Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bMtbaqP4kl-NPD4ZFw1BKSnHKFs.roa
File: bMtbaqP4kl-NPD4ZFw1BKSnHKFs.roa (raw, json)
Hash identifier: 9y9b1mS3hrjgqjxSlCeT43l3ZgHWrf8Zb1xMCP7EN/w=
Subject key identifier: 6C:CB:5B:6A:A3:F8:92:5F:8D:3C:3E:19:17:0D:41:29:29:C7:28:5B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185FC5C5646F3356C76774753ACA97BC4B8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bMtbaqP4kl-NPD4ZFw1BKSnHKFs.roa
Signing time: Sun 29 Jan 2023 07:09:47 +0000
ROA not before: Sun 29 Jan 2023 07:09:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:fc:5c:56:46:f3:35:6c:76:77:47:53:ac:a9:7b:c4:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 29 07:09:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ccb5b6aa3f8925f8d3c3e19170d412929c7285b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:19:c2:65:b1:30:cd:3d:14:25:a6:e4:cf:2d:
30:a4:4f:10:d3:58:e2:ad:e9:7f:e1:b2:ac:4a:b6:
67:c0:b9:c4:66:34:ed:3b:29:f5:ee:72:8d:b0:cc:
30:cf:6e:64:f6:b2:b2:2e:c1:56:44:b8:4f:b6:74:
38:9b:04:03:04:c3:c3:e9:55:1b:92:37:6e:47:0f:
c4:18:e5:70:85:31:9e:a0:b9:17:d5:05:ea:f5:aa:
11:1d:d3:02:33:ce:66:31:03:c8:f8:20:51:4c:a2:
0a:77:16:e0:80:85:a5:0a:08:59:b3:27:2d:90:31:
98:a3:fe:76:7d:19:a0:2e:97:3e:84:42:ad:13:ff:
cd:07:6b:cf:40:94:36:07:d8:17:e9:35:9b:2d:26:
ac:1c:53:c1:35:c0:8e:38:a5:cf:a3:0e:2d:55:09:
5d:a3:9b:c5:e8:7c:6c:16:1b:fb:13:e1:52:c2:11:
b3:54:d3:e2:96:8b:92:b5:f3:0e:f6:b0:f5:54:0d:
61:cd:66:6b:75:e2:47:26:03:df:53:af:cb:94:48:
d5:27:b3:a4:c7:01:17:7d:14:12:32:eb:99:6f:e5:
77:1f:3c:79:50:08:61:63:ae:7c:f5:a0:0a:56:f9:
d0:89:e8:3b:73:6e:5a:d9:49:f0:38:c1:d5:c2:e0:
f7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:CB:5B:6A:A3:F8:92:5F:8D:3C:3E:19:17:0D:41:29:29:C7:28:5B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bMtbaqP4kl-NPD4ZFw1BKSnHKFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5e:25:c0:7a:da:58:97:bf:03:36:46:0c:ed:33:23:3e:f4:a2:
93:6c:fd:5f:f3:90:0a:64:a3:47:ce:3d:19:f2:25:04:2a:3b:
ae:72:1e:d3:55:73:be:13:27:95:56:2d:65:f1:92:75:8d:f3:
aa:90:46:7d:1a:4d:61:99:1d:ec:d3:55:66:4e:f1:9e:71:8a:
ba:a2:40:c0:a9:b8:79:18:31:ae:ab:64:4a:7b:f7:35:27:86:
37:46:2e:e6:10:3c:92:72:b6:d1:14:49:13:37:00:1e:5a:93:
cd:ce:c1:da:52:60:3a:04:3b:79:61:9f:24:ff:9a:4e:7d:3a:
f1:7c:32:3b:1a:5d:0e:c2:64:d9:1a:e9:75:46:a2:7f:b0:71:
43:10:d4:d8:55:f9:00:50:04:35:e9:38:87:1e:9c:70:0d:f6:
5f:a5:66:8e:56:a4:b6:ef:4c:bc:43:c1:a4:a1:ab:2d:10:9d:
c7:f0:33:a8:f3:2d:64:f6:94:68:33:ba:cd:c8:31:1c:41:ea:
ea:0d:b2:d6:3c:29:93:16:47:ce:c5:30:3d:c7:61:94:48:0e:
af:95:b3:df:24:a4:49:64:f3:79:9e:f1:72:7f:b9:e5:f6:98:
8d:fa:6e:71:3c:04:37:f8:4b:05:80:90:3b:75:b1:5f:3b:b2:
8f:3b:eb:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:37:56 2025 by rpki-client