Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pB5EydQEKmAQLtjFHLwrbYtA0yQ.roa
File: pB5EydQEKmAQLtjFHLwrbYtA0yQ.roa (raw, json)
Hash identifier: nESyCITf4KvFiGaGIENPGrQyE0u9ehG5FxZtgoREHO4=
Subject key identifier: A4:1E:44:C9:D4:04:2A:60:10:2E:D8:C5:1C:BC:2B:6D:8B:40:D3:24
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01856138AA7119217C45FDFC96C4A399AA44
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pB5EydQEKmAQLtjFHLwrbYtA0yQ.roa
Signing time: Fri 30 Dec 2022 04:09:41 +0000
ROA not before: Fri 30 Dec 2022 04:09:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:61:38:aa:71:19:21:7c:45:fd:fc:96:c4:a3:99:aa:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 30 04:09:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a41e44c9d4042a60102ed8c51cbc2b6d8b40d324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:32:a7:b5:23:9a:05:cc:bd:8a:0e:dd:05:d6:
3f:98:51:f8:dd:c1:43:ee:db:fe:97:20:d6:e0:3a:
87:85:d9:e0:02:d1:3d:b6:3f:98:3f:01:1e:3f:e5:
4d:8b:0b:94:8d:88:33:73:09:21:7f:26:a7:78:9c:
2f:e1:1a:e0:e3:09:ec:65:91:89:97:71:98:9f:dd:
72:c5:e6:c1:fc:ae:d5:88:78:a8:9a:78:ee:90:2b:
ca:07:90:0c:da:58:08:41:b5:db:6a:51:75:d1:85:
36:e8:40:c8:0c:35:ea:0d:32:f5:80:e1:e0:69:fa:
fc:43:a5:22:93:ea:c9:92:60:38:ad:3e:2a:3b:4f:
89:06:26:8e:db:fa:2b:73:35:60:c4:73:ac:09:f2:
f1:7b:21:9e:84:f8:92:4d:c8:0e:da:f2:63:83:e7:
06:54:53:a3:db:ca:5e:8b:81:04:42:16:09:d3:3e:
b2:57:e8:6a:a1:82:7b:36:86:16:f5:6c:2d:94:e4:
66:0b:2d:0c:7d:3d:5e:00:8c:7b:57:4a:c5:c0:3e:
48:73:8e:cd:d3:d2:76:14:2e:71:4c:2e:80:bf:bb:
d8:ac:a3:4c:b7:1f:ab:ff:51:4e:09:18:97:65:68:
bb:fc:31:17:c9:6e:05:d6:fd:04:c1:77:d2:d2:54:
d1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:1E:44:C9:D4:04:2A:60:10:2E:D8:C5:1C:BC:2B:6D:8B:40:D3:24
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pB5EydQEKmAQLtjFHLwrbYtA0yQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
aa:97:bc:a9:76:1b:b4:f3:a4:24:54:b1:a6:ef:1c:d4:57:8c:
a6:77:ca:c0:98:8f:37:2c:5a:51:2e:c7:93:e8:2b:5b:e8:3d:
2e:e0:8a:cf:d4:f6:31:78:8d:98:a8:91:91:2e:18:d3:d5:00:
42:95:07:66:00:6a:5d:99:cc:40:ab:6f:79:97:2e:49:56:ef:
f8:4f:85:80:94:5c:b3:38:a9:c9:8a:97:da:79:ff:2d:c3:d9:
8f:2a:83:ec:16:82:9b:fb:36:ca:98:a2:a6:ba:db:db:d5:cc:
ea:b9:4b:61:50:8a:f7:1a:7c:20:d5:3e:13:70:81:2a:e6:7c:
48:f6:3b:50:48:40:21:ae:10:1a:88:72:61:44:e7:4f:7c:97:
3f:44:bd:ed:7b:58:93:56:ba:81:6a:01:91:e3:b6:c5:de:8c:
c4:0f:d8:21:85:2c:8e:d6:b6:0d:47:58:ae:3a:ef:d2:e3:a7:
33:a2:80:02:b4:54:52:50:ee:c7:62:22:30:26:95:37:2d:fe:
4b:3b:90:31:ca:39:9c:17:e0:fc:2f:0f:87:15:75:86:83:e7:
c4:89:f0:5e:e0:0f:56:59:9d:5b:ff:a2:23:56:4a:ab:3a:34:
dd:c9:c2:5c:df:17:8c:3d:34:8b:97:6d:81:00:4e:23:9c:ca:
0d:0e:bf:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:37:53 2025 by rpki-client