Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BSg54VUYuQ9-BZ1oMYe87awkjs0.roa
File: BSg54VUYuQ9-BZ1oMYe87awkjs0.roa (raw, json)
Hash identifier: Tux+dfuQeJUEuJKas2snWb+WVecIsuK/v5I6smp1iaA=
Subject key identifier: 05:28:39:E1:55:18:B9:0F:7E:05:9D:68:31:87:BC:ED:AC:24:8E:CD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01877828538F557AC99107959D957E5F4979
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BSg54VUYuQ9-BZ1oMYe87awkjs0.roa
Signing time: Thu 13 Apr 2023 01:08:41 +0000
ROA not before: Thu 13 Apr 2023 01:08:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:78:28:53:8f:55:7a:c9:91:07:95:9d:95:7e:5f:49:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 13 01:08:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=052839e15518b90f7e059d683187bcedac248ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:65:2e:51:27:83:1a:72:1d:87:65:fa:bc:32:
38:3a:70:50:7f:64:61:88:2a:2a:b0:18:05:b6:41:
ec:79:25:84:aa:98:bf:d0:86:f5:bd:9c:78:0e:9b:
22:dc:47:cf:07:75:5b:0b:67:f9:71:15:9a:56:11:
0a:dd:b6:6d:57:de:1e:a4:67:42:24:28:e5:09:f1:
94:27:69:e3:1c:40:4c:96:64:fe:0b:a5:b1:1a:65:
8a:59:ed:25:c6:31:6c:18:47:1a:73:37:cb:8f:a0:
48:39:5a:3f:8d:97:f6:5c:0e:ef:2a:07:f5:c1:cf:
6c:3f:d9:8f:40:2f:f3:97:83:ae:cf:a7:ec:3e:fb:
a6:c7:41:a7:79:1d:46:5a:f4:4e:5d:ce:a0:16:ef:
31:76:be:9b:09:da:10:94:84:9a:d7:38:23:84:45:
b2:27:6a:9b:20:56:fd:5c:8c:97:b3:62:85:54:df:
47:e3:ac:6f:c1:b4:88:06:d6:1a:71:d3:b1:39:27:
b2:04:75:ba:ef:d7:a1:5b:34:ca:ac:b4:b0:00:e0:
95:fd:fb:ca:8f:6d:ad:f6:70:8e:47:4e:b9:48:16:
65:53:44:ad:8c:7f:ad:b6:c0:0c:61:88:33:1d:6f:
81:f9:e3:af:77:d3:52:1c:f9:10:6e:76:0b:9e:ec:
cc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:28:39:E1:55:18:B9:0F:7E:05:9D:68:31:87:BC:ED:AC:24:8E:CD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BSg54VUYuQ9-BZ1oMYe87awkjs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8b:17:00:eb:06:90:d9:54:78:35:1d:c7:e8:29:7b:fb:4e:c6:
6d:e8:81:72:4d:63:d4:2a:98:e9:2f:bd:be:ac:94:14:29:ad:
9b:1f:00:d1:e8:66:cc:73:e6:aa:d7:a7:4b:a7:79:84:0c:b1:
d8:70:4b:24:aa:ef:5b:a1:a5:74:cc:5b:5c:7f:87:ad:17:cf:
57:58:90:28:a3:0b:11:a0:27:13:4f:0c:10:81:fa:46:b3:48:
39:d2:d9:ce:c5:d2:ab:f2:42:ec:8c:2c:c1:9b:2f:82:28:62:
c2:06:4c:8d:f1:cc:34:2a:75:e6:0b:15:1e:5a:3e:e9:f1:50:
89:f6:fa:58:5f:92:76:bc:d4:c9:79:b7:34:d5:c0:74:6f:c6:
50:34:8c:59:2c:3f:8e:c7:4e:09:eb:aa:46:29:f5:37:c3:51:
be:ab:66:e7:7c:62:6e:da:bc:c0:42:6f:d4:41:4f:01:bb:bd:
61:39:5f:05:b0:ff:1c:a9:8c:c5:25:ab:a1:e3:99:cf:67:bb:
a9:92:db:72:a0:dc:a9:7a:7b:56:de:31:59:be:c5:9d:ba:ee:
40:a4:5c:05:a7:cd:88:46:52:9f:10:0c:38:32:7c:9f:f1:bf:
9e:8e:d6:99:e2:1a:7a:db:0e:bd:6a:58:e1:cd:6e:8a:e0:5e:
0d:3a:a4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:38:09 2025 by rpki-client