Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bRrnP2U3b5ybVKLYyI9RTKyrqTg.roa
File: bRrnP2U3b5ybVKLYyI9RTKyrqTg.roa (raw, json)
Hash identifier: BNuOv343FrmTFJRvU9p+OCAPPCS/EcUeNF0lhKY2CW8=
Subject key identifier: 6D:1A:E7:3F:65:37:6F:9C:9B:54:A2:D8:C8:8F:51:4C:AC:AB:A9:38
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018415EE4153A3B7E7D3D209AC770E1675A3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bRrnP2U3b5ybVKLYyI9RTKyrqTg.roa
Signing time: Wed 26 Oct 2022 20:14:06 +0000
ROA not before: Wed 26 Oct 2022 20:14:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:15:ee:41:53:a3:b7:e7:d3:d2:09:ac:77:0e:16:75:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 26 20:14:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6d1ae73f65376f9c9b54a2d8c88f514cacaba938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b8:ec:2c:48:6a:93:76:24:8b:a6:7c:be:a5:
a4:c8:cc:7e:a0:38:23:8e:fb:13:97:04:ef:8f:cb:
a3:9c:2a:77:41:35:ec:32:85:42:7c:e0:1f:02:3f:
59:ef:36:29:9b:9a:59:39:85:b6:99:6a:2e:36:aa:
07:87:52:5c:af:8f:38:d7:77:4c:27:8a:14:09:43:
d8:bf:62:c1:bb:e1:00:dd:5a:5a:db:28:2c:cf:a0:
e6:85:03:b9:58:fa:ac:f5:dd:6e:dd:47:fe:ca:51:
d1:85:00:39:f7:23:ea:68:e1:b8:9a:e4:c3:66:a4:
e1:1e:4f:54:d1:89:95:af:4a:19:1c:7a:e5:93:eb:
aa:d1:b0:82:8b:ef:33:f7:36:1d:08:21:16:d0:19:
f9:fe:96:8a:2c:6c:8f:ac:5d:56:12:97:e6:8c:7e:
40:7d:a6:45:24:a0:e9:79:ea:62:ce:06:14:81:db:
6f:71:0e:fa:05:d5:84:db:e7:83:69:7f:20:ea:98:
3b:de:c4:e1:d5:d6:d0:2d:31:d2:be:d0:75:25:a4:
74:7e:03:4c:5b:5c:c2:08:1c:f5:4b:e3:34:c2:e9:
61:c8:5b:cc:75:05:fe:39:56:af:72:0e:c5:ce:c6:
8b:86:eb:e0:19:7e:13:21:51:f5:3d:c5:b5:e2:62:
38:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:1A:E7:3F:65:37:6F:9C:9B:54:A2:D8:C8:8F:51:4C:AC:AB:A9:38
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bRrnP2U3b5ybVKLYyI9RTKyrqTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7a:b2:40:b0:96:39:b0:ab:7d:64:5b:3b:0b:d5:55:75:6a:5e:
ed:7d:75:5d:f7:fd:63:06:a8:fa:3e:e2:59:0e:0d:0e:f9:bc:
86:9c:4f:2f:b8:4b:9f:9e:ec:9b:51:29:52:cf:e4:53:e9:3b:
8e:14:ad:79:eb:3d:50:57:8b:52:f5:06:d6:2b:03:79:af:7f:
50:12:f5:c7:ea:d2:c4:43:d0:33:87:e9:c6:97:29:81:e5:3a:
9d:e1:b4:b9:2c:1a:2c:98:92:fd:1f:73:d0:dd:dc:27:02:d7:
44:6a:8e:42:f8:4f:f5:93:e5:0e:8f:3e:ef:81:75:e5:68:83:
13:81:93:65:b2:4d:fa:61:f6:2d:0b:97:ae:78:a3:9d:6a:47:
37:f5:4a:66:fe:25:52:22:33:b7:54:7d:60:0a:ac:7a:fd:02:
7d:91:16:40:a9:24:f6:18:65:08:79:52:4d:5d:f9:a7:11:7d:
56:c2:a6:e8:44:84:64:98:12:26:b6:d6:33:3e:9f:ad:0b:92:
48:8e:10:a5:36:2f:85:97:0f:80:c1:83:2a:3f:d7:95:43:d9:
e0:50:6a:a0:81:9d:c3:dd:f2:cb:59:02:9d:a1:4a:33:71:79:
9c:88:44:45:b6:a4:23:c5:d3:96:51:6a:66:eb:43:8e:d2:a1:
c0:d0:2d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:08:30 2025 by rpki-client