Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bqlw8W4B6XoQZRbveaPvX6pFjdM.roa
File: bqlw8W4B6XoQZRbveaPvX6pFjdM.roa (raw, json)
Hash identifier: /dVkPIIAQeh3wuYvM8VKJtOAxqYwcQzcvraluT8puzw=
Subject key identifier: 6E:A9:70:F1:6E:01:E9:7A:10:65:16:EF:79:A3:EF:5F:AA:45:8D:D3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6B6DDBED
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bqlw8W4B6XoQZRbveaPvX6pFjdM.roa
Signing time: Thu 17 Feb 2022 17:16:33 +0000
ROA not before: Thu 17 Feb 2022 17:16:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1802361837 (0x6b6ddbed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 17 17:16:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ea970f16e01e97a106516ef79a3ef5faa458dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:de:2d:ee:5c:2f:42:89:19:c3:ed:5a:97:82:
e9:75:15:5c:4a:5e:18:e0:5c:cd:ea:b9:e1:cb:a7:
69:1a:6a:ef:bc:c6:97:79:5b:0a:a1:ad:ee:c4:9e:
22:99:18:d9:ca:ef:6a:be:92:ff:96:0d:55:2f:29:
13:b0:73:e1:2e:01:50:b4:f3:a9:a3:f9:b1:b2:79:
e0:28:9b:96:59:53:49:72:01:6c:40:f2:4d:0e:6b:
75:a2:5c:7a:ac:17:77:e2:6d:8c:ff:5c:00:a2:f5:
c7:f4:3b:db:68:88:65:72:c1:e6:4f:04:40:19:1f:
e9:9f:f4:e2:d0:c1:16:e4:66:a4:23:01:57:63:0e:
10:30:cc:06:eb:d1:8d:b5:f5:a7:f5:0f:a6:1f:93:
2d:2c:40:7f:e4:04:8f:d9:5b:f5:a8:9f:e3:e4:50:
90:23:a7:93:e4:e0:ca:9e:c8:f2:43:02:75:57:31:
34:6d:04:34:f9:32:31:4c:57:da:0d:92:0b:ce:76:
d9:81:9b:3e:9f:be:7f:69:5e:2b:39:d6:ba:bd:26:
26:ba:8f:03:2a:f1:d6:2f:6f:5d:eb:d8:25:5f:23:
2c:48:c0:a7:93:82:ee:8c:fe:64:42:94:4c:cf:e6:
ad:da:9b:8a:25:80:e8:c8:b6:c4:78:63:56:fd:3d:
98:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:A9:70:F1:6E:01:E9:7A:10:65:16:EF:79:A3:EF:5F:AA:45:8D:D3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bqlw8W4B6XoQZRbveaPvX6pFjdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
34:ae:6b:bb:39:78:87:57:5e:53:4c:1d:24:80:54:57:38:7e:
fb:6c:10:b3:c7:7b:90:8e:16:c8:ab:a2:54:e8:af:80:1d:58:
aa:28:e0:ca:ad:8b:9c:a7:e9:12:e5:cc:19:88:a1:fd:d2:97:
43:ca:c6:74:34:c3:f6:55:d3:0c:89:f0:43:2a:71:06:8d:00:
02:2a:eb:55:f7:1f:b8:54:66:51:fa:c1:91:c6:f8:b0:40:12:
a6:0f:36:ed:76:3b:8d:2c:c0:5f:a4:ab:63:6b:e8:9c:19:10:
bd:75:8d:77:07:6d:8f:a4:06:ee:9a:6e:24:d9:b0:ae:50:b3:
b4:ef:19:da:e2:bc:d6:be:e2:7d:10:3c:b0:da:85:f2:ba:aa:
61:01:70:ad:13:08:28:9f:83:ea:fc:68:83:49:33:2e:f0:88:
60:5f:24:05:bf:7e:2c:67:6b:8d:e1:2d:a0:b0:d9:56:8e:65:
b8:4c:68:e9:1d:d9:3e:b3:d5:b4:4d:ca:60:45:00:70:f9:c7:
45:45:5c:ab:59:39:6e:fe:87:40:12:ee:f0:bf:a6:34:86:bd:
40:10:ca:3c:94:f1:dd:b9:6a:b4:86:9f:f1:85:86:b6:9f:2b:
24:6d:c7:cf:98:7e:9b:94:39:83:77:f2:9e:cd:54:6d:88:f6:
4d:bd:89:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 09:51:00 2025 by rpki-client