Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bdDDEMb97Mzri-8h6FzcSV1VBVo.roa
File: bdDDEMb97Mzri-8h6FzcSV1VBVo.roa (raw, json)
Hash identifier: kzuDi2bycfZajejeUddvoVlT4rwJl2hJGDa23Tlpmuw=
Subject key identifier: 6D:D0:C3:10:C6:FD:EC:CC:EB:8B:EF:21:E8:5C:DC:49:5D:55:05:5A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 79D82FF5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bdDDEMb97Mzri-8h6FzcSV1VBVo.roa
Signing time: Sat 09 Apr 2022 13:08:22 +0000
ROA not before: Sat 09 Apr 2022 13:08:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2044211189 (0x79d82ff5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 9 13:08:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6dd0c310c6fdeccceb8bef21e85cdc495d55055a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ab:aa:bb:a5:2c:66:b3:5d:7d:80:32:24:18:
02:da:23:9f:17:3a:76:d5:26:c9:28:6c:0d:e8:d2:
33:0b:38:51:c9:04:be:e3:15:b6:db:dc:96:f6:2d:
29:f4:02:20:e9:97:fd:a0:ac:d9:84:93:33:3e:ac:
ff:d0:a2:8f:47:ef:51:fb:fe:65:46:a3:47:37:ac:
a0:47:b1:b8:4d:49:18:0c:ca:03:c2:d2:4f:ae:ed:
54:8d:7f:de:6b:c9:6a:ac:cf:45:5a:3a:60:a9:3d:
fe:61:b7:b6:8e:23:3b:8f:92:92:64:74:3c:48:67:
88:18:92:60:4e:b2:9a:4d:ff:c8:d5:3a:2b:61:c2:
f4:60:e1:f8:3a:02:a6:e3:75:c0:29:b5:19:d1:07:
fb:b2:ed:f5:16:63:e2:17:34:c2:0d:38:f7:d1:55:
30:0b:08:5a:c4:eb:e2:fa:2d:a7:7a:4a:f7:cd:c7:
62:e4:7f:b0:92:1e:3d:5a:d0:11:6c:89:de:e8:05:
1a:d4:dd:e8:65:e1:28:ae:7b:78:df:72:ed:13:22:
38:06:36:bd:d6:89:96:f4:87:26:cb:23:3c:b7:bd:
80:34:4f:a5:f3:64:40:84:31:7e:30:f9:16:a3:ce:
8f:4e:6b:85:01:99:ec:68:0e:f3:f0:10:a9:92:85:
0e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:D0:C3:10:C6:FD:EC:CC:EB:8B:EF:21:E8:5C:DC:49:5D:55:05:5A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bdDDEMb97Mzri-8h6FzcSV1VBVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9d:cf:d2:1a:e9:fe:27:f8:e7:15:97:6d:d5:8a:59:16:45:c6:
f2:70:56:73:1d:1c:36:97:42:dd:80:f2:e2:32:37:f5:ae:70:
a9:32:94:3a:a6:b7:ab:30:fc:f6:01:ee:cd:8d:3d:ca:7c:bd:
cb:77:ae:4f:81:13:cf:74:23:2f:9d:93:00:f0:5a:17:d3:61:
dc:78:44:ce:9f:0a:c2:4f:f0:ae:a1:65:14:78:0d:00:cb:b5:
e8:e4:c6:80:f9:3f:f7:8c:05:98:8d:4d:fb:a5:ae:14:60:b6:
fe:6f:82:2d:52:51:78:b5:c3:dd:b5:6c:e3:f5:5c:17:49:93:
2a:ee:92:e8:7b:c0:a3:47:e7:d5:bb:2d:c5:08:22:a1:82:e6:
be:18:80:21:09:ca:d4:e8:c1:ea:5f:cd:ac:96:d7:11:fc:3d:
1c:90:94:0c:3a:36:af:7f:99:16:0a:01:c3:ad:96:b2:72:b7:
1f:f3:39:90:5a:96:e6:c5:07:61:a6:08:fc:b0:fc:30:a3:e0:
1e:f9:71:2b:a9:08:e4:9e:55:6b:ab:c9:d0:6e:6a:2d:0d:6e:
44:2d:a0:32:16:27:ff:26:16:8a:44:36:30:85:3d:30:4d:ed:
d7:ca:82:48:32:67:90:a3:a8:3e:6a:1b:c1:91:59:a9:16:40:
5c:9d:2f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:15:45 2025 by rpki-client