Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bcSfjsu2H6npaIEAo7EZCQe4ms8.roa
File: bcSfjsu2H6npaIEAo7EZCQe4ms8.roa (raw, json)
Hash identifier: JyAhVNsEEQ8cj8LG9YFSAnj0Wa1voF0lUzfZ27MIX+g=
Subject key identifier: 6D:C4:9F:8E:CB:B6:1F:A9:E9:68:81:00:A3:B1:19:09:07:B8:9A:CF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018535420CC5458E4951BEFC1E1073C78478
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bcSfjsu2H6npaIEAo7EZCQe4ms8.roa
Signing time: Wed 21 Dec 2022 15:16:39 +0000
ROA not before: Wed 21 Dec 2022 15:16:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:35:42:0c:c5:45:8e:49:51:be:fc:1e:10:73:c7:84:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 21 15:16:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6dc49f8ecbb61fa9e9688100a3b1190907b89acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cf:74:d9:b2:4a:41:0d:86:be:cc:aa:4b:95:
1a:98:59:9e:20:c3:3b:77:ce:d1:93:44:90:e5:27:
27:68:5c:80:15:3c:be:61:a2:43:dd:bd:3a:ed:b9:
89:23:c2:cf:7e:a3:ed:73:2b:d6:a0:d6:e3:20:d2:
15:58:75:c4:bd:d4:fc:3f:54:73:ac:44:ef:c6:e8:
17:91:5c:fb:23:62:da:6b:82:a2:8a:8d:cf:bc:9b:
98:d2:00:de:4a:15:85:cf:9e:91:31:e9:76:ff:9c:
93:a7:5b:96:cf:af:79:57:d5:a3:29:1f:ae:40:5c:
2a:f0:a1:a1:9f:89:dc:aa:9d:d7:80:49:d2:16:1f:
68:a9:93:ae:ab:8e:e8:08:b1:db:f3:dd:29:74:c2:
eb:d5:89:01:4f:b6:24:07:19:6b:66:88:48:c9:50:
6f:20:e3:a1:9d:a9:db:b5:35:c3:98:d4:ca:f1:11:
5c:3a:9f:22:d2:e4:ad:46:73:bc:df:94:45:a4:45:
84:e9:6d:f0:f4:36:4b:8f:0b:b1:4a:df:3a:bb:1b:
59:99:1e:41:01:eb:ba:94:6a:8b:cc:31:c5:47:58:
1f:48:61:ea:0e:f8:48:a1:ce:71:1a:b1:8f:64:8a:
80:f1:38:ee:11:f1:24:73:11:15:96:3e:fa:e4:cf:
6b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C4:9F:8E:CB:B6:1F:A9:E9:68:81:00:A3:B1:19:09:07:B8:9A:CF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bcSfjsu2H6npaIEAo7EZCQe4ms8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
81:62:d1:93:20:2e:30:4d:5e:be:26:98:9b:9a:d6:e3:06:8e:
b2:b3:37:1e:bd:32:55:3b:5e:90:4c:0e:7b:60:20:29:83:32:
8e:00:13:53:66:20:d3:49:65:30:28:cf:0e:99:1a:e0:88:19:
42:72:87:06:e3:45:0c:9b:62:52:50:32:13:65:54:7b:63:44:
b4:2a:9e:fd:41:82:1b:0e:cf:91:79:a6:a5:23:98:59:e1:55:
99:8d:cb:0f:42:04:70:10:3e:22:32:10:80:c9:0a:03:bb:d7:
24:0a:ce:02:f0:b8:fd:64:6c:ee:91:6d:cd:5c:a0:64:07:bc:
1f:73:3c:7e:27:32:4c:bb:f0:87:ee:30:37:fe:c4:bc:a6:33:
0c:d6:30:d2:be:87:cf:28:5b:20:77:fd:ab:83:cb:af:2d:ac:
59:7c:76:e9:ad:85:c0:68:da:10:17:36:1a:92:80:56:12:64:
b6:13:8f:dc:1b:c3:74:55:6d:6a:30:0e:f1:01:ea:aa:9e:74:
9e:4e:2d:ac:49:f5:f5:a0:a1:14:30:88:dc:38:30:6f:72:51:
7e:b3:8f:55:c3:22:a6:bd:a6:2d:ab:de:79:f2:3c:36:05:8f:
f5:b7:61:9c:1e:ba:28:a6:cd:d7:ee:a6:10:6e:b9:6c:3c:7d:
fe:0d:58:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:16:41 2025 by rpki-client