Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/be8FVKc-Js5sj-XQjXZ7QIO-TCo.roa
File: be8FVKc-Js5sj-XQjXZ7QIO-TCo.roa (raw, json)
Hash identifier: 1NU0wBJoY/SQqRmQGmngTfwNhB1GrVsMIMQ7ga9b7do=
Subject key identifier: 6D:EF:05:54:A7:3E:26:CE:6C:8F:E5:D0:8D:76:7B:40:83:BE:4C:2A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184D7AF1DFF3AFB901D113AB89A9DA49C54
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/be8FVKc-Js5sj-XQjXZ7QIO-TCo.roa
Signing time: Sat 03 Dec 2022 11:11:28 +0000
ROA not before: Sat 03 Dec 2022 11:11:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d7:af:1d:ff:3a:fb:90:1d:11:3a:b8:9a:9d:a4:9c:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 3 11:11:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6def0554a73e26ce6c8fe5d08d767b4083be4c2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:20:a0:8a:9b:d1:d6:2d:5d:0b:50:b0:1f:20:
ec:7b:f1:b0:1a:1b:28:5b:7f:c7:b7:df:a5:2f:c0:
bd:69:e5:6b:0a:cb:2b:07:b2:62:8a:08:c4:00:11:
53:e2:65:8e:b4:f9:61:7c:a5:a0:a2:d4:db:e0:e0:
11:c4:79:f4:0a:16:bf:f2:dc:93:c4:63:ac:ba:6b:
12:42:e8:66:06:77:d6:28:87:bc:ef:de:fa:89:38:
40:c9:38:c5:f0:b2:0e:ef:6c:c7:a2:8c:55:03:49:
c3:96:6f:8c:bc:d5:4e:5b:5f:25:08:6f:09:54:69:
39:fa:e7:10:2a:56:08:fa:28:f0:84:90:b2:aa:38:
10:6a:e7:5b:85:b6:0d:8b:56:f6:a2:c0:3f:5a:77:
77:c3:b5:96:38:90:8d:04:8f:2f:92:3c:4c:4f:b4:
eb:c3:ce:f1:12:96:02:90:9d:13:bb:31:81:97:94:
c7:6c:1b:e3:89:e9:b9:6c:65:2a:8a:58:12:80:9e:
a4:b2:50:3b:84:2e:a4:f1:ed:6f:79:91:95:59:a8:
9f:b8:2f:ac:44:57:1b:23:4c:4f:c0:64:0f:57:29:
c1:ba:f4:2b:d1:f7:ab:55:d1:72:0e:6d:d3:b7:c5:
2d:31:38:d5:2c:68:7b:76:bf:b5:dd:11:44:02:5e:
0b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:EF:05:54:A7:3E:26:CE:6C:8F:E5:D0:8D:76:7B:40:83:BE:4C:2A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/be8FVKc-Js5sj-XQjXZ7QIO-TCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
62:91:80:3e:10:74:77:48:35:3f:10:da:46:1e:9b:03:08:df:
1b:e5:bc:86:0f:04:dc:30:72:0f:f2:10:90:66:e1:6c:fb:85:
26:1c:df:01:3b:78:9f:ee:a8:7a:15:20:98:32:7a:53:a8:4a:
ce:41:e9:2b:04:27:bc:0e:ee:ee:da:1a:48:2b:02:63:48:35:
6f:67:a8:00:fb:96:91:82:4f:cf:55:7a:ee:42:4c:6f:89:86:
7d:70:23:33:18:d3:26:3a:b4:58:11:fa:90:42:68:eb:84:03:
e7:a5:88:56:49:97:7c:b5:07:9b:92:ac:4e:1d:fc:a6:11:a9:
d6:c4:cc:82:6e:14:18:44:bd:5e:1d:6a:a1:23:8c:e0:c5:cd:
1b:35:97:b4:c6:44:1b:db:24:27:f7:01:75:f9:21:63:3d:c2:
94:73:b8:11:15:69:10:cc:af:9a:0c:2e:7b:3e:8d:84:df:04:
30:b4:44:d7:d4:86:b9:7f:37:75:d2:91:5c:3c:7a:a1:76:5d:
63:9b:4a:36:9b:fe:af:19:63:6d:ca:0b:eb:da:da:3e:7d:91:
bf:5e:84:4f:d4:34:87:bd:58:7d:51:b7:01:5b:41:1c:d1:4a:
65:10:5f:3a:85:7a:cc:4e:a9:97:33:72:c5:57:2e:48:bc:3b:
14:41:0d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:44:03 2025 by rpki-client