Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/un8-_lbTwCegKDSq1_2rx0tRGsU.roa
File: un8-_lbTwCegKDSq1_2rx0tRGsU.roa (raw, json)
Hash identifier: Bq1kDx+ihiR/adY56x5hrl4nrPwLN6pRXZH0OaavJtg=
Subject key identifier: BA:7F:3E:FE:56:D3:C0:27:A0:28:34:AA:D7:FD:AB:C7:4B:51:1A:C5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01824B586FE9A745B52AF65E3CAF63691A85
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/un8-_lbTwCegKDSq1_2rx0tRGsU.roa
Signing time: Fri 29 Jul 2022 19:04:23 +0000
ROA not before: Fri 29 Jul 2022 19:04:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:4b58:5717/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:4b:58:6f:e9:a7:45:b5:2a:f6:5e:3c:af:63:69:1a:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 29 19:04:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ba7f3efe56d3c027a02834aad7fdabc74b511ac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ae:6a:4e:d2:83:cc:7c:f4:50:fb:39:6b:ae:
fc:cf:8a:09:c7:bf:e3:72:dc:a4:24:f9:54:53:16:
73:26:ce:2b:22:2e:a3:b9:9c:bd:d4:fd:6b:65:dc:
c9:83:cc:95:94:7d:63:2b:e2:b4:6c:cb:32:76:80:
91:62:7e:8f:b8:24:a1:0f:ab:1a:a0:e2:48:70:63:
fa:6c:57:99:2c:49:36:f9:50:54:94:c0:93:1f:6f:
3c:b5:b7:60:68:ff:69:76:55:c6:56:00:c8:3b:ef:
00:21:17:ae:16:df:11:c9:23:b6:df:58:7b:11:1e:
74:a6:be:00:a7:29:62:90:9a:74:c6:50:9c:3d:09:
02:f9:91:74:28:5f:61:b1:99:33:1e:f7:84:2e:4f:
14:02:71:bb:2b:7a:68:0c:27:65:16:90:d5:87:91:
90:9c:73:c7:43:aa:bd:09:3d:94:ae:9c:3a:da:ef:
64:95:aa:e0:fb:29:2c:00:4e:83:7e:6a:75:53:e5:
9f:7d:69:23:2a:0f:f1:3c:3b:a8:41:7a:81:80:eb:
25:ec:00:1f:17:b9:24:ca:91:56:15:ca:93:ce:0b:
a4:bb:7b:09:2f:cf:1b:e3:a7:d4:3a:47:ba:75:e1:
60:43:f1:ce:4e:2f:38:c2:eb:18:34:c1:79:1c:20:
34:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:7F:3E:FE:56:D3:C0:27:A0:28:34:AA:D7:FD:AB:C7:4B:51:1A:C5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/un8-_lbTwCegKDSq1_2rx0tRGsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
89:85:a9:31:5e:68:be:3c:28:ed:a0:76:f3:0f:bf:12:64:e1:
9b:d9:1d:39:b9:02:62:74:51:72:98:7d:aa:16:06:de:77:da:
62:22:8a:68:e9:d7:1f:82:7d:1f:28:6b:fc:87:2c:7f:05:7f:
77:5d:80:83:6b:c2:26:8b:43:80:4b:a5:0d:d3:fa:70:e1:c6:
a3:6a:c0:97:f3:66:19:6d:2b:27:66:3a:46:4b:95:59:75:4b:
bc:2d:1f:b7:ef:40:92:98:59:24:35:54:de:78:6c:59:94:39:
a4:4d:0b:9b:d4:e7:d7:98:1b:b7:c2:76:d6:47:b6:ea:8e:6e:
84:86:34:b3:88:1d:6f:b1:57:8b:90:8f:e8:c5:21:a9:55:a1:
2a:fc:5d:07:40:84:ce:51:df:51:dc:9f:05:d1:59:05:9c:e1:
62:30:09:9e:6d:52:4f:7e:e2:2e:fd:37:83:0d:2f:80:90:33:
30:17:41:d1:ab:f8:e2:a0:35:4c:21:12:c8:27:ea:83:2d:47:
1b:e9:1f:da:4c:76:2f:81:f7:74:e0:99:c1:1f:eb:dc:34:8f:
3d:10:9a:ce:12:50:fb:f9:26:d0:b5:f2:6c:78:a9:e9:6b:c1:
16:cb:ca:b9:5b:9e:4f:7d:67:31:40:19:f9:d3:f1:8e:fa:c7:
5b:e8:70:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:41:00 2025 by rpki-client