Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BKqH_njkFZK2b_PtdE4NI0UtTlE.roa
File: BKqH_njkFZK2b_PtdE4NI0UtTlE.roa (raw, json)
Hash identifier: P66mYXA4Fv+IyHKrWBXqoq06gAISf6f4EuMke7jP4DM=
Subject key identifier: 04:AA:87:FE:78:E4:15:92:B6:6F:F3:ED:74:4E:0D:23:45:2D:4E:51
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01856695F5315B48CF37C224EF2DBD1B79B6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BKqH_njkFZK2b_PtdE4NI0UtTlE.roa
Signing time: Sat 31 Dec 2022 05:09:41 +0000
ROA not before: Sat 31 Dec 2022 05:09:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:66:95:f5:31:5b:48:cf:37:c2:24:ef:2d:bd:1b:79:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 31 05:09:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=04aa87fe78e41592b66ff3ed744e0d23452d4e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:18:cc:80:5f:40:af:a8:49:d9:5b:dc:72:9d:
68:0b:f2:71:6e:9a:f8:8b:4a:8e:00:34:07:4c:fc:
cb:fc:4f:4b:7f:e8:aa:a3:00:4f:c7:a5:7a:e2:07:
2d:19:19:30:5c:e4:3b:88:f8:1a:61:49:c6:27:cc:
f2:ed:a0:b3:83:97:bd:49:db:81:69:8e:cb:4a:9a:
e4:aa:be:54:bc:94:43:d8:fe:41:67:c6:74:f5:94:
ac:13:ce:d8:da:d2:5f:7a:66:df:ea:48:35:bf:6b:
77:8f:c2:f6:6b:16:6a:0c:15:11:2f:64:ca:ab:ed:
9f:df:45:73:0e:2a:19:82:cb:35:8c:16:7c:21:7e:
30:e0:61:3c:b1:46:94:bb:4e:71:eb:8b:09:30:97:
2a:27:ff:e4:dd:37:b1:99:75:ad:3b:ad:48:54:ad:
73:40:cc:5e:b9:95:27:f5:d4:0f:30:db:ea:f9:77:
44:b3:86:05:69:49:2a:87:e9:f6:29:a9:09:05:fd:
80:d9:1a:5b:b5:a9:e8:15:59:4e:8d:8c:d7:c2:0d:
89:ec:99:f3:cf:2d:b0:8a:fa:e6:9e:55:d4:ee:41:
86:37:49:c3:25:67:6b:80:95:a7:08:10:b9:6e:42:
70:fb:01:22:7b:07:3e:43:28:aa:15:1a:65:99:55:
40:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:AA:87:FE:78:E4:15:92:B6:6F:F3:ED:74:4E:0D:23:45:2D:4E:51
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BKqH_njkFZK2b_PtdE4NI0UtTlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
af:9e:d2:c3:a0:7a:05:1d:93:3f:f9:42:b9:40:d4:2c:50:a2:
48:51:74:aa:b9:ee:d4:72:15:58:00:fa:77:21:a5:95:52:8f:
5f:4e:8e:ca:e4:34:d0:e4:21:ce:93:ab:60:de:5a:92:bb:df:
e1:a2:9a:96:df:de:b6:53:26:b7:56:63:92:15:e6:ba:1c:d3:
8c:8e:f2:a3:a7:6b:dd:0b:81:48:e7:12:d2:a8:7c:73:87:0b:
02:5e:f0:75:ff:1c:d1:43:e0:fc:34:4d:67:5c:51:b3:38:82:
92:ad:1e:f4:de:d2:8e:6c:e1:60:a2:a4:19:8f:a3:6c:aa:24:
27:a8:3e:e8:95:5b:46:8c:d8:ff:39:35:8a:10:0d:c5:e5:63:
a1:d5:51:52:9c:2f:e5:d9:6e:f8:03:dc:0a:27:27:b7:78:f8:
a2:08:bd:8d:7f:d6:00:b5:60:10:cf:cf:c1:79:c2:fd:9e:c1:
f5:2e:a1:07:72:57:d3:59:fa:2d:09:c6:e0:8d:2a:0d:cf:2c:
37:c6:df:81:72:6d:2e:5a:70:5f:d5:4b:c7:03:f8:7e:f7:b1:
51:b5:dd:67:d2:95:06:93:ac:74:3c:52:7a:57:02:3a:e0:4e:
b0:48:e3:1b:1d:fa:5b:20:86:8c:36:39:1a:e1:e1:72:89:81:
31:ed:48:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:27:28 2025 by rpki-client