Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BHyADHnox2IZx6MURbvOcWegYKc.roa
File: BHyADHnox2IZx6MURbvOcWegYKc.roa (raw, json)
Hash identifier: 4lgT5BjTPcvtzny6AC6wEIh3UlvX+fhCrs4s412NCE8=
Subject key identifier: 04:7C:80:0C:79:E8:C7:62:19:C7:A3:14:45:BB:CE:71:67:A0:60:A7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01824896914A5748010BC24F5048EEEF0697
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BHyADHnox2IZx6MURbvOcWegYKc.roa
Signing time: Fri 29 Jul 2022 06:13:23 +0000
ROA not before: Fri 29 Jul 2022 06:13:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:48:96:91:4a:57:48:01:0b:c2:4f:50:48:ee:ef:06:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 29 06:13:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=047c800c79e8c76219c7a31445bbce7167a060a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:99:db:24:33:73:f3:30:24:4d:01:82:0b:f0:
08:c8:46:8d:76:0b:4d:3c:61:c6:25:a9:c4:3a:80:
85:33:ae:db:e0:20:c5:1a:a0:a8:75:22:6c:20:1c:
65:43:1c:97:b2:ad:d2:9c:38:5a:49:e3:f1:ae:08:
22:d5:cf:3f:35:6c:f2:70:11:44:1c:ad:98:21:c3:
8e:12:46:2a:b2:07:ea:48:b3:9b:3a:ba:6c:1c:0b:
02:bc:f5:67:61:88:44:00:66:ba:e1:a9:41:32:f3:
a3:57:62:af:cc:aa:fa:c7:13:c5:81:62:bc:3f:30:
1c:a5:09:96:b0:80:1d:70:fd:c1:1b:31:25:9a:dc:
40:e6:cc:dd:2a:af:cf:b5:5b:bb:c9:e9:f1:e8:28:
4e:bf:56:2c:76:01:45:73:fe:d3:d9:6f:04:69:a2:
6a:b9:a9:68:56:f6:c0:79:3e:59:4b:9d:67:67:9b:
6d:72:cd:36:5f:c0:d4:49:58:56:55:09:96:68:ef:
59:ab:bb:15:65:89:a3:b4:50:70:8f:ef:c0:fd:0e:
15:2e:c8:08:b4:13:14:af:ba:32:fc:91:8a:11:d0:
20:48:00:37:a2:38:ca:b5:c8:97:2c:c8:8f:e0:e3:
b6:f6:e2:fd:ed:cf:1f:5c:00:9b:a6:a3:15:a0:8f:
c2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:7C:80:0C:79:E8:C7:62:19:C7:A3:14:45:BB:CE:71:67:A0:60:A7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BHyADHnox2IZx6MURbvOcWegYKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9c:33:90:bf:3a:b8:1d:9a:3e:31:7e:82:89:20:85:c7:0f:69:
19:cf:68:01:c2:36:f8:5f:f4:80:e7:54:24:4b:c6:10:00:88:
24:70:d7:aa:e8:19:87:7f:8b:5d:82:7d:2a:11:76:03:5b:7c:
9d:75:8f:86:26:ce:c7:a2:c4:8e:c8:70:c0:2b:d2:8e:86:fc:
d3:cd:bb:e0:f1:a2:8a:db:d8:2e:af:d3:cc:28:47:c3:4e:23:
9c:dc:af:06:68:fa:5c:20:6f:8e:71:c6:09:2f:1a:82:4b:3d:
0a:d5:29:72:63:4a:91:f9:30:46:c3:6b:97:04:fb:e4:13:9f:
30:a7:d8:80:52:2e:cf:4c:1a:05:51:6a:ed:b6:88:a1:e4:82:
1a:d9:39:8b:d0:9e:7b:4a:a1:51:e6:0d:e0:60:10:ee:75:f4:
0f:fd:cb:1f:e4:08:13:3c:da:e2:01:d5:b5:34:32:a4:4c:9f:
c3:34:a1:29:30:6f:a7:b5:4c:2a:79:cd:08:71:1c:ca:c6:63:
fb:6b:ba:15:7c:80:18:ad:fc:58:ba:12:99:4e:54:2f:52:e8:
b5:7c:d5:2f:6d:3e:c1:80:19:77:59:ff:da:0c:35:ce:5c:c3:
55:8c:ea:f2:8c:4a:f6:cc:cb:c6:48:ad:68:51:73:0e:81:fc:
7f:41:d0:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:41:05 2025 by rpki-client