Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u83-LmYHo8T4rv6sWJZ6bEsiFLE.roa
File: u83-LmYHo8T4rv6sWJZ6bEsiFLE.roa (raw, json)
Hash identifier: aRlIVIG0J6HVgJq5Irdmk5qsGlUeijI2DcrSfTZ5B1c=
Subject key identifier: BB:CD:FE:2E:66:07:A3:C4:F8:AE:FE:AC:58:96:7A:6C:4B:22:14:B1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 78E61614
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u83-LmYHo8T4rv6sWJZ6bEsiFLE.roa
Signing time: Wed 06 Apr 2022 09:24:26 +0000
ROA not before: Wed 06 Apr 2022 09:24:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2028344852 (0x78e61614)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 6 09:24:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bbcdfe2e6607a3c4f8aefeac58967a6c4b2214b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:72:8d:75:d7:1b:8d:22:e6:cf:ba:11:cc:12:
a4:1d:47:81:0d:2a:25:22:7c:01:ff:44:3b:fc:d4:
d4:90:65:cd:98:7f:c0:b5:45:81:63:63:84:5b:49:
b9:3d:a2:c4:01:9e:3c:b1:de:76:26:72:c1:d8:3a:
e6:aa:ec:b9:07:52:06:a1:df:96:05:95:ff:22:04:
f1:da:58:e8:7f:94:06:57:3a:de:b4:fe:10:09:7a:
bb:3d:95:39:da:78:74:35:5b:8d:10:db:28:d0:b7:
0f:32:a8:70:e2:bf:b3:91:a5:b2:b4:a7:e5:43:fe:
43:ed:92:1e:a3:91:71:59:60:7a:f2:0f:c6:33:0b:
60:34:85:32:a8:7c:96:28:95:f9:38:eb:c2:ab:64:
a3:d9:4c:4d:41:0e:f6:f9:e1:4c:7f:22:40:0c:e4:
2d:91:8a:a6:93:7e:ba:d7:6d:6a:9f:b8:b5:0f:95:
3c:ef:f9:b1:7a:bc:39:3c:1c:e6:ae:79:45:4b:1c:
2f:30:76:61:bd:5b:8a:31:f0:b6:a4:0e:ab:4d:27:
25:62:d8:e3:15:4e:24:a9:7d:d3:2c:b2:84:2b:f0:
2c:58:56:c9:46:e3:38:7e:10:2c:bb:5a:fb:41:84:
c5:d8:16:98:7f:15:04:e8:ae:5f:9a:98:54:4e:e7:
18:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:CD:FE:2E:66:07:A3:C4:F8:AE:FE:AC:58:96:7A:6C:4B:22:14:B1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u83-LmYHo8T4rv6sWJZ6bEsiFLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
15:a7:a3:81:0c:4e:85:18:c2:3e:f8:4c:72:ad:7b:86:b7:dd:
e4:30:43:13:f4:72:3c:f8:0c:91:9b:8f:41:db:ee:5d:fc:40:
3e:67:d9:96:60:a1:c0:64:3d:6a:d3:aa:42:b5:d6:53:9f:c9:
05:5b:f9:36:f8:0b:7f:8c:5d:d6:7c:70:6e:a3:60:dd:b5:ce:
4f:56:14:fd:b8:2e:f3:52:17:76:de:a6:4f:d7:9e:4a:bb:43:
b7:1d:92:40:53:56:d6:65:b3:61:7a:9c:3d:89:67:33:3f:15:
12:b0:fc:94:e7:26:a8:19:26:90:c0:ad:cb:57:c5:6d:3b:30:
67:db:d8:7b:39:92:8a:47:46:75:7b:cb:cd:22:8d:11:5b:b4:
81:cc:73:eb:19:7c:84:a0:75:39:b5:d7:de:53:87:c9:e8:8c:
75:55:3b:c6:20:a1:c1:e8:3f:1d:47:64:63:31:1f:51:57:82:
a3:64:60:bd:10:47:bb:14:3f:aa:0f:55:a8:08:64:92:ec:df:
e4:5f:c8:c3:60:05:25:03:b1:48:eb:af:48:d0:a4:38:ea:03:
8c:db:d5:b5:a8:7f:3a:b1:fc:2c:d3:92:57:3f:9e:0c:32:8f:
85:0f:f8:88:9d:10:cb:e0:37:4e:c1:00:93:b7:9e:08:df:6d:
6d:bb:84:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:53:31 2025 by rpki-client