Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bijE2LrNhMD5U7rAtaTP8SDiag0.roa
File: bijE2LrNhMD5U7rAtaTP8SDiag0.roa (raw, json)
Hash identifier: Erv55hQQEk1kZCKTd51ehtLMsyKMk3x3LchHcj+puF4=
Subject key identifier: 6E:28:C4:D8:BA:CD:84:C0:F9:53:BA:C0:B5:A4:CF:F1:20:E2:6A:0D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01897A15F559998517E2506F1C97510D2195
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bijE2LrNhMD5U7rAtaTP8SDiag0.roa
Signing time: Fri 21 Jul 2023 20:13:26 +0000
ROA not before: Fri 21 Jul 2023 20:13:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:7a:15:f5:59:99:85:17:e2:50:6f:1c:97:51:0d:21:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 21 20:13:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e28c4d8bacd84c0f953bac0b5a4cff120e26a0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:68:d8:01:e1:22:c6:39:76:fe:d5:79:eb:2b:
aa:a4:22:e2:62:f4:2c:89:98:84:8a:65:fe:87:93:
60:b4:a9:96:be:8a:97:46:f5:b4:c4:6f:d9:c3:ad:
92:92:8d:3e:70:36:06:00:ab:cf:c0:96:da:fe:60:
5b:37:64:c2:84:99:ca:2d:ce:43:b7:dc:90:41:ac:
a8:4a:3e:8f:b5:f1:5f:d2:46:21:3a:77:04:a0:03:
1e:81:3f:08:e7:21:f7:9c:02:3a:e4:1a:26:89:6e:
1f:aa:f2:ba:81:b6:3a:2e:92:aa:cb:9c:db:1b:ab:
8e:06:0f:23:99:29:e6:b1:24:c5:ad:6e:5a:4a:a7:
f5:c7:d2:c4:43:8a:a1:54:27:cb:a6:76:25:a3:40:
a2:53:72:d6:d2:71:2e:63:bd:d3:ed:31:b6:fb:86:
af:8d:a5:ee:56:a9:46:40:18:21:51:8e:fa:06:e6:
89:d1:0e:d1:30:66:79:d1:0a:1a:9b:84:39:5c:15:
ce:8f:d5:d0:f7:f8:c5:9d:f2:9e:03:8d:cd:17:b7:
3b:56:41:68:37:c2:7a:47:15:9b:31:17:91:5f:25:
58:b3:77:cf:f0:c5:f1:e8:0b:4e:fe:3f:5c:eb:19:
c3:15:41:db:e1:02:7f:6b:a9:e7:23:84:51:1f:8e:
e3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:28:C4:D8:BA:CD:84:C0:F9:53:BA:C0:B5:A4:CF:F1:20:E2:6A:0D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bijE2LrNhMD5U7rAtaTP8SDiag0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
30:aa:c9:03:25:24:72:72:c8:64:21:1a:c0:0d:32:71:2c:0e:
9f:d4:cc:52:3a:c4:d5:bf:ff:13:0d:81:b5:9d:dd:a5:c1:4f:
90:f8:fc:79:44:1d:04:9b:19:cd:b7:36:96:78:93:8c:d6:d3:
02:22:33:11:ed:a7:9b:09:d2:cc:79:5b:e4:14:a5:3f:d4:2f:
34:7a:53:1b:a6:46:52:14:24:63:c5:26:04:5a:31:b1:53:be:
e3:3f:29:21:c4:09:b4:9f:b2:33:0e:59:d5:86:3c:d7:93:06:
3a:ec:0c:3f:01:95:57:fb:40:46:29:89:0f:86:1d:5a:c3:14:
4d:5d:a3:b3:37:3f:cf:e9:c9:4a:03:38:1c:48:3a:74:18:28:
be:f2:06:49:c3:37:9c:11:45:24:72:56:36:da:ab:c7:77:74:
2d:f0:5d:f0:60:ab:bd:ed:de:b0:00:5b:5b:b3:dd:13:b7:4b:
99:4a:f3:24:93:aa:dc:e5:2d:28:89:06:d3:6d:f5:76:2c:76:
ad:a1:fc:9c:2e:e5:77:9b:a9:88:17:68:e2:76:83:f2:95:c4:
3c:ca:ef:63:d3:bd:4b:06:b3:71:f9:e6:40:80:40:63:36:08:
ac:75:67:07:fa:6e:bc:58:48:82:d2:7f:5d:08:2d:c3:17:bd:
9f:37:ee:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 22:55:22 2025 by rpki-client