Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bRARfaBGd6rGdv_Gs0Kwrxv3aq4.roa
File: bRARfaBGd6rGdv_Gs0Kwrxv3aq4.roa (raw, json)
Hash identifier: HTmQjjkKONUc7+tYz7Gsy/ExxCaQ91YP+MXM/TS3g/I=
Subject key identifier: 6D:10:11:7D:A0:46:77:AA:C6:76:FF:C6:B3:42:B0:AF:1B:F7:6A:AE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7729C7CC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bRARfaBGd6rGdv_Gs0Kwrxv3aq4.roa
Signing time: Thu 31 Mar 2022 08:11:35 +0000
ROA not before: Thu 31 Mar 2022 08:11:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1999226828 (0x7729c7cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 31 08:11:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6d10117da04677aac676ffc6b342b0af1bf76aae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4c:30:08:d8:db:13:89:74:72:80:a2:3c:4d:
36:c8:4c:a6:7c:81:01:aa:56:69:09:b1:2f:ea:44:
75:26:60:0a:ee:70:70:9b:14:c8:04:97:b0:a1:b8:
08:cd:8d:57:62:79:a1:39:a4:f8:40:fb:69:ad:e0:
18:47:aa:f6:15:46:4b:fc:0e:9b:ae:d2:0c:b6:90:
16:95:c0:bf:c3:39:1f:58:98:c8:2b:00:6f:f0:cd:
75:5e:69:a0:d0:20:b4:69:a2:cc:49:f7:ea:fc:8e:
44:05:d3:ea:b6:0d:f5:98:76:f2:e0:9d:9e:34:78:
32:ac:35:9d:65:80:55:0d:28:da:f6:0a:48:b6:81:
60:8b:a4:2d:20:1e:76:09:33:de:e4:35:17:70:6a:
d0:c5:6f:d4:56:da:45:96:ed:12:d0:e1:39:b5:03:
6f:91:23:0b:90:4f:7f:d0:fe:f5:32:15:fd:93:12:
f4:bb:f7:0d:87:1a:a9:f3:1c:eb:1e:18:9d:a6:2b:
a3:09:f2:4b:91:ab:0f:ac:3c:b8:52:be:34:03:1d:
61:f4:7f:d1:9f:f1:73:50:95:0c:ec:ce:bd:29:2e:
8a:3c:20:a5:60:76:11:28:45:19:c3:8b:1c:e2:42:
28:4a:f4:62:78:05:39:b6:73:23:98:5a:8a:cb:c7:
86:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:10:11:7D:A0:46:77:AA:C6:76:FF:C6:B3:42:B0:AF:1B:F7:6A:AE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bRARfaBGd6rGdv_Gs0Kwrxv3aq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
82:4b:4d:36:e5:6f:3f:ba:d6:d0:11:1f:75:d0:e2:74:c7:19:
38:10:1f:00:e3:f0:58:e0:de:1a:80:89:b7:29:d8:21:a5:ac:
99:ca:76:ec:7e:8e:61:8f:2c:ac:58:9d:d7:88:e4:aa:9a:9a:
3f:38:b7:d1:7c:16:df:31:d4:bc:94:51:02:33:1c:b0:8f:de:
10:33:60:0c:b4:43:55:81:c9:dc:e0:d7:38:3e:b6:c3:f8:7c:
6b:b9:59:bf:b4:ff:74:45:ba:ab:b7:78:ab:fd:19:05:5c:4d:
69:d3:1f:67:f3:9e:44:78:de:bd:3d:9a:9b:3c:3f:4f:4f:6e:
6f:66:71:1b:1b:18:34:1f:ed:d4:9e:ea:80:b4:6a:d9:22:52:
8c:28:d3:f3:2b:0f:1d:b1:2b:83:9f:4a:b6:59:4c:39:c9:a2:
d1:e3:d0:5b:fd:d1:47:7b:dd:60:4d:97:f1:a5:47:0c:d2:d5:
10:ee:30:43:1f:aa:d2:a3:f0:80:c0:ee:50:30:62:6c:15:13:
b8:06:01:c5:0e:91:16:31:84:03:f0:03:64:b8:d3:fe:42:76:
b8:76:8e:c6:76:cc:42:84:8d:c0:53:6b:97:8b:30:8b:2c:2a:
10:2d:5e:63:7b:b3:22:f9:b6:13:37:43:fa:ee:86:d5:85:04:
ab:f0:d2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:41:16 2025 by rpki-client