Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BViWmFLFcgnyhBc3a11fm0p_CiI.roa
File: BViWmFLFcgnyhBc3a11fm0p_CiI.roa (raw, json)
Hash identifier: 5TOhF+xUP0VB8dpQzVao6/I9dJgmWZT6HAo0VzYMI1w=
Subject key identifier: 05:58:96:98:52:C5:72:09:F2:84:17:37:6B:5D:5F:9B:4A:7F:0A:22
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186EC480129827FB2AD4C06F270525D2BF1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BViWmFLFcgnyhBc3a11fm0p_CiI.roa
Signing time: Thu 16 Mar 2023 21:16:27 +0000
ROA not before: Thu 16 Mar 2023 21:16:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ec:48:01:29:82:7f:b2:ad:4c:06:f2:70:52:5d:2b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 16 21:16:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0558969852c57209f28417376b5d5f9b4a7f0a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d1:a9:7e:c9:7b:90:ca:6b:52:1e:eb:a4:63:
05:d1:36:e6:bd:11:c7:e2:06:a5:f7:85:b7:d5:72:
e9:f9:f9:46:c2:30:e8:40:c6:84:c9:52:6d:6b:39:
3d:db:3f:86:76:44:6f:26:1f:2b:22:06:12:42:a8:
71:45:81:ca:5b:40:d9:0d:c6:8c:b8:cb:52:6c:78:
f3:10:15:fc:48:05:55:0e:b3:e2:8d:02:f5:07:41:
d2:c8:e0:2a:b5:f2:ea:5a:96:0a:06:c0:71:37:37:
3e:20:8f:06:d8:5a:62:20:03:0b:26:44:3e:7d:0b:
af:38:e2:6e:73:37:88:74:2c:01:57:4b:21:0c:44:
77:ac:77:7c:13:af:92:d0:18:08:2d:50:ef:c6:e5:
d3:6b:b0:c1:8f:a7:5c:6e:c2:35:cf:8b:43:b4:f8:
11:07:f2:9b:9c:2b:ce:fd:87:28:89:c4:f6:fb:bc:
4d:45:32:40:cc:1f:71:03:1c:bd:a6:37:97:b9:22:
a3:3e:2b:b1:37:93:9f:a0:45:41:af:5e:6e:99:3a:
df:c8:80:46:d9:aa:06:01:c8:80:60:35:5b:12:c8:
a1:06:1c:58:45:90:06:15:08:28:88:60:5d:c5:14:
6d:b1:a2:fe:bd:89:de:d5:5c:6b:c1:f7:f9:73:d7:
65:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:58:96:98:52:C5:72:09:F2:84:17:37:6B:5D:5F:9B:4A:7F:0A:22
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BViWmFLFcgnyhBc3a11fm0p_CiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4f:7c:13:47:24:06:39:fa:91:76:c7:3b:4d:75:8b:f3:e3:62:
83:e2:9d:4f:f3:45:82:55:5f:29:2c:8f:06:a9:7c:7e:25:1a:
d4:20:42:32:7a:bd:c3:e0:7f:f3:c5:04:a5:ec:23:84:d7:1d:
53:42:3f:2b:25:f9:66:2f:65:5d:68:f9:44:7c:8c:1e:ea:8a:
8d:e9:c5:dc:16:5a:54:3a:6e:d9:36:17:84:38:98:67:e6:7e:
39:c0:c0:5f:8e:87:eb:75:77:9f:dc:83:ed:8e:01:09:ff:1a:
31:a3:d3:ba:f6:86:95:27:53:cc:55:95:47:28:84:c0:b9:98:
5a:76:2a:68:e6:c2:de:16:27:d0:6b:43:37:d2:bb:e2:00:58:
19:45:49:4e:1f:ee:36:ff:33:80:3c:4a:44:6d:0b:b9:80:f2:
3b:f3:1d:12:58:71:da:0d:71:e1:5b:67:18:f3:65:ae:ac:34:
e9:6e:24:1c:c6:73:0a:16:30:c8:51:11:4e:ac:24:09:8a:22:
e9:7a:86:4f:44:2d:bd:f3:67:73:5d:fc:90:7e:d4:47:a1:e8:
40:35:d2:29:fe:4c:b2:76:61:5d:48:ba:95:36:ca:cc:3a:2e:
f3:c2:44:4f:0d:2b:8f:79:3c:93:6a:ef:85:f2:66:bb:be:15:
40:21:63:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:13:47 2025 by rpki-client