Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BUQaZp3ITyQIINOoZx9zrwIFikM.roa
File: BUQaZp3ITyQIINOoZx9zrwIFikM.roa (raw, json)
Hash identifier: /16MMiTjseT3CFJkXj0xx+LAmDv8a4At9dBEJI+m5WU=
Subject key identifier: 05:44:1A:66:9D:C8:4F:24:08:20:D3:A8:67:1F:73:AF:02:05:8A:43
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018674EFCB037F5784A2A6C78F9937417159
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BUQaZp3ITyQIINOoZx9zrwIFikM.roa
Signing time: Tue 21 Feb 2023 17:05:17 +0000
ROA not before: Tue 21 Feb 2023 17:05:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:74ee:dfc0/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:74:ef:cb:03:7f:57:84:a2:a6:c7:8f:99:37:41:71:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 21 17:05:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=05441a669dc84f240820d3a8671f73af02058a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f5:3a:a3:89:0c:bc:d6:8d:63:ec:94:03:13:
06:ac:7d:31:19:c5:73:d3:97:9b:a8:d8:94:27:aa:
5d:9a:2e:ee:4d:ce:87:30:35:4b:be:ef:7a:3d:2c:
7b:c9:b9:56:0b:a8:ba:42:15:eb:17:53:48:15:36:
dd:0e:c6:e9:08:10:a3:f2:98:d6:ad:19:59:91:27:
65:4f:b7:83:85:de:43:79:2f:99:d4:8d:58:c2:3e:
67:ce:ad:29:d4:7d:30:aa:5f:24:2d:df:28:91:5b:
13:e8:dc:87:d0:40:f4:05:c1:4f:2f:2e:ef:5c:c6:
46:19:8f:a0:d4:f6:52:95:8d:d3:25:02:37:97:97:
02:18:b7:7f:19:f8:cd:5c:e8:f8:5f:4e:16:dd:78:
fd:78:cf:6d:ba:bf:44:cc:08:87:f7:1c:ce:b4:86:
90:f7:71:5d:ea:84:79:c4:ce:e6:a4:97:75:f9:b1:
f0:f6:45:ee:59:d3:af:a6:7a:e1:ed:58:e7:7f:3e:
30:6a:3a:9f:a6:92:1c:66:67:a0:1e:a9:5b:e8:96:
31:d8:9a:06:cd:e8:cd:2a:fb:da:1b:16:d1:8a:19:
52:a5:20:93:cc:c5:61:c3:53:50:a8:d5:a0:4e:a4:
f9:02:05:f4:9e:e5:7a:88:87:49:03:6f:64:6a:bd:
b5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:44:1A:66:9D:C8:4F:24:08:20:D3:A8:67:1F:73:AF:02:05:8A:43
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BUQaZp3ITyQIINOoZx9zrwIFikM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6e:7c:0d:0a:ae:96:51:56:10:36:ab:79:70:3e:da:ce:78:f6:
84:c8:39:30:eb:67:cc:84:b5:14:3f:32:51:d1:43:dc:39:39:
dc:f6:80:6e:b5:22:41:9e:62:3f:45:28:9c:78:42:b3:a2:a7:
71:43:09:f2:75:46:82:4c:41:7a:59:71:02:2f:e8:32:2c:26:
be:52:26:b1:5c:2d:f0:6b:c0:80:a4:3e:f5:58:b7:8c:a7:2a:
67:81:aa:5b:82:61:b5:dd:34:4d:49:37:37:47:b0:65:32:45:
9d:58:7f:44:d2:5c:ff:3c:38:93:96:b1:1b:46:7c:2d:c3:66:
59:45:a1:44:33:63:d8:f7:3c:10:fc:4b:03:d0:8a:86:fb:a0:
a4:6d:4f:08:21:1b:81:cd:fa:bb:9e:c2:48:07:0a:bf:75:d1:
cb:d9:c4:b6:43:11:8e:e8:92:4e:36:15:c6:04:ed:71:6e:4a:
e5:1a:85:fa:0f:a3:b9:1c:28:66:95:d5:22:9a:a6:63:06:fb:
24:11:63:52:74:52:7c:b7:21:77:6a:25:d0:7f:1e:ee:80:45:
7c:59:52:1c:47:32:5e:dc:fd:d8:8c:b8:56:16:d8:13:11:84:
18:c2:af:1b:0c:c8:6f:00:48:81:2f:7a:5d:f5:6c:ff:00:25:
bc:c6:d9:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:23:37 2025 by rpki-client