Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bvZc4A5jpoA7sMp9mCH_CbUQrcg.roa
File: bvZc4A5jpoA7sMp9mCH_CbUQrcg.roa (raw, json)
Hash identifier: 6NRbat+NyRoi8ihpfsbtYgpotQh3npuWE7gll6xr7Xw=
Subject key identifier: 6E:F6:5C:E0:0E:63:A6:80:3B:B0:CA:7D:98:21:FF:09:B5:10:AD:C8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185071940ADD7D1228DCDAD778A8602F942
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bvZc4A5jpoA7sMp9mCH_CbUQrcg.roa
Signing time: Mon 12 Dec 2022 16:09:33 +0000
ROA not before: Mon 12 Dec 2022 16:09:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:07:19:40:ad:d7:d1:22:8d:cd:ad:77:8a:86:02:f9:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 12 16:09:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ef65ce00e63a6803bb0ca7d9821ff09b510adc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:43:ac:3c:6e:6d:31:38:80:f9:aa:13:db:2b:
05:c1:d2:8f:45:65:b4:fc:ae:54:ae:5b:d5:45:af:
86:75:04:f9:43:a0:1b:5a:22:b0:f3:82:73:df:ed:
40:b6:a5:ec:60:3e:19:d8:95:85:b9:21:6e:55:fd:
2e:58:61:c0:fc:ad:71:99:db:ab:be:4f:b5:0b:24:
fa:72:25:c5:8c:d5:de:0d:69:48:df:f7:4f:29:26:
98:9d:ae:93:bf:83:7a:da:43:7b:a4:f8:d5:cc:08:
4b:7d:ab:00:11:4c:4b:b5:bc:da:2c:95:53:4b:7f:
7a:c5:74:07:3a:ad:5f:e6:57:28:36:88:33:0c:54:
14:71:ba:45:17:3d:4f:c1:e9:62:b7:ee:09:d9:68:
18:e5:c1:a9:97:3a:60:b4:94:64:26:e7:d5:6c:a6:
0b:0d:9a:8b:68:77:4f:fc:81:5d:2f:96:95:88:ac:
8f:15:83:51:91:0e:5b:f7:0f:0e:53:ad:77:24:3e:
e1:2b:eb:54:9b:66:e0:01:ac:43:e4:85:e5:14:27:
16:1f:da:dc:25:31:28:53:26:b7:03:93:d4:6b:62:
11:0f:9d:b8:02:cb:68:1e:28:b1:67:ca:ac:5c:3d:
9c:5a:69:10:2b:e3:f8:be:83:9b:ee:3c:6b:9b:36:
8a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F6:5C:E0:0E:63:A6:80:3B:B0:CA:7D:98:21:FF:09:B5:10:AD:C8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bvZc4A5jpoA7sMp9mCH_CbUQrcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
18:fe:d9:cb:24:10:7e:85:80:11:78:3e:ff:b5:a6:5f:1e:56:
e1:b9:92:cc:2e:3a:d7:9a:e3:45:ae:eb:e5:03:ce:96:20:e6:
e6:6f:bf:94:a8:1a:5e:00:65:68:2d:e5:70:97:bb:8f:4f:55:
b2:9d:19:91:6d:a3:98:a1:f7:5c:31:f3:ae:da:32:cd:3f:f6:
c5:be:e5:26:e8:97:f8:cf:66:c8:91:68:78:cb:4e:3d:fe:8f:
c7:23:db:f7:e2:b6:13:c9:91:58:7a:7e:1b:25:aa:9b:1e:20:
86:21:28:91:34:d4:09:79:d9:f1:75:db:cd:d6:c8:1a:2e:a4:
fc:ba:d4:d3:39:93:a1:6b:3b:3d:54:f6:39:3f:9e:5d:dc:c6:
ea:2e:8f:95:0b:78:1d:99:60:9e:f7:94:d3:c6:47:8c:50:c8:
83:98:af:41:fe:f6:2e:7a:e9:e5:6e:a2:48:0b:3b:e9:f3:68:
42:0e:ac:ee:ad:d4:63:1b:b7:ce:56:7b:56:01:7e:b0:a4:45:
58:5a:bb:ba:5f:2c:03:25:20:45:17:33:c1:5e:d6:2e:b4:83:
ff:ac:c3:44:e4:84:60:5e:e3:26:34:bc:6a:85:cf:0a:bb:45:
ae:19:43:1c:63:bb:54:a6:dd:ad:cb:7d:6c:fe:e6:74:8d:ed:
d3:b3:c7:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 04:11:22 2025 by rpki-client