Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/brDuFsh3LV3IKborYbUkotx7w0g.roa
File: brDuFsh3LV3IKborYbUkotx7w0g.roa (raw, json)
Hash identifier: nVuJcd6TmB6TE4h59+IBQ8Cua84mKWEtOsE+ACKF8U4=
Subject key identifier: 6E:B0:EE:16:C8:77:2D:5D:C8:29:BA:2B:61:B5:24:A2:DC:7B:C3:48
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181CEB48F67C5028A611E12B29A2920E1FD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/brDuFsh3LV3IKborYbUkotx7w0g.roa
Signing time: Tue 05 Jul 2022 14:12:28 +0000
ROA not before: Tue 05 Jul 2022 14:12:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:ce:b4:8f:67:c5:02:8a:61:1e:12:b2:9a:29:20:e1:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 5 14:12:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6eb0ee16c8772d5dc829ba2b61b524a2dc7bc348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:31:fa:8c:80:10:4e:15:a3:c6:36:f5:8a:f6:
fa:64:65:41:2e:ae:2d:bf:24:d8:83:b7:05:bc:7e:
39:b4:4e:b7:99:77:ac:72:7b:eb:7d:89:ef:b8:78:
03:2b:60:7b:97:e6:10:f6:67:19:3b:ee:25:bd:7d:
0a:d4:d6:41:38:13:11:23:8f:b5:fa:60:d8:af:03:
9d:0d:ef:a4:43:a2:37:ab:3c:63:fe:1e:fd:91:27:
0d:09:a8:1e:db:28:d4:d6:98:a3:e6:42:1d:2d:4c:
28:76:c1:0e:3b:b3:d1:e9:1b:cc:6c:3f:66:cf:3a:
6f:3e:c5:dc:cf:a8:05:fe:71:73:58:12:07:16:04:
52:a2:08:67:92:29:1a:71:a0:75:b4:1f:43:74:34:
a8:26:92:03:ef:b7:4c:ae:9f:e7:fc:e3:d3:5b:2f:
33:48:09:58:ae:42:44:05:e4:9a:a5:b9:b1:f0:7b:
e9:a5:9c:b9:0c:92:c7:9f:8d:53:13:16:31:4b:1f:
81:4e:46:6c:5c:58:f9:04:be:1f:96:28:b5:6d:ed:
2d:10:41:94:cc:a0:3f:7c:2c:fe:62:8b:51:47:1e:
10:94:02:eb:5b:f0:d0:f9:33:65:d9:8f:48:49:39:
36:4f:83:51:5d:ab:82:8f:4e:03:cc:04:18:73:11:
86:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B0:EE:16:C8:77:2D:5D:C8:29:BA:2B:61:B5:24:A2:DC:7B:C3:48
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/brDuFsh3LV3IKborYbUkotx7w0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8c:76:c0:14:38:29:01:d8:79:f3:e1:70:7a:d2:5d:ca:1d:70:
14:b0:a4:48:23:c9:58:48:07:58:cd:75:c3:b5:00:f9:30:3b:
06:0f:d1:df:2c:64:71:bd:19:f1:71:20:3f:1e:0d:65:77:84:
c4:c6:26:cd:72:40:f3:dd:d5:30:f7:82:3e:1c:e9:24:dd:74:
54:d0:0f:27:c3:34:aa:47:ba:b2:4e:32:6c:cf:49:81:61:41:
8b:89:da:94:54:99:9d:84:b1:c1:34:33:0f:87:ae:f1:63:96:
49:56:1c:77:8c:ab:54:f7:7c:a4:5f:a3:b5:10:90:f9:a1:c2:
35:a6:31:96:4f:fa:1a:b1:5d:42:9f:57:9d:95:41:45:da:59:
12:a7:f8:79:f8:03:ba:a6:de:ab:ae:b4:2c:92:da:19:bd:b4:
6f:b9:ee:53:44:b3:1a:6f:32:81:27:00:32:93:ca:16:f3:76:
3e:49:16:ae:03:36:db:69:d4:66:99:c6:ca:04:1d:5d:d6:91:
7b:dd:75:9e:1d:7b:e3:49:0d:3f:68:57:92:db:30:36:07:27:
53:83:92:b6:f1:b9:68:8d:05:fa:e4:ad:d3:36:41:d1:18:0b:
95:50:28:da:ab:f8:ee:8d:c4:1a:6e:41:28:3d:f7:70:7f:aa:
f7:a8:64:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 08:45:00 2025 by rpki-client