Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u9x3PbHipmISubismKE3PVkB4e8.roa
File: u9x3PbHipmISubismKE3PVkB4e8.roa (raw, json)
Hash identifier: lu/CyptwlvxuvLyjnosWfnm/6z+rDFuhE6lqZkokU34=
Subject key identifier: BB:DC:77:3D:B1:E2:A6:62:12:B9:B8:AC:98:A1:37:3D:59:01:E1:EF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 82C32287
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u9x3PbHipmISubismKE3PVkB4e8.roa
Signing time: Tue 10 May 2022 11:16:02 +0000
ROA not before: Tue 10 May 2022 11:16:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2193826439 (0x82c32287)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 10 11:16:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bbdc773db1e2a66212b9b8ac98a1373d5901e1ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:76:cb:12:01:de:10:93:a6:54:4b:b3:17:2a:
56:5d:54:39:6c:d9:e5:40:d3:8c:15:6f:56:f3:97:
6e:1d:15:63:3c:ce:a8:25:9b:e9:1d:2d:4e:1e:ab:
1e:94:c3:7e:ec:a2:2d:c7:9d:c5:5a:a2:2c:b5:60:
8b:3a:95:74:08:cb:e0:a1:11:03:e6:91:0a:7f:e3:
5e:85:89:14:51:fb:a7:15:da:e4:1c:55:06:bb:b9:
0c:13:8c:ef:45:c4:f8:dd:e9:44:1c:b8:3a:17:8c:
40:55:c8:73:d4:fb:53:d5:48:cc:42:ce:9f:87:99:
2a:7d:51:d4:37:94:34:3a:62:9f:80:0e:d0:c4:13:
c6:8f:ac:97:77:f8:00:73:a3:b5:b1:be:7b:70:e2:
d7:f4:4c:f9:38:9b:9e:73:bd:48:dd:8a:b7:d3:ef:
a6:ce:d6:09:2e:12:47:c8:a3:44:7c:86:ee:ff:62:
f5:12:3a:31:8c:91:4f:7b:65:68:07:98:1c:4d:ff:
04:5f:0a:c5:89:7e:67:1e:4e:3d:2c:d7:aa:0c:be:
bc:7d:88:8f:17:83:a7:7a:96:4a:8d:90:51:04:2f:
02:09:fe:be:97:51:63:51:97:b0:03:cb:db:0b:b2:
0b:2a:c9:14:45:c0:48:04:65:cd:5b:c3:6b:b2:9b:
20:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:DC:77:3D:B1:E2:A6:62:12:B9:B8:AC:98:A1:37:3D:59:01:E1:EF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u9x3PbHipmISubismKE3PVkB4e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
04:b5:76:f9:2c:3f:2a:1d:b8:5c:33:7c:f4:b9:22:cd:47:c5:
34:cc:63:fd:ef:c9:d8:4c:64:ff:ad:17:d1:1a:2f:34:ed:53:
fe:90:0f:c4:40:dd:fb:67:cf:a1:e8:df:07:7d:07:e0:c3:7a:
77:a4:93:24:39:60:ee:1c:34:dc:d0:e3:22:71:c3:e5:95:4c:
8d:37:c3:3f:8a:48:5b:41:2d:45:77:29:cf:10:91:33:54:88:
59:eb:62:ba:53:59:0f:81:c1:1c:95:58:65:80:2d:16:78:55:
94:0e:80:74:9e:84:17:2b:88:b8:13:d0:32:60:66:d1:b9:78:
28:bc:b5:c9:fc:ab:74:9b:5f:44:81:2a:35:e0:9e:74:dc:c1:
97:2d:6d:af:07:b9:bc:b7:04:af:95:6c:e7:3c:48:68:78:c3:
a2:e0:3d:2c:7d:c3:b9:69:4b:54:a7:b9:3c:af:0e:8d:fc:a9:
87:e5:0c:41:a9:cb:6d:53:08:69:40:0b:ee:32:2e:fa:dd:3d:
85:01:74:93:b1:a0:6c:ba:35:04:79:80:5f:d5:6f:f6:d3:7a:
50:eb:ab:7e:3b:4e:f3:a8:ac:d9:5f:30:07:a3:74:59:18:dc:
c7:fc:12:72:4c:7f:00:51:ab:a9:97:2c:56:94:e2:97:88:55:
22:94:61:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 07:41:41 2025 by rpki-client