Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bUWGycFfn3gzNNV2A5VCQuXVHWU.roa
File: bUWGycFfn3gzNNV2A5VCQuXVHWU.roa (raw, json)
Hash identifier: H6L7W8FT6mQOPo7bh8tcrVSCMngqgTjyP4uxlkISSV8=
Subject key identifier: 6D:45:86:C9:C1:5F:9F:78:33:34:D5:76:03:95:42:42:E5:D5:1D:65
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01822AC5D114AF7B293C16A4CC1F2617A0B9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bUWGycFfn3gzNNV2A5VCQuXVHWU.roa
Signing time: Sat 23 Jul 2022 11:16:23 +0000
ROA not before: Sat 23 Jul 2022 11:16:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:2a:c5:d1:14:af:7b:29:3c:16:a4:cc:1f:26:17:a0:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 23 11:16:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6d4586c9c15f9f783334d57603954242e5d51d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a7:80:45:2c:55:1e:b5:7e:84:83:04:86:67:
9d:3d:e9:d3:40:5e:ea:86:81:0e:c8:a9:c1:19:46:
79:ed:63:ae:e3:da:80:c3:53:2f:57:72:9f:ae:98:
fe:90:3d:a3:77:47:bd:9e:26:e7:ad:a9:0d:a8:1f:
fa:e0:d1:1c:14:6b:a7:5c:c6:e4:8f:17:10:7d:fa:
08:bd:e0:10:b9:1e:6d:3f:f7:6d:52:c2:e5:5b:30:
f3:5d:06:42:9a:d8:bd:cc:44:ee:24:3c:ab:f6:2c:
65:a0:c8:e5:8a:66:00:0a:db:fc:a1:90:3e:cf:ea:
c0:a6:88:44:bf:78:f9:cf:e6:79:e5:8f:3e:dc:4c:
c9:b0:26:29:69:3e:5d:8b:b3:96:1d:ad:cf:9c:67:
9a:20:a5:23:98:41:cc:dd:8c:77:78:00:dc:c9:9f:
d8:3d:30:18:61:28:8b:6c:fe:4c:cf:c8:cd:be:39:
db:93:22:3f:aa:46:18:96:6a:45:57:db:d7:c3:f7:
c3:1d:0d:67:df:de:ca:e0:14:39:12:50:23:a5:99:
bf:3c:ff:c2:68:65:9d:4e:04:db:ce:a0:54:fc:e0:
14:6f:3e:de:dc:b1:d6:95:82:3f:a2:0a:f3:18:57:
21:07:c2:c2:69:e0:e4:40:5b:a6:b3:43:48:3f:c0:
4e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:45:86:C9:C1:5F:9F:78:33:34:D5:76:03:95:42:42:E5:D5:1D:65
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bUWGycFfn3gzNNV2A5VCQuXVHWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
42:0f:09:34:52:bd:b4:23:e1:94:25:13:00:aa:4c:88:06:a5:
b4:de:b9:b6:52:26:98:56:c3:64:8a:91:60:df:b9:9e:74:0e:
b3:65:0f:ee:81:16:08:60:08:1a:d6:3c:1a:06:2a:37:0f:84:
6c:d1:e6:5a:e2:aa:2d:8b:b9:0d:e0:4b:d9:59:9e:60:b8:e3:
9b:26:0a:6e:85:0f:ff:be:17:44:3a:d1:40:2a:c1:4d:62:c3:
cf:80:2b:75:24:27:4c:7d:98:a0:d5:35:17:79:f4:00:40:17:
09:74:3a:8c:61:42:c5:d3:81:ff:55:0d:cc:3e:c4:1f:55:73:
52:e8:d2:27:08:f8:c1:ad:64:0a:91:52:0b:73:4f:38:e9:13:
c2:a2:fe:4e:ce:d6:48:1f:77:71:ab:b2:72:12:ce:b0:cb:58:
e2:16:5e:a3:6b:ca:2e:67:66:ce:3d:d1:2e:6a:a3:2c:c7:04:
40:e9:93:c2:42:ce:7c:9b:56:0b:f1:71:6d:28:81:6c:32:fa:
e6:66:95:4e:83:79:f7:bc:cf:8f:df:44:69:9c:5a:9b:05:cd:
18:e3:bd:9b:2d:18:7f:fa:c3:c6:ed:66:15:fb:86:e5:73:88:
1c:54:e2:c2:6d:15:53:95:92:f6:fe:60:5d:c3:9b:8d:f0:a9:
f2:c6:8c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:08:20 2025 by rpki-client