Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bVfA90wEhr_gChHc1NnuhxW9P5g.roa
File: bVfA90wEhr_gChHc1NnuhxW9P5g.roa (raw, json)
Hash identifier: Mpjq76wZFKAjUSrI4HYmbnm87NHpOObRceWEQk3/zNs=
Subject key identifier: 6D:57:C0:F7:4C:04:86:BF:E0:0A:11:DC:D4:D9:EE:87:15:BD:3F:98
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8D68B97A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bVfA90wEhr_gChHc1NnuhxW9P5g.roa
Signing time: Fri 17 Jun 2022 02:09:46 +0000
ROA not before: Fri 17 Jun 2022 02:09:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:56ba:5b78/128 maxlen: 128
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2372450682 (0x8d68b97a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 17 02:09:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6d57c0f74c0486bfe00a11dcd4d9ee8715bd3f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:91:fe:fd:65:d2:5c:23:99:fe:3e:53:74:98:
99:dd:c9:41:43:f9:4c:ff:f3:2c:f2:57:e7:08:de:
0c:57:0c:52:cb:cf:ae:53:87:8f:18:5f:24:7c:80:
0a:f6:e6:39:c2:8c:be:f4:44:28:bf:99:cc:99:47:
55:ea:5f:d4:1b:53:85:02:1d:cc:58:b1:57:2b:a3:
19:ce:96:0b:10:90:02:c9:19:75:4c:52:cb:1e:4a:
01:3d:30:40:e6:a2:5e:c3:4d:8c:e4:e8:29:f0:2d:
9d:42:a6:3e:fa:48:d2:d6:de:55:2d:b0:ac:92:32:
48:bb:bf:28:72:43:69:c0:58:eb:3f:ee:92:03:02:
a6:c9:49:4e:74:34:7c:f9:f7:e9:ed:14:7b:9c:17:
fe:c8:1e:aa:d1:d8:2c:6c:74:c8:0f:f2:49:a5:85:
28:20:c6:2e:4a:47:a9:48:8f:47:ae:e0:31:d1:c9:
ed:59:5a:39:17:85:3b:24:29:a6:8c:c7:8b:5a:2e:
cb:d3:49:f2:b9:f1:e1:d7:a6:bf:47:4c:d8:4c:f3:
84:e6:85:ec:44:55:71:4b:01:87:96:68:b3:d6:75:
78:d6:3a:be:e5:8c:a2:ee:49:a9:1d:7a:cb:2f:14:
2c:d0:7d:59:f7:78:d3:bb:7b:6f:0c:ce:7d:01:3d:
90:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:57:C0:F7:4C:04:86:BF:E0:0A:11:DC:D4:D9:EE:87:15:BD:3F:98
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bVfA90wEhr_gChHc1NnuhxW9P5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
45:35:e3:13:f1:a1:0f:5c:aa:12:11:00:b3:55:2b:02:fc:04:
fe:91:11:87:d8:24:38:97:5b:1d:00:e2:a3:2b:0b:1f:ca:38:
cd:78:3e:18:db:fd:65:a7:13:40:b9:b2:10:3d:05:c0:8e:97:
2b:55:39:cb:b3:9e:cb:57:41:78:39:c9:05:35:f8:32:c6:b0:
5d:7b:e8:00:af:52:e0:e1:cc:cd:64:f8:34:f3:e3:00:15:40:
7c:86:9a:2b:db:b4:bd:64:ec:f4:e1:e9:d6:f0:57:ec:5f:38:
a7:f8:f1:bc:a9:b0:7f:b2:4a:af:ab:ab:08:55:75:9e:12:15:
67:45:4c:c6:56:77:53:bb:95:0d:ac:f7:19:a2:92:79:22:4c:
3e:45:77:7c:5d:27:79:62:ef:f5:d1:e0:0d:89:d7:44:e7:12:
4b:43:60:cb:0e:02:ab:5b:dc:89:76:7c:df:57:35:34:a0:69:
9e:7d:29:39:07:9f:4e:66:ca:4f:57:a6:ba:4d:07:73:6f:87:
a9:68:33:61:87:dc:96:78:cb:31:e9:bd:66:40:c1:d3:bc:a7:
05:87:16:5b:dd:19:0e:af:2e:fa:97:2a:3a:73:1e:1b:6e:7e:
34:35:3b:00:44:20:c8:92:46:3f:5b:ba:41:1f:7e:7a:7d:5e:
ad:2e:53:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:09:50 2025 by rpki-client