Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BLWh6xF4IBJJLxHA1BzVNMDLD-w.roa
File: BLWh6xF4IBJJLxHA1BzVNMDLD-w.roa (raw, json)
Hash identifier: WQY5WsYARbz8gBnPezR9noP3FAjPFly0xGkyCpT3oCM=
Subject key identifier: 04:B5:A1:EB:11:78:20:12:49:2F:11:C0:D4:1C:D5:34:C0:CB:0F:EC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189B026E8160BA5065AC72CEFC87AA74D53
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BLWh6xF4IBJJLxHA1BzVNMDLD-w.roa
Signing time: Tue 01 Aug 2023 08:11:27 +0000
ROA not before: Tue 01 Aug 2023 08:11:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b0:26:e8:16:0b:a5:06:5a:c7:2c:ef:c8:7a:a7:4d:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 1 08:11:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=04b5a1eb11782012492f11c0d41cd534c0cb0fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:43:8f:ba:97:a8:d2:82:9c:da:71:08:92:ba:
dd:ef:49:bd:95:e2:35:23:58:f4:62:f7:09:74:64:
90:55:7a:e5:21:35:ac:d3:87:34:41:96:11:cc:d5:
8f:bf:dd:3e:60:83:6c:3d:15:05:65:a8:55:62:84:
30:3b:8f:9e:03:0e:54:67:7e:58:3e:6f:33:7d:7c:
55:b4:26:a5:ea:a9:16:ea:fc:88:80:f5:12:07:3b:
64:62:36:ce:11:94:55:9c:37:06:27:5d:1e:65:a8:
b8:bb:b5:31:9c:28:41:4a:7d:35:81:65:6d:d2:c9:
dd:58:84:2b:22:8e:b9:9a:51:db:1b:41:d6:3b:4a:
83:cb:4f:7a:2a:53:8a:80:61:f9:1f:f7:c4:e3:d7:
dd:13:b7:3a:92:3e:0b:85:6c:3f:f0:38:ee:48:5c:
7d:34:ce:b7:3c:39:24:77:aa:b9:da:20:04:cd:04:
a9:e0:00:84:0a:c6:30:c2:53:0a:f9:95:d6:06:61:
7d:b0:d3:da:41:57:24:7b:43:66:d7:b0:d5:75:6f:
c6:13:f6:88:9a:fc:88:6f:49:8c:ee:3f:77:ad:e0:
a9:40:65:fe:88:87:1a:b2:cc:ec:99:3f:36:75:c8:
76:7b:ba:54:fc:aa:25:d2:eb:16:54:f0:2a:c5:a3:
7a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B5:A1:EB:11:78:20:12:49:2F:11:C0:D4:1C:D5:34:C0:CB:0F:EC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BLWh6xF4IBJJLxHA1BzVNMDLD-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5d:8d:9a:ac:ce:d6:ae:34:c6:bf:da:4e:2f:9c:4c:f1:2c:14:
f9:64:0c:90:7e:fe:3d:33:72:57:42:ca:cc:b2:aa:c3:8a:73:
e3:56:30:7f:a1:26:69:98:94:90:ad:fb:bb:59:b8:50:59:d7:
90:94:87:e0:09:d4:dd:63:4d:69:07:c8:e0:14:e6:aa:84:6f:
be:4a:4f:43:3d:cd:eb:a8:bb:59:1d:35:fe:7e:81:53:2f:69:
3f:7f:8a:08:13:78:56:9a:ba:a9:4c:f9:d3:23:e5:29:95:07:
14:91:f2:f5:66:ae:e5:1b:4d:47:7b:f0:e7:ce:fe:41:f1:b3:
a9:9e:ec:54:4a:67:d0:02:42:36:23:40:3b:de:4b:f0:50:b1:
37:5d:0d:8f:f0:f8:0a:db:62:11:8d:37:36:43:ce:9b:40:d2:
d2:4c:cf:36:ca:cc:d6:f9:40:f9:79:7c:81:65:ef:65:30:84:
c6:b6:34:21:e8:dd:69:34:fe:00:bb:d7:ae:29:75:74:fa:7d:
32:d6:cc:ec:73:59:74:84:42:c4:a4:a4:67:f0:dc:1b:11:f5:
0b:96:59:0f:ac:af:c1:d5:46:51:2c:77:f7:da:16:5c:54:cb:
09:80:50:f3:20:3c:ee:42:eb:a0:52:bf:78:a1:cb:b8:51:7b:
cc:0e:29:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:12:15 2025 by rpki-client