Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u7R6oAvx7WEZxgwbFjTRjY4flTQ.roa
File: u7R6oAvx7WEZxgwbFjTRjY4flTQ.roa (raw, json)
Hash identifier: 3Gyo0bbvolAZcJvknyT7/laeoWaEKx/dgshJZqD6pvo=
Subject key identifier: BB:B4:7A:A0:0B:F1:ED:61:19:C6:0C:1B:16:34:D1:8D:8E:1F:95:34
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01854A3E67FA85BBA690AD7ED17E55A5DD99
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u7R6oAvx7WEZxgwbFjTRjY4flTQ.roa
Signing time: Sun 25 Dec 2022 17:04:41 +0000
ROA not before: Sun 25 Dec 2022 17:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:4a3d:efe4/128 maxlen: 128
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:4a:3e:67:fa:85:bb:a6:90:ad:7e:d1:7e:55:a5:dd:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 25 17:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bbb47aa00bf1ed6119c60c1b1634d18d8e1f9534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:03:8c:4c:47:d4:65:e3:50:17:5d:00:9a:de:
7f:21:39:85:c9:fb:47:ee:5e:41:2f:00:c0:e2:14:
af:b8:16:6a:db:0c:01:5c:d8:8e:6b:9f:a0:ce:0f:
f5:82:59:3a:f9:a7:60:a2:f5:c4:ec:af:c8:64:ff:
5a:8f:4a:f8:c3:01:80:70:d6:65:6c:27:4d:f7:58:
d1:18:9f:e4:f9:e7:5c:5c:82:c8:00:a3:60:e4:85:
64:9c:39:c5:7a:1c:6b:4b:29:7a:48:e5:c4:d8:b4:
3d:42:a4:50:83:d3:d9:0b:e9:ab:52:ed:3a:da:b1:
c7:0c:bf:50:ec:70:53:09:08:6f:d0:3b:bd:0e:b5:
86:ed:98:64:7d:f9:7e:3d:d2:51:d2:48:88:6c:c8:
5e:41:2c:e1:14:c2:2f:44:8d:d6:b1:e6:cc:03:2b:
14:49:3d:5f:16:b2:75:4b:60:83:d9:fd:2e:ba:48:
1a:89:46:d3:f6:be:30:43:5b:4c:85:43:1f:b4:0a:
40:60:cc:fa:8a:3f:39:8b:27:f7:d3:5b:57:05:c0:
54:44:b4:ff:26:87:b3:8c:7c:4d:25:2e:18:f6:96:
95:26:b3:53:ed:ae:00:a7:23:f5:5a:47:b8:1f:ff:
f8:5a:85:d3:15:7b:71:16:07:5e:ba:c7:41:63:d5:
6c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:B4:7A:A0:0B:F1:ED:61:19:C6:0C:1B:16:34:D1:8D:8E:1F:95:34
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u7R6oAvx7WEZxgwbFjTRjY4flTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
02:e2:d4:b8:01:68:c5:8c:eb:74:dc:c5:a5:54:1f:41:8b:59:
b0:53:5a:2f:37:3c:00:7f:74:46:b7:4a:35:28:bb:c9:8a:e6:
0c:ea:00:c6:8d:b5:fb:ed:90:d5:ff:64:34:69:f3:92:54:c2:
4c:45:ba:0b:8a:3b:6d:5b:3d:04:3d:73:e4:9d:b3:11:bb:86:
a5:5c:cc:bb:db:90:f4:c7:bd:9a:c5:bf:7e:38:d6:a1:07:e3:
22:4e:84:d4:b1:41:51:a6:82:74:55:c4:4a:ed:b7:5d:dd:e8:
59:da:8b:71:45:f0:d8:92:9d:75:b8:d3:fd:3e:00:d7:05:55:
fb:a9:cd:89:7a:07:73:1a:13:0d:eb:8e:d7:f4:59:ac:5c:9f:
d7:36:05:0c:d8:b8:99:d5:7a:49:9b:e4:b2:c4:dc:fc:04:9b:
c9:89:17:68:dd:77:87:be:04:a2:13:42:89:b8:ae:f3:3f:ac:
8d:b6:63:13:15:e4:85:2b:ea:b0:50:34:97:2f:00:e0:4a:b0:
3b:4b:bd:e0:90:2d:27:5a:42:b8:ee:09:ab:c2:6f:d3:bd:89:
2d:c8:d1:8a:45:19:b7:a9:17:3b:2e:7b:6e:5c:cd:09:0a:ce:
6b:7b:f7:a7:a5:e3:13:4f:01:87:10:fc:7d:4c:b0:b3:44:9a:
fe:04:9c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 16:24:09 2025 by rpki-client