Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BJWUnk7CalGsWkdIrv4Jq_da6us.roa
File: BJWUnk7CalGsWkdIrv4Jq_da6us.roa (raw, json)
Hash identifier: r/fa4WdkRoqBmsFDCWFbYhKkZ+S2W5DWjFd3cCIN2M0=
Subject key identifier: 04:95:94:9E:4E:C2:6A:51:AC:5A:47:48:AE:FE:09:AB:F7:5A:EA:EB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8C51DD48
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BJWUnk7CalGsWkdIrv4Jq_da6us.roa
Signing time: Mon 13 Jun 2022 08:16:02 +0000
ROA not before: Mon 13 Jun 2022 08:16:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:56ba:5b78/128 maxlen: 128
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2354175304 (0x8c51dd48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 13 08:16:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0495949e4ec26a51ac5a4748aefe09abf75aeaeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9a:f3:31:3f:ca:e8:eb:88:56:ee:7e:8d:05:
59:4b:06:52:41:e7:1f:22:56:04:5e:d7:29:db:a9:
bb:71:52:31:76:1a:a4:24:4d:72:90:bc:f2:7e:78:
9b:bc:6f:06:76:72:d3:0d:dd:d0:7a:d8:be:44:65:
74:f8:c7:b9:eb:73:7b:98:49:eb:7d:07:13:62:f7:
b6:9c:1a:8b:01:41:c5:75:e8:02:ed:d6:eb:67:a7:
58:e8:2c:4b:3a:4e:b4:27:80:70:20:41:8a:b0:30:
ec:de:e5:1a:6f:4e:46:5a:57:3d:bc:5f:3c:e7:fd:
ed:77:f2:4f:d6:9d:18:02:3c:1c:bc:15:50:46:90:
6c:fb:97:11:1b:9e:3b:d5:d2:05:71:60:83:c1:99:
eb:2e:e0:71:03:68:05:43:01:35:14:9a:9d:55:a7:
71:92:d8:17:39:79:0a:41:b7:ea:8a:84:6b:a8:9c:
31:c1:c8:f3:73:2c:33:0a:3c:d5:da:e6:66:60:83:
ce:7c:df:2e:7d:fc:25:0e:67:92:7f:7e:9b:22:2a:
18:c0:f0:6e:12:4e:6e:59:91:c0:ef:af:ac:66:d3:
79:71:7a:f0:ed:99:f2:bc:d3:be:ce:1c:19:e3:9d:
9b:dc:be:64:56:0e:12:92:c5:40:17:08:48:22:28:
f2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:95:94:9E:4E:C2:6A:51:AC:5A:47:48:AE:FE:09:AB:F7:5A:EA:EB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BJWUnk7CalGsWkdIrv4Jq_da6us.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
85:75:84:d9:7b:e8:78:2a:aa:1a:09:75:e4:ba:9c:8c:66:f8:
b6:51:cb:26:a9:f2:d9:6a:93:a5:4c:c7:1a:4f:9c:3a:1e:1e:
99:4b:bc:39:0f:55:d4:8a:d4:f5:0c:da:21:ef:bd:26:19:7e:
f7:2d:77:95:91:f8:70:b8:9f:44:fd:7e:fb:34:15:f2:fc:41:
c4:13:5e:7a:de:1e:fd:e2:4f:cd:7f:b7:6f:21:c4:3c:c2:4d:
19:72:50:d9:34:10:97:df:b9:ba:ad:6f:11:c5:0c:5c:15:16:
4f:d3:5a:0d:87:d8:8c:85:f2:d0:5a:8a:2f:fa:d4:93:e4:0a:
be:80:3d:b3:90:17:dc:bb:02:b2:2c:f3:62:b6:d0:94:4e:5e:
46:07:04:dc:8a:d9:b8:cf:13:1e:2f:37:2b:7f:7a:c0:03:e3:
fd:8a:da:ee:05:60:cf:7e:21:ab:23:1d:7c:23:dd:dd:22:a4:
59:9d:a4:5d:c4:bc:71:ff:fa:89:68:a1:e3:57:cd:d9:ff:ea:
e7:41:2b:5f:f6:eb:2e:ea:b3:c0:7a:23:ce:e9:c9:30:e2:5c:
30:4f:3a:54:d7:e1:f0:69:73:85:70:98:23:79:1c:ae:e4:c4:
a9:85:cb:99:32:f7:5c:06:ae:81:ca:b9:75:ec:5d:28:15:50:
90:1a:43:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:44:06 2025 by rpki-client