Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BKIJmdBHwnzoFkQCoMdcm-0KdgI.roa
File: BKIJmdBHwnzoFkQCoMdcm-0KdgI.roa (raw, json)
Hash identifier: 3W3mh2tjE7wcEJz1ec7KBymWeZB2G7fkFyxOPhWb8GM=
Subject key identifier: 04:A2:09:99:D0:47:C2:7C:E8:16:44:02:A0:C7:5C:9B:ED:0A:76:02
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018441B8106372617BCBD3A2E0AF4DCEC2E1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BKIJmdBHwnzoFkQCoMdcm-0KdgI.roa
Signing time: Fri 04 Nov 2022 08:18:12 +0000
ROA not before: Fri 04 Nov 2022 08:18:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:41:b8:10:63:72:61:7b:cb:d3:a2:e0:af:4d:ce:c2:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 4 08:18:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=04a20999d047c27ce8164402a0c75c9bed0a7602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:aa:16:62:93:02:13:dc:86:31:15:e3:79:29:
ba:d0:d2:91:98:5f:a1:b4:0c:44:92:ec:a1:4f:73:
a4:6c:e7:52:8e:9f:82:40:b2:90:ec:d9:cf:f8:df:
11:f9:54:b5:9b:3d:d4:f0:c1:d0:fd:87:bf:45:87:
db:97:5c:82:37:34:34:b4:16:20:11:f1:75:e5:7c:
5a:7d:37:3a:ce:4d:28:6f:42:98:8f:c8:8a:d3:00:
13:b6:bf:12:17:16:ac:05:cd:a3:ce:45:94:c3:00:
50:ac:09:ba:93:f8:a4:f5:12:a4:57:e0:db:d1:92:
56:1b:04:bd:26:6c:15:3c:26:4c:0a:98:e0:7d:46:
7e:c9:6f:3b:74:31:cc:bd:ae:b3:a1:be:26:f2:dd:
e6:ed:eb:9e:38:90:cd:b4:ca:b6:b2:f7:3b:7d:46:
17:22:40:93:b5:d7:e4:58:c7:85:eb:63:ab:e8:f7:
82:92:a2:4b:ad:ca:90:79:1c:a2:e7:11:1e:e8:3b:
f2:46:b2:e8:8d:33:3c:61:5f:80:eb:91:1f:3e:65:
3a:cb:44:a4:d2:36:78:bd:8b:63:c8:9b:f0:73:6e:
cd:08:9f:2d:c9:ba:0d:70:7a:6b:a4:c6:f4:58:ce:
ed:9b:b1:b6:b8:5b:58:f1:4b:1a:7b:24:24:82:20:
50:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A2:09:99:D0:47:C2:7C:E8:16:44:02:A0:C7:5C:9B:ED:0A:76:02
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BKIJmdBHwnzoFkQCoMdcm-0KdgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
54:40:0e:81:12:e1:03:f8:e3:b4:5b:e6:1d:15:9e:d1:64:b4:
57:c8:b5:27:1a:69:8a:ed:04:88:f2:cc:9b:fc:d3:e3:c2:58:
e4:71:ba:e3:73:8f:21:7f:21:f2:6e:a3:7e:b5:10:22:07:15:
2a:af:d9:0c:8f:13:d4:23:61:fb:71:a9:00:5b:48:7e:1d:0b:
1e:ca:79:fc:62:3c:c9:d7:b5:b7:fc:e1:44:69:22:31:ff:ce:
0a:75:2c:97:86:5b:95:76:34:e7:12:de:9a:76:f1:34:7c:5e:
e7:94:6e:5f:73:73:84:38:77:23:7d:5a:48:3c:b2:b3:40:e5:
62:74:e4:5c:0d:c6:98:00:d8:37:43:69:61:48:1d:35:2f:c0:
94:09:8d:c5:3d:ae:9e:0a:47:1b:01:28:07:74:90:00:9b:00:
d5:8a:13:7b:9c:a0:d3:49:c8:f4:c4:59:10:b6:21:bb:a6:63:
df:3f:07:e2:9d:dc:3f:b7:ae:05:64:d4:0b:65:c0:bb:fd:d8:
42:65:ac:53:77:ed:57:b8:58:46:eb:76:e6:93:5e:79:10:be:
d8:92:8a:90:70:16:7b:4e:4f:ed:03:8f:30:50:ee:55:d9:a9:
1a:82:f9:7b:88:24:82:6a:7b:b9:4e:db:5d:47:d7:98:4e:73:
f2:2f:50:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 21:28:47 2025 by rpki-client