Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bXD0OiC6gxayKAUZl9zBN2PIjw0.roa
File: bXD0OiC6gxayKAUZl9zBN2PIjw0.roa (raw, json)
Hash identifier: /phSl2Unz9OgBaJMWfqQhK3TsZyc9aGLK9XCnMaqGG4=
Subject key identifier: 6D:70:F4:3A:20:BA:83:16:B2:28:05:19:97:DC:C1:37:63:C8:8F:0D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7408637E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bXD0OiC6gxayKAUZl9zBN2PIjw0.roa
Signing time: Sun 20 Mar 2022 04:11:20 +0000
ROA not before: Sun 20 Mar 2022 04:11:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1946706814 (0x7408637e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 20 04:11:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6d70f43a20ba8316b228051997dcc13763c88f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:72:55:57:cd:42:99:9c:f5:97:b8:2e:0f:de:
b1:b0:6a:ae:f2:ff:07:eb:34:8e:1a:f8:d6:ae:3e:
df:90:62:01:cc:e1:a9:c7:9f:37:50:40:17:9c:d4:
98:d8:83:d6:61:f8:b9:8a:3f:ba:75:ee:6c:21:f5:
5b:0f:5a:1a:45:5c:0f:07:04:7f:28:40:56:2d:4b:
d8:ff:db:8c:c7:5a:07:fa:0a:1f:ab:4b:4e:cd:7b:
22:85:60:76:8c:9b:67:42:51:b2:51:d6:6d:3b:12:
0c:b2:62:16:3b:fe:f5:f9:9b:b2:4e:f4:44:8c:1f:
ff:f6:49:2d:1e:2f:96:39:a2:49:6e:ca:02:e7:6c:
42:39:e9:68:29:f7:0d:ba:25:0a:c0:24:4e:02:ed:
1a:61:dd:5e:53:87:aa:98:d4:d3:0f:ce:6d:15:32:
ba:60:01:5e:6b:07:74:bb:6b:ce:d7:78:25:ad:f5:
9e:59:05:3f:8d:38:fd:7d:a0:27:de:14:06:95:52:
70:bd:41:2c:4f:77:da:c0:d8:05:38:b4:3e:b3:80:
e3:1f:6f:9a:62:e2:94:8b:c8:08:22:a0:6d:91:0c:
4e:c5:37:e9:5a:4b:70:b2:2e:d0:42:78:64:ab:0c:
f0:25:cf:a6:c3:94:c9:28:c8:d9:57:3b:b2:09:2c:
5d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:70:F4:3A:20:BA:83:16:B2:28:05:19:97:DC:C1:37:63:C8:8F:0D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bXD0OiC6gxayKAUZl9zBN2PIjw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
79:2f:aa:7e:53:88:94:20:da:04:a8:1f:7d:4e:cf:69:4e:9c:
00:12:53:0b:49:c6:c9:3e:94:4c:c0:28:01:54:0f:91:ab:61:
f0:47:dd:fc:07:49:7c:00:78:b8:5e:54:28:cc:15:23:3d:74:
35:2f:33:03:50:c3:28:04:98:f1:a4:83:d9:31:ab:28:ff:ef:
24:47:32:67:4a:a8:53:51:10:43:66:83:45:27:06:9c:0f:b5:
82:f5:86:65:02:b7:5c:73:f3:d3:8b:53:53:85:1c:e3:50:a4:
81:81:f8:85:31:b7:f5:10:60:56:77:08:e0:b9:bb:05:9c:42:
2d:86:10:78:67:a6:c7:e4:52:00:29:bf:40:e9:6e:a8:e4:05:
1d:e9:c3:fe:4d:dc:33:01:6f:81:e5:08:bf:f2:a7:38:db:07:
4d:0c:da:21:f0:55:19:cb:a8:fc:9c:50:81:1e:6c:e2:53:d8:
a2:5d:fe:ff:e0:c1:cd:ee:06:4e:e1:87:f8:29:18:46:56:9d:
ef:82:a5:72:81:a9:66:4b:4a:f0:eb:73:48:8d:09:e6:8d:90:
77:47:87:4a:2f:bc:4f:c2:e7:4e:2c:e2:19:2a:70:eb:07:db:
d1:97:02:6f:20:a6:c9:35:06:34:88:db:6d:41:eb:11:fd:51:
38:e7:54:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 19:19:18 2025 by rpki-client