Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Bauw2pn_6t4MxsVz5xZbWIhI3dM.roa
File: Bauw2pn_6t4MxsVz5xZbWIhI3dM.roa (raw, json)
Hash identifier: rWuSC8lcf1Lgj3fQI+H9vmQjtVllOk8HJ+ZvuzuqhOg=
Subject key identifier: 05:AB:B0:DA:99:FF:EA:DE:0C:C6:C5:73:E7:16:5B:58:88:48:DD:D3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186981FCACCC2E11AAE6CC2FBD3DD43E1D5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Bauw2pn_6t4MxsVz5xZbWIhI3dM.roa
Signing time: Tue 28 Feb 2023 13:04:25 +0000
ROA not before: Tue 28 Feb 2023 13:04:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:981f:a221/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:98:1f:ca:cc:c2:e1:1a:ae:6c:c2:fb:d3:dd:43:e1:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 28 13:04:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=05abb0da99ffeade0cc6c573e7165b588848ddd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f1:db:f9:84:1d:de:78:15:2c:20:f9:8a:ad:
e3:2c:cb:9a:38:5b:e3:94:75:9c:32:1f:2b:b2:c4:
3d:a3:e6:52:27:df:3d:ef:2c:ff:bc:e0:2a:99:cf:
a0:05:84:c4:17:28:38:97:55:bd:cc:fe:7c:af:2b:
6a:9d:74:47:90:c9:98:16:55:b4:be:6e:09:21:da:
9d:bb:cc:0a:c4:e4:62:78:c8:29:c9:93:77:f8:66:
2c:9f:07:ff:3e:e8:24:04:4f:30:69:7b:b7:bd:6d:
ba:3b:87:25:ec:76:bd:fe:62:00:19:81:9c:93:21:
be:78:d1:a1:99:67:8b:0d:ed:b6:28:75:2b:c2:6b:
9d:bb:d7:49:68:0c:d1:4c:0c:da:fb:d0:a1:7b:f4:
cf:b3:57:f0:c5:45:53:30:71:0d:2f:60:8c:a9:82:
87:a2:13:cc:fe:00:5e:1a:19:e9:59:87:dc:9d:cc:
98:28:ea:05:4d:31:d8:97:99:d6:35:39:5f:3a:2b:
1f:00:67:bb:2e:f7:71:51:ac:9e:9a:14:cc:c8:14:
a9:c8:67:e9:4c:82:cb:9d:54:68:cd:d0:85:24:59:
f3:b0:22:10:5f:8f:21:84:34:3e:1c:ac:b5:e0:a5:
8b:7a:ac:e1:5d:d0:fb:17:4e:d9:33:9a:a3:d4:b3:
2d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:AB:B0:DA:99:FF:EA:DE:0C:C6:C5:73:E7:16:5B:58:88:48:DD:D3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Bauw2pn_6t4MxsVz5xZbWIhI3dM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a6:f5:01:16:1b:e2:1f:af:35:b8:71:db:92:31:23:81:75:ce:
a2:a4:f5:3e:fe:2a:f5:97:4d:96:5d:2e:6a:21:dd:f2:aa:dc:
36:e2:60:25:38:d5:15:fc:c9:ad:93:24:5c:ef:42:71:a1:48:
fb:02:6b:24:41:5e:c6:73:7a:10:bc:7b:4f:36:6f:99:d8:34:
4b:7f:77:8e:b9:0e:f0:b9:b0:17:1d:46:f9:13:ec:38:06:8a:
e0:18:7e:14:37:cc:d0:f1:15:b1:fa:c5:1e:2a:99:07:9c:51:
57:df:43:30:98:64:3b:cc:c5:9c:a6:d8:64:2f:1c:2a:ac:7b:
cc:84:1c:b8:1f:0a:ee:60:01:c1:19:19:d4:23:50:dc:a4:88:
26:6c:d1:a2:b8:9b:28:d6:71:5a:bd:07:cb:6a:f5:33:47:1f:
5f:c6:f8:be:59:8f:94:ff:21:fa:e4:70:27:b5:73:c6:0d:43:
64:9c:ba:c2:df:5a:7e:50:8b:c8:f7:1b:a0:82:8f:51:a7:6a:
f4:aa:c8:e2:3d:9e:bf:e4:d2:31:e6:bc:2b:54:fe:be:92:13:
53:10:8d:57:44:88:67:52:06:70:68:28:cc:2c:52:d9:51:18:
9a:de:30:cb:e1:e1:90:79:0e:52:f9:a9:c0:b3:a5:1d:6c:d3:
22:72:d0:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:00:19 2025 by rpki-client