Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bs2TQEHl1aVX5iyHU8foebFBF6M.roa
File: bs2TQEHl1aVX5iyHU8foebFBF6M.roa (raw, json)
Hash identifier: Q8PKTeEjaLQfflP6YoqUaMaRBmxmclEyNHIPQIunusE=
Subject key identifier: 6E:CD:93:40:41:E5:D5:A5:57:E6:2C:87:53:C7:E8:79:B1:41:17:A3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181F88A1DA3210F5AE9350A575F079DF234
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bs2TQEHl1aVX5iyHU8foebFBF6M.roa
Signing time: Wed 13 Jul 2022 17:10:09 +0000
ROA not before: Wed 13 Jul 2022 17:10:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f8:8a:1d:a3:21:0f:5a:e9:35:0a:57:5f:07:9d:f2:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 13 17:10:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ecd934041e5d5a557e62c8753c7e879b14117a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:31:fc:6c:8c:c9:b1:41:79:42:34:74:fe:31:
e2:55:9c:03:8d:d7:e8:61:08:b8:cc:38:b2:2e:0f:
82:ed:e1:da:ad:27:ea:19:ef:a4:77:48:76:ea:62:
cb:a1:2d:fc:8e:d7:d6:92:30:8f:26:76:57:9d:c0:
81:b5:89:82:af:43:18:93:1d:d5:82:0e:cc:bd:9a:
7b:0c:b0:2f:0d:7d:b2:13:b6:a7:23:af:ba:fd:85:
15:72:f3:86:4e:2a:0c:37:c0:f3:7c:24:46:68:3f:
23:f6:42:f7:54:be:64:5a:61:85:a9:51:bf:5d:3d:
9e:69:1d:f9:5e:15:18:ea:76:fb:16:1e:2d:87:0c:
d7:28:3c:22:2b:13:93:1a:0a:0c:36:44:71:11:2a:
8a:0e:1c:d7:f6:38:00:39:9a:57:06:8d:21:d2:eb:
99:03:8e:77:51:56:d9:e9:e0:9f:69:ce:84:1f:ba:
ed:a7:2b:00:cd:1b:31:c1:19:27:d7:d4:6f:60:44:
ba:32:6f:f6:e1:ca:08:4a:dd:d6:46:26:cc:3e:32:
5a:fb:4e:c7:7b:d5:df:28:8e:ff:21:3e:c9:67:18:
eb:e5:42:eb:5d:87:81:f7:c5:f4:e6:9b:33:c6:24:
f6:49:97:80:4a:11:8c:8e:90:94:e2:12:80:44:e9:
32:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:CD:93:40:41:E5:D5:A5:57:E6:2C:87:53:C7:E8:79:B1:41:17:A3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bs2TQEHl1aVX5iyHU8foebFBF6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
93:a0:56:d5:18:57:be:38:9e:7f:9d:4b:70:3a:01:ec:77:c6:
1b:18:79:36:06:49:bb:b2:21:3c:55:58:dd:c8:9e:c7:38:a8:
1e:a3:3c:3c:80:d1:c1:c0:53:b0:be:fe:e0:10:81:fd:7d:b1:
5f:06:33:a2:69:b6:0a:5f:fc:b6:8c:58:d5:da:c1:a7:d6:e3:
73:dc:2a:7c:47:ba:6a:96:0c:d4:0d:70:36:54:04:b7:8f:4b:
d3:b9:5d:aa:77:a2:a5:a9:06:7a:70:96:a1:6d:b8:2d:76:44:
2e:77:41:28:af:73:ca:f8:f7:7e:fe:f0:78:0e:44:ae:78:b9:
ec:94:5d:b2:e1:13:7f:54:50:a7:4b:ef:18:82:04:4a:dc:31:
f8:57:e5:85:32:e3:f8:7c:46:c0:0f:c0:66:af:d2:b1:38:01:
d8:09:03:ab:3b:6f:5d:a5:d8:42:b6:d5:cf:c5:e1:b8:30:e6:
ee:f8:45:bf:2f:c7:f3:c7:7a:c5:8a:72:6b:b3:eb:5a:7e:28:
dc:18:57:8f:e5:ff:ac:80:5e:98:66:f3:ca:2f:71:61:1f:eb:
8c:25:5d:4f:88:c3:5b:e9:ba:61:33:ef:2c:9a:9d:3f:1e:8d:
ba:5c:89:05:12:8b:1d:9e:a0:7c:f1:27:af:18:08:28:f8:3b:
9f:35:70:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:30:34 2025 by rpki-client