Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u7zS4JH8HRGxQ_aqG0AqYFIC6n0.roa
File: u7zS4JH8HRGxQ_aqG0AqYFIC6n0.roa (raw, json)
Hash identifier: 0U5txRgmpUJGX99pYd+fqWu4t7cRdrLPzV4r2p04D38=
Subject key identifier: BB:BC:D2:E0:91:FC:1D:11:B1:43:F6:AA:1B:40:2A:60:52:02:EA:7D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6D54EEBF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u7zS4JH8HRGxQ_aqG0AqYFIC6n0.roa
Signing time: Thu 24 Feb 2022 13:16:32 +0000
ROA not before: Thu 24 Feb 2022 13:16:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1834282687 (0x6d54eebf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 24 13:16:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bbbcd2e091fc1d11b143f6aa1b402a605202ea7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a3:bc:7e:7c:6f:df:59:a0:9e:6f:d2:9e:cd:
a0:d3:2b:b8:7e:21:e9:7f:0a:f2:89:39:12:d1:f3:
aa:90:29:53:a5:c0:af:35:b8:4e:33:43:4b:72:2c:
e9:b0:11:cf:76:4a:74:e6:c7:4e:46:78:e1:76:bc:
7b:e6:52:67:cd:c1:ac:e7:53:34:b1:d8:74:d9:1e:
51:56:ed:9a:da:6f:a9:c3:b2:d9:d3:68:b8:30:47:
d3:47:1f:28:ef:e8:c4:9e:83:cf:42:da:c2:86:36:
18:20:ec:80:2f:38:92:4e:5f:99:9b:1b:d6:8c:15:
36:85:8e:16:78:52:5e:b1:3f:a2:c8:1b:7b:6c:72:
44:1b:06:29:06:ff:f8:21:3f:38:a3:6b:b3:3e:8b:
75:30:8c:ec:46:e9:48:d6:b4:fc:b2:33:49:63:ed:
fb:5c:cb:1d:fb:34:bd:bb:8f:2a:08:cc:4f:a3:b0:
0b:80:56:63:c3:0a:0a:90:4a:93:a5:29:3c:6d:d8:
4b:f0:6f:03:c0:3a:64:c1:42:16:52:3f:cf:63:1c:
a7:b0:a1:1b:49:c3:58:7e:83:3f:21:7f:8d:b4:2b:
5c:11:f5:92:62:e7:58:09:81:bb:ce:e8:10:e5:85:
ee:e8:e9:21:22:df:2a:45:2a:2e:e4:3a:e4:bc:2f:
28:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:BC:D2:E0:91:FC:1D:11:B1:43:F6:AA:1B:40:2A:60:52:02:EA:7D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u7zS4JH8HRGxQ_aqG0AqYFIC6n0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:64:b9:eb:97:78:9b:1c:d6:fd:56:85:53:19:38:8a:62:45:
5a:00:eb:7b:d6:96:27:27:74:59:08:ac:5a:a8:a9:41:7c:50:
6e:53:6d:3b:01:6b:14:da:71:d5:e7:ae:3e:bd:3f:d5:16:cb:
47:be:6f:4b:3e:57:68:89:9a:91:93:52:89:23:48:f6:4a:0c:
28:bb:0a:cb:a4:ff:0d:d6:9c:37:45:22:9b:12:23:a4:ad:42:
e6:99:f5:70:78:f5:db:a2:87:bc:1a:21:e6:16:fe:43:9c:c1:
19:ba:7e:a0:10:89:4c:bf:ed:0f:1b:95:40:95:2d:c1:eb:e8:
f1:9b:4b:e8:fc:9e:f8:65:04:1a:13:87:05:43:40:8a:d2:09:
cb:c2:67:d2:00:35:b4:4c:3a:a2:98:ee:c7:f0:52:1b:ff:a9:
33:02:1f:e6:03:5d:07:e7:3b:c8:97:d4:72:e8:df:0c:53:8d:
92:cf:8e:90:60:48:36:e6:e2:37:7b:e4:f0:3e:45:8f:82:4e:
b2:ee:36:db:93:8a:24:ed:84:88:10:d2:0b:cc:1a:b6:6f:93:
d1:21:af:84:31:ab:3a:c9:fb:69:30:d8:b7:23:e9:3c:a4:3b:
09:03:be:2a:6e:1d:0e:fd:37:9b:23:8c:04:17:a8:9c:2b:ab:
90:8b:cd:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 08:20:11 2025 by rpki-client