Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BJCnJwri1LjeNBEr_XbImyGJCkA.roa
File: BJCnJwri1LjeNBEr_XbImyGJCkA.roa (raw, json)
Hash identifier: /XkHHfzU4rmpgNDlNF3ifP30Q/bTGchysk0b49whkvc=
Subject key identifier: 04:90:A7:27:0A:E2:D4:B8:DE:34:11:2B:FD:76:C8:9B:21:89:0A:40
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188985254AFA2943B607B7CFC16048BD65F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BJCnJwri1LjeNBEr_XbImyGJCkA.roa
Signing time: Thu 08 Jun 2023 00:05:12 +0000
ROA not before: Thu 08 Jun 2023 00:05:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:9852:1512/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:98:52:54:af:a2:94:3b:60:7b:7c:fc:16:04:8b:d6:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 8 00:05:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0490a7270ae2d4b8de34112bfd76c89b21890a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b1:8c:d1:07:49:d7:3f:c8:47:13:1b:1e:1d:
05:5c:d7:74:51:24:c4:05:ac:47:95:04:fb:f7:60:
5d:35:a0:55:8b:e9:43:d2:2f:7c:1a:45:a6:9e:8f:
b7:28:53:b3:b9:5f:ba:6b:e6:e3:73:20:49:9d:52:
19:24:b2:b2:d2:99:6a:c4:62:1d:f9:a6:12:23:bd:
7d:62:c1:cf:07:7a:64:10:eb:bc:9b:a4:81:13:5b:
8c:67:a3:40:93:cd:2c:b4:f7:87:0d:eb:de:a6:f5:
b8:c2:31:8f:29:6e:61:4e:dc:68:6d:36:c8:bd:20:
e0:f1:2a:c6:52:6a:77:fb:a6:1e:20:b3:53:4f:77:
83:8a:c4:75:78:fc:22:9e:fa:5c:a9:0a:79:97:45:
61:5f:72:60:f8:e3:40:36:7a:36:54:21:e9:ee:88:
0b:ca:93:25:0a:6d:82:96:c2:6c:01:89:44:23:17:
ba:6a:7a:07:70:07:49:9f:b0:11:5b:5e:71:f3:69:
f3:5c:4e:37:3d:39:28:1d:4c:75:c1:41:ca:c0:42:
4e:15:7a:b0:d8:88:2b:b9:c8:52:3b:67:42:fb:1a:
bf:b1:8c:46:52:b2:4f:f5:f2:7b:8b:8e:73:fe:dd:
d0:95:7b:dc:79:6a:db:ee:df:2b:27:ba:54:8a:ae:
3b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:90:A7:27:0A:E2:D4:B8:DE:34:11:2B:FD:76:C8:9B:21:89:0A:40
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BJCnJwri1LjeNBEr_XbImyGJCkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6b:52:95:db:d3:20:aa:83:21:17:ca:f9:a5:1a:e3:1c:65:fe:
e3:ef:d0:de:e6:21:3e:56:1e:96:c5:8e:f8:fd:7b:d1:9d:77:
e0:81:eb:fd:09:49:f3:76:59:5c:bf:5a:0e:5c:59:ac:d8:4e:
9c:57:12:36:96:8a:7b:01:1d:2f:49:34:c8:00:bc:31:8f:2f:
59:15:53:49:92:3a:44:0b:3e:c9:41:36:a6:7a:45:fa:11:e4:
73:97:fd:7d:ef:d6:16:eb:3a:b7:10:bd:46:6d:8d:31:3e:55:
97:b0:6a:ad:43:db:ee:c1:5f:45:6a:15:d6:8a:1d:66:59:b9:
d4:c8:5d:7b:90:25:e4:77:da:2b:d5:f0:be:93:cd:61:ab:66:
2b:06:6a:5b:6f:0a:72:bd:64:9f:a9:ae:b9:07:73:90:f1:59:
57:27:42:d5:b4:9b:df:b0:df:1c:3f:13:33:6c:34:2e:94:cb:
e6:18:3e:ad:8d:44:d6:7f:a9:8d:89:ad:a4:c4:36:2e:68:99:
e5:48:13:c5:ac:7b:1e:b8:0c:35:59:3a:a5:84:c8:1d:6b:c3:
f5:70:12:a0:12:2c:19:23:ef:ef:57:14:be:0c:aa:fe:a6:7f:
a1:a8:3e:01:47:39:47:90:d5:cd:09:fe:f8:7d:ae:d9:13:20:
84:31:96:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:15:14 2025 by rpki-client