Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pBwgyISg8OpKh5effP-v34i42Go.roa
File: pBwgyISg8OpKh5effP-v34i42Go.roa (raw, json)
Hash identifier: TI4oKAKyEcHRtAQofmO4PHVuVOlH99+dxxu1SQI+flA=
Subject key identifier: A4:1C:20:C8:84:A0:F0:EA:4A:87:97:9F:7C:FF:AF:DF:88:B8:D8:6A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018665B74EF65F5114DC9150D7BB89B28081
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pBwgyISg8OpKh5effP-v34i42Go.roa
Signing time: Sat 18 Feb 2023 18:09:17 +0000
ROA not before: Sat 18 Feb 2023 18:09:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:65:b7:4e:f6:5f:51:14:dc:91:50:d7:bb:89:b2:80:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 18 18:09:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a41c20c884a0f0ea4a87979f7cffafdf88b8d86a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:78:c8:6c:71:6a:a8:fa:a5:fa:40:f6:83:8c:
1a:18:12:c7:72:29:4b:07:cd:9b:ef:b9:83:f6:c5:
03:a1:ac:e7:77:a5:29:e4:64:44:73:bb:95:32:1f:
da:64:2b:73:30:85:65:f8:1f:5e:8f:2c:3e:43:a5:
4d:ef:a1:c6:13:5d:45:95:40:eb:4d:f7:76:3d:9c:
15:54:bb:60:cf:0c:3b:ec:94:1c:42:11:1e:5d:dd:
32:86:fc:ed:99:4a:d4:b7:99:27:35:32:e0:8c:95:
a8:3e:27:22:56:25:37:99:b1:a2:72:1e:dc:dc:2b:
9a:11:ed:b4:fc:83:c2:1a:37:9d:8e:de:63:c9:a0:
0b:bb:87:2d:c2:24:b0:2f:ab:4f:1a:cc:3b:0e:02:
72:73:ea:02:48:ff:fb:b3:60:cb:33:67:13:63:80:
80:48:c3:d8:83:10:81:5b:34:10:2c:5e:43:05:3a:
f0:8f:be:16:b6:07:48:45:c5:ea:aa:7f:64:ed:5a:
b6:9b:da:4e:2b:36:3c:5c:83:19:40:8b:62:af:ba:
b3:80:18:70:57:5a:fe:3a:1a:63:9b:67:64:2d:c5:
9c:46:15:8c:f4:90:9f:a6:66:05:e5:ad:ac:51:57:
62:f3:c4:cc:7b:52:d7:0d:24:cb:1b:a3:57:4b:b0:
7a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:1C:20:C8:84:A0:F0:EA:4A:87:97:9F:7C:FF:AF:DF:88:B8:D8:6A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pBwgyISg8OpKh5effP-v34i42Go.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
53:a6:cd:15:db:a4:2b:9a:34:67:26:0d:b8:17:61:b4:03:12:
56:3c:b6:3a:95:f4:72:9c:52:5a:a0:e5:04:45:14:07:2f:ba:
89:ae:0e:d4:92:5c:fe:4e:2b:bb:10:ea:ed:c3:f3:44:ca:43:
d1:fc:c5:34:8a:a5:63:b5:fa:53:f6:2b:76:7f:f4:30:21:85:
f4:71:de:da:c7:ac:fa:ec:ba:31:a5:de:58:55:9c:d4:2c:4c:
25:03:aa:5e:cd:d0:42:c7:39:eb:4f:20:3c:e1:33:f5:1b:42:
ab:b2:41:29:81:83:2b:14:4b:87:89:f2:3c:34:80:2b:ce:a3:
6a:04:02:da:38:5b:64:b8:8d:21:d5:b1:bd:8e:ec:5d:eb:34:
a3:0c:f9:72:f8:dd:f8:40:6f:58:85:50:32:54:98:1f:cb:ba:
b3:0b:bf:34:24:b3:8a:7b:39:81:f4:a3:8f:af:88:1c:d9:96:
1c:37:0b:e5:75:e6:e5:40:dc:a0:76:99:d7:9c:c1:40:29:1a:
9c:01:04:67:93:f9:d9:58:77:1c:ae:7e:60:53:e2:88:4c:9b:
83:a1:9c:eb:c8:6c:ec:dd:b5:f8:05:9c:0d:54:94:03:3a:89:
9a:8c:02:64:10:47:66:31:87:bd:3e:53:db:e5:6f:b6:37:83:
bb:a4:c3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 17:18:33 2025 by rpki-client