Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bJUt_qCPntp7cCbTK8JQmv-kQn4.roa
File: bJUt_qCPntp7cCbTK8JQmv-kQn4.roa (raw, json)
Hash identifier: zTSDiri0due1rRb9FfRuJpxNpJxB48EutvfgOUDAbhU=
Subject key identifier: 6C:95:2D:FE:A0:8F:9E:DA:7B:70:26:D3:2B:C2:50:9A:FF:A4:42:7E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 709CC6EA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bJUt_qCPntp7cCbTK8JQmv-kQn4.roa
Signing time: Mon 07 Mar 2022 23:08:26 +0000
ROA not before: Mon 07 Mar 2022 23:08:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1889322730 (0x709cc6ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 7 23:08:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c952dfea08f9eda7b7026d32bc2509affa4427e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:76:1f:f2:d3:38:57:32:2a:ab:44:2d:1c:8e:
b2:36:63:39:15:24:da:c5:bc:a5:b8:7b:a8:93:3a:
a4:b0:c2:4a:34:76:7a:93:c3:f7:aa:97:57:4f:ad:
b7:48:92:a5:68:40:3d:3a:21:0b:6a:86:07:f4:9b:
b3:61:c0:14:5b:54:8d:41:c5:cd:4b:61:5c:31:e0:
63:46:dd:97:a5:b7:64:15:7d:4d:e0:e1:d2:cd:73:
01:1c:73:36:e1:04:44:d3:be:38:be:ed:01:fd:af:
4a:c0:34:d9:4d:df:e6:40:24:60:94:0a:91:3b:ff:
88:3c:67:71:07:2c:55:ed:10:27:b7:94:2f:77:73:
29:bc:4f:e8:c5:bb:b4:58:a2:7a:bb:fa:24:92:37:
a3:52:ad:9f:fc:6c:79:91:55:61:e5:b1:6f:54:6f:
8a:c4:2f:75:a4:fc:74:6a:f7:90:ae:86:f7:02:b4:
11:4a:83:83:fb:40:1f:f0:b1:ae:51:6a:9f:45:7d:
fc:c9:76:ad:eb:e5:83:f8:ce:87:e0:97:5e:bc:54:
2e:b4:9e:c4:56:38:a1:53:76:2e:f8:c0:4f:58:5f:
ae:04:d4:72:60:4d:c8:59:9c:bd:84:3f:38:1f:55:
19:3a:f9:91:fd:a2:75:3d:07:1c:e3:45:20:bd:6f:
6e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:95:2D:FE:A0:8F:9E:DA:7B:70:26:D3:2B:C2:50:9A:FF:A4:42:7E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bJUt_qCPntp7cCbTK8JQmv-kQn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8e:aa:93:0a:f2:01:63:35:54:14:00:16:c1:a2:cc:df:b1:19:
a6:7d:a3:52:eb:02:cd:83:85:19:69:b7:2a:67:7c:f2:ae:47:
df:5c:f8:3c:c5:0a:ed:11:29:9b:65:1f:09:f1:bf:3d:7e:e1:
42:b0:26:18:25:65:fd:73:a5:72:1a:a2:21:d4:c9:bf:bf:66:
b1:2d:47:eb:ee:1e:ba:df:21:7d:21:cf:1a:17:72:09:f1:e5:
fe:e2:c2:01:70:cb:bb:e1:14:26:3d:0e:6b:50:c0:c1:b2:f8:
ba:36:c6:6d:a6:3a:81:b1:e8:8d:61:e4:4e:47:a4:51:a7:97:
8b:55:a5:52:9a:ba:9b:86:4a:76:50:4e:ff:7e:0f:8c:70:90:
e9:89:97:b1:70:6b:9c:5f:c3:19:c7:12:2a:37:30:e4:b5:a1:
dc:29:54:35:1f:a6:40:e6:ef:dc:ba:30:16:e6:cc:1b:64:79:
79:50:1b:90:ae:e5:6a:d1:a0:34:cd:ff:20:6b:c5:ff:82:c3:
06:41:6d:94:f1:72:bf:a9:3f:af:af:4a:f4:ec:8f:40:bc:f4:
f4:38:84:b3:b1:bc:1e:b9:a9:c8:dc:94:2d:26:7e:99:65:5e:
11:14:97:ae:57:24:e8:21:67:6b:8e:0d:ab:87:fc:57:70:c5:
4f:d2:4b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:25:11 2025 by rpki-client