Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bjX6piwlxAz0j4psXb8SJAtTu5o.roa
File: bjX6piwlxAz0j4psXb8SJAtTu5o.roa (raw, json)
Hash identifier: TaW7J2wNeeoSGLgiID0LE0Zp+896RHrjTv/ROgVYR2s=
Subject key identifier: 6E:35:FA:A6:2C:25:C4:0C:F4:8F:8A:6C:5D:BF:12:24:0B:53:BB:9A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8B742937
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bjX6piwlxAz0j4psXb8SJAtTu5o.roa
Signing time: Fri 10 Jun 2022 03:11:02 +0000
ROA not before: Fri 10 Jun 2022 03:11:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2339645751 (0x8b742937)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 10 03:11:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6e35faa62c25c40cf48f8a6c5dbf12240b53bb9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:cf:30:f5:a8:05:0a:bf:3e:76:81:5c:43:a3:
ba:17:42:e1:1f:e4:ba:7a:e6:9c:0e:4c:ee:eb:bc:
3f:27:66:4b:70:17:95:b2:93:44:fe:4f:cb:90:b4:
c2:79:6c:17:27:03:d7:de:44:01:61:1d:6a:f0:dd:
18:db:51:90:c5:d4:f9:ba:b2:fe:43:34:79:40:35:
f4:56:d0:72:5b:d1:d7:9d:af:0c:26:d1:ef:e7:39:
8b:1e:ff:db:61:3a:6b:92:cd:d9:aa:a6:fb:9c:c3:
4b:ca:fd:78:10:cb:d8:77:fa:2c:44:e6:f7:40:16:
18:c1:c2:7f:70:02:2f:76:cc:10:5b:c3:69:46:7b:
14:c0:e3:fd:7f:15:c0:24:c2:b2:33:d2:ac:c5:66:
3b:dd:4b:db:59:08:08:21:f7:aa:af:b0:88:d0:ec:
67:1c:90:75:eb:ab:35:ae:bd:6a:21:f0:e7:c5:b9:
f3:3f:be:84:84:f2:ee:8e:20:63:9c:0c:fa:8f:b8:
63:f6:9f:4f:0f:d5:72:d7:d7:6a:6f:65:4f:ef:c1:
e3:10:a2:da:ef:00:7d:f7:6b:87:f0:de:45:77:d1:
35:17:cb:56:c3:94:be:95:dc:37:04:3b:56:be:04:
c7:62:88:c0:0d:1c:01:57:f3:04:72:c9:7f:2c:46:
25:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:35:FA:A6:2C:25:C4:0C:F4:8F:8A:6C:5D:BF:12:24:0B:53:BB:9A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bjX6piwlxAz0j4psXb8SJAtTu5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8b:b4:96:4c:d1:e1:31:b2:ae:32:fe:91:f4:27:a9:8d:78:dd:
12:0b:27:2e:e7:58:26:04:2f:7d:44:ad:d4:3f:cf:fa:cc:d8:
e8:40:31:72:00:9e:3f:c9:02:70:2b:ec:05:0f:1b:c6:cc:ce:
77:b1:59:4f:50:b2:e1:44:3b:a6:21:f3:71:3f:85:b2:2f:29:
b8:60:4c:f5:86:d1:c2:7a:c1:f7:86:59:19:fb:76:10:c4:3a:
8c:7f:18:56:c8:d5:93:0a:1b:2e:c3:87:d0:56:35:fb:c9:fe:
1f:3b:cc:ef:8d:85:91:54:65:f9:18:59:e9:fc:5a:59:7f:0c:
45:ac:21:2f:a9:4f:fd:21:87:a3:1c:91:66:ed:3f:32:fb:70:
4d:92:65:bb:59:9b:3b:93:da:96:71:4e:a4:a4:5a:7a:f3:b5:
65:6a:95:ea:88:d5:b4:ed:32:87:9d:3e:07:11:4e:2d:f7:b7:
94:f2:2c:50:a2:4d:ee:8b:76:46:3f:53:d2:3c:8b:94:c9:98:
5c:67:c0:b2:0a:c3:37:ea:b6:cd:d7:4d:44:50:24:58:7b:f2:
2c:1a:3b:18:0b:89:ac:ae:0f:72:f9:cd:b7:0f:20:2e:43:3b:
34:5e:36:bf:b0:f0:fe:21:31:cc:82:c7:c5:1b:d3:ac:fd:0b:
ff:16:20:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:08:30 2025 by rpki-client