Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bEnuJPYMegvwqzdibIYjknE7O-c.roa
File: bEnuJPYMegvwqzdibIYjknE7O-c.roa (raw, json)
Hash identifier: vEvFgrSpXBc4boT0NeBQ/kELCyKKRAEDz1lzj3jge2k=
Subject key identifier: 6C:49:EE:24:F6:0C:7A:0B:F0:AB:37:62:6C:86:23:92:71:3B:3B:E7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01852A82149185FD50B4D4342B677F6189C0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bEnuJPYMegvwqzdibIYjknE7O-c.roa
Signing time: Mon 19 Dec 2022 13:10:46 +0000
ROA not before: Mon 19 Dec 2022 13:10:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2a:82:14:91:85:fd:50:b4:d4:34:2b:67:7f:61:89:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 19 13:10:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c49ee24f60c7a0bf0ab37626c862392713b3be7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d4:bd:8c:9a:61:df:cb:b1:22:7d:e2:49:2a:
5d:a0:6f:8f:fe:3f:d7:08:bd:4d:ad:b1:a4:72:93:
3f:72:19:b3:12:0a:e9:db:d1:72:c5:28:8f:e2:1e:
37:b2:60:5a:e0:2f:99:3f:b1:5a:37:16:17:48:4b:
b8:62:ec:9d:e1:a9:9d:28:8d:8e:85:7c:77:42:8d:
31:e5:44:4c:fd:2e:42:3d:4d:ac:a2:b0:4b:d6:28:
c7:b2:c4:49:40:48:8c:78:69:f5:2c:00:32:43:62:
03:61:52:14:e8:7b:81:fa:e5:56:44:e7:d3:1b:ac:
87:64:4c:cc:01:5c:aa:d2:05:82:4c:71:62:d4:06:
50:b9:28:ff:bc:6c:76:37:b6:14:af:19:50:a1:75:
88:11:89:16:bb:cf:43:2b:2b:83:fc:17:2a:23:ad:
50:4b:34:eb:6d:71:f5:3f:6e:02:5e:db:82:fc:62:
68:6e:be:e0:03:cc:4f:e1:c7:f9:07:e6:2d:73:90:
6e:dd:44:7d:da:18:06:29:ec:11:cf:4c:c0:9a:01:
81:15:84:20:8d:fb:6e:8e:58:e2:23:54:78:0f:28:
85:b5:0c:4b:6e:7a:ef:62:7b:ad:cc:9b:de:05:d4:
8e:6c:3e:61:b3:ee:e5:a7:f1:94:a5:d5:ce:5d:ce:
4c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:49:EE:24:F6:0C:7A:0B:F0:AB:37:62:6C:86:23:92:71:3B:3B:E7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bEnuJPYMegvwqzdibIYjknE7O-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7d:01:31:9e:d6:34:ca:29:1c:b3:30:6f:0d:a9:c6:5e:67:f9:
c9:7c:c0:84:33:7f:98:ed:6d:17:82:02:0b:5a:28:f1:b1:a1:
35:d3:72:16:b9:6a:c6:ed:ab:48:76:74:be:f8:44:95:38:20:
5d:a4:67:86:73:96:c7:51:39:9b:b2:cf:0f:4c:0f:15:a4:54:
ff:e1:ad:8a:64:d8:05:f5:4d:bd:28:f9:15:4a:9b:19:70:53:
48:dc:08:3b:a5:6b:b0:cc:22:2c:c4:f1:88:c9:8b:7b:9e:9a:
52:33:ae:77:9f:e2:d4:16:59:a2:85:c7:37:b1:86:46:e2:18:
e5:76:84:ed:99:25:ed:64:71:d0:58:0d:51:0a:37:1d:22:93:
90:79:1f:45:2a:64:1e:ff:15:25:39:9a:24:27:57:d3:81:be:
95:b4:66:09:35:26:79:b5:04:64:79:77:9e:ea:df:b3:a9:2c:
d2:9f:86:9d:38:97:bd:0d:2b:7e:01:3d:58:6d:d8:1e:ab:09:
37:79:a2:6d:cc:b9:1f:e2:c7:f9:ea:56:4a:4e:46:33:49:63:
96:08:45:3a:3a:99:f1:44:65:47:7a:f2:d5:dd:15:68:80:ab:
8c:e2:61:b1:bb:53:31:aa:5f:b9:60:c5:49:3d:48:9c:ad:f6:
bd:5c:86:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:28:47 2025 by rpki-client