Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E_Biuc0FxuMemXWPDwvKsgSx6_A.roa
File: E_Biuc0FxuMemXWPDwvKsgSx6_A.roa (raw, json)
Hash identifier: FQEJ/79hq0La7anvgZKLNJQSXk3G+Yak6mMi6ehWscg=
Subject key identifier: 13:F0:62:B9:CD:05:C6:E3:1E:99:75:8F:0F:0B:CA:B2:04:B1:EB:F0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181D66E1BBB86461B5432C3126B9850F8FB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E_Biuc0FxuMemXWPDwvKsgSx6_A.roa
Signing time: Thu 07 Jul 2022 02:12:29 +0000
ROA not before: Thu 07 Jul 2022 02:12:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d6:6e:1b:bb:86:46:1b:54:32:c3:12:6b:98:50:f8:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 7 02:12:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=13f062b9cd05c6e31e99758f0f0bcab204b1ebf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:46:0e:63:c8:26:14:10:27:b7:e5:2a:e4:ff:
d7:75:9a:f3:45:80:0f:cf:00:eb:34:bc:21:07:6b:
dc:04:15:ca:a7:aa:d1:69:a1:69:98:4c:f5:89:fc:
3a:97:bb:ed:cc:8b:f2:0b:b7:e1:ab:97:6d:e1:21:
36:78:a3:35:3c:33:f4:7c:af:ee:81:c4:55:91:f9:
c4:e4:0d:e5:d5:46:a3:28:cd:c1:86:8b:27:59:14:
9d:46:df:5a:f1:85:fc:c5:09:5d:36:fc:aa:ef:b2:
c0:7e:a6:96:ba:aa:f8:43:db:1b:ad:9a:2b:ad:c9:
16:07:12:38:20:5c:7b:89:32:58:34:7c:3a:35:30:
a3:93:ab:84:12:00:46:08:dc:6d:55:fb:20:83:d6:
e7:88:a8:7a:fc:fc:6d:21:dd:72:e6:cf:5b:71:61:
b3:fb:42:c6:50:bf:cf:7e:ca:40:64:3a:30:f1:ae:
4a:5f:8b:21:f8:f2:ec:6e:10:f8:c4:cd:7d:6b:29:
64:87:cc:eb:aa:28:a0:e4:7f:d0:02:c3:d4:cd:35:
b4:fe:2b:d0:09:9a:67:7f:f0:e0:b8:8f:4d:63:13:
a7:c3:64:d8:92:7a:4a:38:df:6a:b5:52:c3:4d:d7:
e2:40:5d:7d:9b:b9:3d:4a:5a:4a:3b:ad:0f:3c:b2:
d9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F0:62:B9:CD:05:C6:E3:1E:99:75:8F:0F:0B:CA:B2:04:B1:EB:F0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E_Biuc0FxuMemXWPDwvKsgSx6_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
84:5c:6d:87:e6:ce:44:15:86:9d:f4:9b:7e:64:f6:4c:30:e5:
fa:df:21:01:4a:58:a1:fd:4f:58:a0:eb:24:20:dc:ac:ab:fb:
81:06:b0:c5:62:9d:e3:b3:b1:7f:9b:13:33:03:19:f1:ff:c1:
f6:18:e9:35:40:5e:03:95:c5:f7:8d:13:52:a2:ec:33:ca:e7:
69:85:0d:09:f8:29:25:cc:8e:ca:70:2a:13:42:b4:22:33:6d:
d0:01:5b:58:6d:33:b9:d3:58:27:c5:53:3e:3b:b2:35:62:64:
fe:73:08:0e:cd:d8:b0:d2:56:bd:56:0a:63:f0:a7:57:8d:ff:
f3:29:e7:b6:a5:59:62:6a:f0:bd:2f:68:56:5c:4a:27:a0:3a:
b5:ce:28:95:0f:a6:8f:6e:33:01:13:2c:a3:0d:d4:db:6c:33:
8c:7a:2b:40:76:c8:de:29:dd:14:94:be:59:95:c0:81:05:96:
f9:b2:5b:92:64:8d:fb:82:4f:7f:20:6b:83:ee:0a:5d:ce:34:
f1:ea:bc:0a:fa:98:f9:75:11:9b:a9:2e:d7:0e:ad:97:9b:4f:
94:ab:8c:57:30:58:94:0f:a2:55:86:84:d3:a7:54:53:40:5f:
84:2b:80:2b:9c:bb:f8:0d:50:41:33:ee:22:72:a3:38:da:bf:
2d:97:66:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 09:04:16 2025 by rpki-client