Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bL0xjuSMPwcWZtMWCUnrxai1rlk.roa
File: bL0xjuSMPwcWZtMWCUnrxai1rlk.roa (raw, json)
Hash identifier: ZgFmOVAz48hxBG7djGKS+fb1k+a3SNlRCdIsh6gWO6Y=
Subject key identifier: 6C:BD:31:8E:E4:8C:3F:07:16:66:D3:16:09:49:EB:C5:A8:B5:AE:59
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184E3B4346AFFBFC3F9B4E0DE2F5508BA42
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bL0xjuSMPwcWZtMWCUnrxai1rlk.roa
Signing time: Mon 05 Dec 2022 19:12:28 +0000
ROA not before: Mon 05 Dec 2022 19:12:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e3:b4:34:6a:ff:bf:c3:f9:b4:e0:de:2f:55:08:ba:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 5 19:12:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6cbd318ee48c3f071666d3160949ebc5a8b5ae59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:91:b5:3a:78:fa:5b:d0:ac:9b:fe:30:8c:30:
7b:bb:e4:74:89:b3:13:41:9a:40:d5:c3:9c:db:ca:
c6:2a:d0:09:dc:68:5a:02:1a:5d:42:6a:b7:d2:26:
4b:e5:63:1e:9c:04:fc:c0:bb:fa:77:71:cc:d6:fc:
c3:f9:8f:c5:74:c9:98:93:8a:af:db:08:ee:c8:f3:
c9:5e:7c:e9:9d:be:24:65:56:1e:6d:59:a1:d9:0d:
3d:1d:df:91:3b:a1:63:e9:47:56:18:dc:41:ce:5c:
09:06:27:e2:32:26:69:80:60:90:c8:21:ce:fc:e4:
aa:1f:30:bf:b6:52:07:b3:d7:44:65:4d:90:51:c0:
c1:db:62:4f:cb:60:5f:55:3e:28:23:52:88:5c:4b:
3f:32:7a:7d:25:fd:77:fa:44:ff:28:40:e8:09:ae:
1b:77:d3:b8:6e:df:30:98:04:70:34:88:58:12:94:
d9:6d:25:0a:79:56:2a:10:37:8c:8f:c3:3b:bb:93:
8e:2b:bc:1a:d5:23:4a:4f:94:ac:ad:0b:3c:ac:6e:
34:5b:e7:d3:7a:23:ab:3e:3f:ac:18:1a:1b:60:26:
4d:d6:6e:a7:8d:78:91:82:37:12:bc:7b:0a:9d:53:
01:4c:f1:db:13:d9:28:4a:6b:f2:e8:a0:ec:8a:44:
ee:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:BD:31:8E:E4:8C:3F:07:16:66:D3:16:09:49:EB:C5:A8:B5:AE:59
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bL0xjuSMPwcWZtMWCUnrxai1rlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
89:78:4e:71:3f:a2:85:67:17:db:61:09:47:f7:a1:b7:ee:8c:
16:e2:65:b2:5c:b5:7d:fd:d4:9c:28:ea:52:1e:40:6f:6e:08:
c2:b4:97:ea:a4:e8:63:6e:52:45:3e:68:cc:48:70:6e:8d:ac:
52:ef:c6:3d:96:59:df:63:d1:0c:3c:e5:30:f2:98:89:50:0c:
51:41:d0:4d:51:6d:f3:8f:7e:f9:78:c7:f4:0f:8d:14:09:86:
c2:48:1e:26:c2:97:d2:74:0a:84:db:c4:bf:db:a7:14:0a:3a:
12:ae:1e:75:1e:e1:e6:46:77:98:80:4e:24:42:75:6d:10:37:
8d:72:4d:b8:ec:02:e1:f2:4e:8c:4c:1f:4e:bd:f9:8d:c2:37:
11:54:8b:ca:d1:cc:63:8e:f4:ee:a7:1c:d6:6d:33:1a:07:2c:
70:60:53:7a:5b:1c:ad:43:19:e0:1e:f3:5e:27:3a:22:22:34:
b3:39:bf:3b:b2:79:6d:30:c9:fa:8c:8c:94:ab:0f:7e:1c:b4:
15:96:aa:08:8d:4c:b5:e1:18:d5:a9:93:f6:de:ad:e7:df:4e:
a8:68:c6:cb:de:ff:32:98:a6:ac:5e:5e:1d:6e:f4:fb:63:e4:
27:fe:f0:7a:f8:19:ff:f8:7c:e3:55:cc:21:25:4b:7a:bf:b5:
14:65:27:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:08:29 2025 by rpki-client