40:17:
70:89:a6:bf:bc:9e:72:d0:8e:67:fd:08:f3:64:7b:85:9e:42:
1f:cb:6a:b0:fe:d6:71:6a:97:95:ef:b4:d5:61:0a:f9:4b:1c:
1b:14:38:6c:7a:a0:c3:bd:f3:1e:85:c1:4e:5e:ba:dc:75:c3:
b5:87:80:50:5a:7a:bb:e2:5d:fc:d9:c2:ad:73:1c:b1:60:4c:
11:eb:44:9c:3a:f4:a3:6a:9f:4e:73:36:3e:3e:80:83:a6:45:
f6:72:2c:99:cc:ce:bb:10:e1:3b:be:7c:f9:db:54:dd:92:55:
b6:12:a8:5d:9c:78:ee:92:c0:fa:31:c4:22:97:5c:1c:5a:6f:
c1:88:66:aa:af:5f:ae:39:05:ad:2c:b0:fd:52:c2:17:db:18:
73:ac:74:95:ad:69:06:69:04:22:44:bb:ee:fd:2b:bd:04:bf:
fc:60:7c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:07:31 2025 by rpki-client