Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pBgyiliaGFAeyQbntMwjzOdh1SA.roa
File: pBgyiliaGFAeyQbntMwjzOdh1SA.roa (raw, json)
Hash identifier: /9Sf7O4wWJXiMsBZOrXlHYyuoCTm38BgY4gVjsUF8Tg=
Subject key identifier: A4:18:32:8A:58:9A:18:50:1E:C9:06:E7:B4:CC:23:CC:E7:61:D5:20
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7A080D48
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pBgyiliaGFAeyQbntMwjzOdh1SA.roa
Signing time: Sun 10 Apr 2022 05:14:40 +0000
ROA not before: Sun 10 Apr 2022 05:14:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2047348040 (0x7a080d48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 10 05:14:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a418328a589a18501ec906e7b4cc23cce761d520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9f:50:8a:c2:c4:ab:09:73:1a:33:55:58:e5:
a1:d3:a8:03:cc:c0:8f:7e:9b:77:0a:54:11:61:22:
3f:80:15:10:ed:d5:fc:61:cb:5e:0e:f2:6f:24:8f:
b5:31:ee:01:fa:33:0f:64:4c:c6:f8:9f:07:23:89:
85:f9:40:9d:95:7f:c5:4c:fe:5d:db:cb:af:a1:e7:
64:b9:7a:8d:0f:72:22:50:e7:9a:68:bc:d2:bf:af:
47:fe:19:69:8f:d1:41:91:28:9a:ed:75:01:0e:b5:
79:2a:08:d1:58:5b:26:c3:27:6d:1e:a6:09:b6:6f:
90:50:e8:c8:ce:a0:69:5b:d5:bc:dc:4e:7f:be:73:
17:17:2a:88:8e:7c:11:fe:11:32:13:1a:0a:02:1a:
bb:fc:45:d4:9d:25:d7:99:3f:43:95:30:b0:52:5c:
d2:ad:c6:69:24:11:e9:ab:41:f9:e8:76:6f:4e:05:
da:b2:b7:d2:f4:83:a4:42:36:a9:9a:25:af:35:33:
96:b4:2d:95:62:5c:8f:97:ae:66:4b:65:b6:ff:28:
04:8c:1d:a2:7d:47:68:d8:c5:80:80:b6:4b:fa:d8:
83:7b:19:11:b9:e6:69:2a:1e:6c:89:16:c1:74:77:
20:e7:88:f0:24:b5:f4:97:ae:64:89:69:4a:39:1f:
ca:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:18:32:8A:58:9A:18:50:1E:C9:06:E7:B4:CC:23:CC:E7:61:D5:20
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pBgyiliaGFAeyQbntMwjzOdh1SA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
90:eb:d0:98:37:32:07:92:b5:98:38:ee:e6:72:e9:82:c9:b8:
dc:f1:e5:df:9f:ec:d1:07:43:88:b1:7b:89:c0:7e:ca:4a:93:
ea:b6:93:01:4b:dc:d4:50:25:fb:a2:b1:92:55:62:6e:3d:be:
32:b0:c1:c5:74:ba:3f:fe:c7:91:4f:f1:76:0a:ca:b1:50:1d:
1b:2a:8f:0b:af:3f:07:ed:c0:51:82:a8:49:d3:f3:92:42:3f:
7c:9d:e6:c7:a6:7b:45:50:c1:a6:20:80:1c:c0:a6:5d:31:09:
46:3d:23:9e:6d:39:70:97:d8:d0:e7:9b:55:ae:78:05:8a:bd:
ff:c4:12:ec:e9:01:ba:58:ff:77:d0:12:57:82:21:99:bf:1e:
fa:f6:6c:08:14:38:c0:96:50:c1:d3:11:a2:84:88:4a:52:82:
40:47:77:44:67:16:7a:55:80:a3:ce:d5:b0:34:f9:0e:d8:5a:
3e:c9:ae:91:ab:42:68:65:e4:2f:30:bb:8a:eb:d7:56:7d:b1:
7e:b5:06:91:15:87:a0:04:f9:a8:5c:7e:ce:af:4e:ec:a7:cd:
52:d5:50:3c:13:8e:13:b4:73:ec:7f:3e:59:03:eb:56:ad:3a:
54:c5:ad:1c:f9:54:01:f8:68:29:37:84:f8:f6:bb:a7:7e:16:
a7:b2:82:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:03:33 2025 by rpki-client