Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BbP0hbqLmu0U-a9m_7Yr5Tcr6DI.roa
File: BbP0hbqLmu0U-a9m_7Yr5Tcr6DI.roa (raw, json)
Hash identifier: a0U1DAgoILq3us3b6ab6noCb8i2rA6oRHCrL4qBPbzo=
Subject key identifier: 05:B3:F4:85:BA:8B:9A:ED:14:F9:AF:66:FF:B6:2B:E5:37:2B:E8:32
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189F2411223520C742C7D6D2BBB07F80690
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BbP0hbqLmu0U-a9m_7Yr5Tcr6DI.roa
Signing time: Mon 14 Aug 2023 04:14:57 +0000
ROA not before: Mon 14 Aug 2023 04:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f2:41:12:23:52:0c:74:2c:7d:6d:2b:bb:07:f8:06:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 14 04:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=05b3f485ba8b9aed14f9af66ffb62be5372be832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:90:87:ba:07:a3:04:2f:2e:6b:e9:4a:40:2c:
e3:44:8c:aa:cf:24:1c:26:58:51:19:02:bf:2a:10:
5e:6e:75:f3:da:b9:85:32:11:61:8f:01:07:c2:b7:
68:f7:6b:1c:d2:86:a1:a7:02:de:33:6f:47:7b:19:
b6:10:9d:b5:93:a6:4a:4f:3d:eb:dc:4b:15:0b:66:
15:08:ef:b3:3b:e3:44:1b:18:93:50:27:c6:31:85:
5b:d4:0d:bf:54:b9:f8:65:74:db:87:0c:e9:fa:76:
d4:5a:28:97:35:d4:56:7a:dc:13:f7:13:f4:5c:2f:
89:4f:e6:30:cd:be:fe:94:e5:36:ee:7c:b9:14:bb:
83:26:0e:d0:c9:81:cb:76:d0:19:b4:ca:1c:60:72:
d5:1d:d1:d7:82:08:14:18:57:11:4f:2a:1b:d1:d9:
75:17:e5:81:07:fb:13:89:64:47:7e:ff:95:c5:c5:
13:c1:c0:dc:d2:64:90:bf:6b:b2:6c:e5:3a:d5:4d:
e0:7a:72:d3:27:11:0b:0f:80:fb:57:b2:02:fe:0e:
7a:5a:68:38:b2:79:1a:bb:b3:37:f4:ed:17:2b:1b:
85:7b:e4:f9:b3:4f:7b:1a:d3:67:47:94:f3:c4:42:
04:68:9b:f0:15:c7:a8:80:19:55:e5:e9:d0:61:7d:
52:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:B3:F4:85:BA:8B:9A:ED:14:F9:AF:66:FF:B6:2B:E5:37:2B:E8:32
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BbP0hbqLmu0U-a9m_7Yr5Tcr6DI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8f:16:6e:7b:e3:79:25:be:5c:fc:10:cb:a8:37:bf:cc:b1:aa:
70:00:19:98:bc:41:b5:60:b8:1e:d4:e5:19:9f:5c:70:c5:cc:
42:48:b3:c6:01:55:95:53:18:16:b3:e4:21:8d:bc:b4:3d:00:
94:14:52:d3:0d:60:8e:1c:03:88:48:fa:d4:23:61:1f:5c:54:
d4:a3:d3:d7:a9:b7:93:6d:e5:2f:02:cb:80:1e:c7:61:58:5e:
df:4c:10:a0:85:d9:ec:63:15:1c:bc:58:e7:a0:b0:35:27:e8:
e9:8c:78:00:7d:08:60:b3:af:e3:45:95:46:58:16:71:24:1d:
ec:58:28:c0:b1:ee:5d:18:b1:3b:d8:46:85:35:34:67:be:82:
3f:48:ad:9f:d8:89:0a:fa:91:5a:7f:5b:ce:eb:1f:2e:8e:4b:
21:f7:e3:0f:23:df:29:ab:9d:97:e9:df:8d:d2:86:92:59:3e:
e6:d2:b3:fe:c1:ac:3a:5a:8c:cc:bc:ca:b3:a1:bb:51:6c:13:
dd:c5:ab:1d:1d:d0:2b:f3:69:54:f1:6b:02:4b:f4:81:91:9a:
84:2a:ea:ed:cf:c8:99:8c:1a:df:d7:56:d7:72:6b:71:22:ee:
75:83:36:52:00:a0:24:21:0c:b5:0f:ce:21:80:fd:0a:81:da:
a5:42:b0:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 11:56:29 2025 by rpki-client