Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bR6DIaoOIDjcWminlso4MQOO-LA.roa
File: bR6DIaoOIDjcWminlso4MQOO-LA.roa (raw, json)
Hash identifier: TVx5VLaStrO3l2j2F/0jeiHJVfKqbT6iRXCyRnKrp9U=
Subject key identifier: 6D:1E:83:21:AA:0E:20:38:DC:5A:68:A7:96:CA:38:31:03:8E:F8:B0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 74774487
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bR6DIaoOIDjcWminlso4MQOO-LA.roa
Signing time: Mon 21 Mar 2022 16:11:53 +0000
ROA not before: Mon 21 Mar 2022 16:11:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1953973383 (0x74774487)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 21 16:11:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6d1e8321aa0e2038dc5a68a796ca3831038ef8b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:98:0a:17:11:55:f9:9f:5c:13:7c:53:2b:67:
e6:df:92:2b:70:57:03:96:a1:9e:bb:96:14:3e:64:
5d:05:6c:1b:39:73:f7:95:5b:bf:f5:ae:97:82:d8:
73:3d:74:bd:2d:4d:25:77:90:c0:f2:0d:2a:d7:03:
0e:40:b9:5f:c7:48:74:20:0b:c9:f4:8f:0e:7d:06:
02:28:79:2b:bb:8a:9b:93:4b:2b:c8:96:65:81:9c:
2f:12:f7:32:a2:91:10:f0:bc:e3:9d:c3:ee:0e:13:
18:7c:10:c9:96:b7:db:03:4d:96:c9:95:36:f6:ab:
85:bd:97:a9:5b:dc:2b:76:6b:5e:cb:cc:ac:e0:89:
d8:1b:27:4a:62:8d:5e:8b:28:39:dc:c5:a7:6a:b3:
3e:c0:2e:fa:2b:37:7b:d4:5b:c1:40:ee:d1:c5:a2:
8f:8f:38:7d:ff:c4:35:2b:03:55:f5:00:3d:a5:44:
fe:1e:ff:39:d1:99:16:43:e7:96:ca:87:03:5c:e0:
5a:76:3e:03:ad:c3:7f:dd:5f:c5:78:47:76:39:2f:
e0:5f:19:e0:65:60:89:53:aa:2a:d0:10:fc:11:bf:
e3:d7:55:c7:a7:33:7d:91:be:4a:30:dc:6a:c4:a0:
fe:ed:24:5d:0e:cb:eb:54:47:71:4f:fe:1c:20:0c:
da:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:1E:83:21:AA:0E:20:38:DC:5A:68:A7:96:CA:38:31:03:8E:F8:B0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bR6DIaoOIDjcWminlso4MQOO-LA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a7:c9:16:53:51:90:61:3f:16:66:8a:29:ca:78:11:e8:68:2b:
31:31:41:f0:b4:56:f5:6d:3c:c1:12:c8:17:21:11:50:4f:9f:
37:0a:9b:6d:e0:b1:e0:49:e0:37:96:43:46:27:87:71:47:4c:
6b:27:e9:04:58:47:11:d4:af:26:6e:95:c3:08:0f:64:65:93:
b9:3b:77:51:05:9f:2d:c9:de:52:3a:ba:20:04:af:25:2b:f0:
40:e9:b8:99:89:35:58:2d:69:81:98:62:d8:d4:64:79:47:8a:
9b:cc:68:31:d9:3f:aa:7c:e6:e6:86:8e:ca:71:33:66:d0:a3:
69:ee:e4:2c:ae:fe:d2:1e:0f:26:2a:d9:7d:96:77:a3:48:3f:
c2:ab:94:8a:d0:c1:f7:62:83:4b:83:3a:7a:d2:fa:2a:6b:6f:
8c:22:75:5a:78:b7:a5:58:1c:3b:f1:e3:21:a0:f0:4e:f8:d0:
32:ca:a4:6c:d6:79:7e:a0:24:b8:65:a3:0e:6a:5b:e4:0e:58:
81:b7:ea:c8:62:ec:a9:34:af:fb:93:82:f1:16:79:90:95:1e:
c8:49:c1:04:5e:16:d9:88:3b:9b:11:30:74:62:7a:2e:bc:d5:
63:f2:ea:cd:be:2a:c6:d6:39:7f:31:99:cd:b7:21:3c:f9:37:
03:63:03:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:59:24 2025 by rpki-client