Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/B1bQzXMwnTtKLB4SBBco3GS_qUg.roa
File: B1bQzXMwnTtKLB4SBBco3GS_qUg.roa (raw, json)
Hash identifier: WVY+v8TbsjPvXtFzJ6y/3KETh+8qX05mYw0Hza4VIb8=
Subject key identifier: 07:56:D0:CD:73:30:9D:3B:4A:2C:1E:12:04:17:28:DC:64:BF:A9:48
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01884815BFACDF9C547DE9224D55181D9D75
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/B1bQzXMwnTtKLB4SBBco3GS_qUg.roa
Signing time: Tue 23 May 2023 10:09:24 +0000
ROA not before: Tue 23 May 2023 10:09:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:48:15:bf:ac:df:9c:54:7d:e9:22:4d:55:18:1d:9d:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 23 10:09:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0756d0cd73309d3b4a2c1e12041728dc64bfa948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:06:7e:b5:3c:e6:05:eb:97:e9:9e:d7:b8:ea:
4d:23:a8:d3:16:51:04:7d:dd:dd:bc:a1:ae:10:f7:
3e:a0:71:a2:d2:90:a8:3f:3c:50:2b:7f:ee:bc:f4:
27:84:c8:44:a6:a6:56:55:88:2d:99:cc:54:e7:98:
6f:0f:61:88:ba:a5:be:a6:e3:56:ff:8d:fb:e3:d8:
93:89:2c:b4:06:68:ed:ee:be:c1:00:4a:19:0d:91:
ed:e3:b7:f9:fa:da:13:37:35:a9:7d:f7:b2:7c:f2:
94:f6:5b:47:e2:21:99:aa:02:4b:49:42:1e:10:76:
1c:63:49:98:15:34:53:14:9b:45:e2:4b:29:2c:4b:
98:ff:f1:d5:93:38:be:79:a6:6c:14:b1:d2:72:02:
9e:17:b4:62:8b:bd:bb:f2:a5:cc:5f:cf:6e:f6:93:
73:3a:21:9a:bf:cf:d6:1a:cd:2a:b8:2c:04:61:fe:
ef:d7:69:b5:13:09:27:e0:fe:1c:84:47:4f:a4:cd:
d0:b6:95:7d:08:e5:c6:95:e1:2c:b1:af:52:da:53:
fe:f4:76:28:32:ee:2d:88:85:24:ab:e7:ef:a8:68:
15:11:c3:16:1f:36:b5:44:cd:d5:86:a7:47:af:5f:
6e:fd:06:cb:5e:07:1a:8e:a4:2c:89:01:7b:82:36:
66:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:56:D0:CD:73:30:9D:3B:4A:2C:1E:12:04:17:28:DC:64:BF:A9:48
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/B1bQzXMwnTtKLB4SBBco3GS_qUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
07:54:1a:1a:89:9d:2a:3c:10:ff:12:c7:8b:01:12:d3:e0:64:
bb:6b:3d:84:df:0a:78:ae:c0:fa:4a:6f:90:63:22:e9:1d:9e:
d0:43:c0:60:92:41:86:ab:f9:34:6f:5f:7f:58:e3:68:80:d7:
1e:4d:65:19:b3:4a:73:fa:5a:4f:0c:0d:04:da:06:72:85:43:
c8:fd:7d:d5:f4:84:e1:8e:a7:7e:cf:39:08:85:9c:1a:eb:e5:
5b:30:c4:d2:47:97:fe:7b:3d:66:11:58:1c:85:62:41:84:7f:
16:39:64:6a:21:0a:2c:37:c5:5a:c6:fc:bb:7a:3c:fe:dd:ad:
12:a9:e2:6b:cf:76:89:b5:74:14:fd:06:b4:9b:55:e8:56:91:
2f:e7:fe:fb:9f:95:8f:d3:9f:9a:b2:39:fd:38:7c:c1:2c:a9:
2e:cb:7d:a6:2b:76:8c:a3:f1:8b:77:6d:e5:5c:6b:0e:64:7e:
be:f0:da:ff:44:9f:33:d9:89:a6:f8:4c:9f:d7:41:7f:f7:62:
8e:9c:5d:0f:34:8d:49:70:50:ef:7d:c0:62:bc:01:0f:a1:ad:
bd:4a:e8:df:b5:1a:37:95:6e:80:d1:dc:50:7c:5a:3d:58:95:
ee:84:2d:aa:ab:ce:2c:66:40:d4:df:7e:d1:9e:f8:83:f3:b9:
70:48:ea:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:48:00 2025 by rpki-client