Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BgYykKDu5Dg1esYHL2tzNB8XHXg.roa
File: BgYykKDu5Dg1esYHL2tzNB8XHXg.roa (raw, json)
Hash identifier: 7Cyq1VlcigQbqvcKE+h0sDODW1tCwJf3PyzBU+e4nl8=
Subject key identifier: 06:06:32:90:A0:EE:E4:38:35:7A:C6:07:2F:6B:73:34:1F:17:1D:78
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01851240C79343FD05113F9617496A09BFAA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BgYykKDu5Dg1esYHL2tzNB8XHXg.roa
Signing time: Wed 14 Dec 2022 20:08:33 +0000
ROA not before: Wed 14 Dec 2022 20:08:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:12:40:c7:93:43:fd:05:11:3f:96:17:49:6a:09:bf:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 14 20:08:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=06063290a0eee438357ac6072f6b73341f171d78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ac:31:ab:29:97:68:37:91:46:af:43:e5:20:
4a:3e:82:da:2c:a5:d0:d0:56:fb:20:35:89:57:94:
b5:21:6c:f8:ab:46:1e:b1:45:88:72:44:ac:b1:15:
17:ae:55:ad:1a:57:54:be:83:27:1e:ba:01:24:98:
8a:8a:73:fa:42:64:89:28:b6:5d:bb:e9:af:5f:57:
f2:08:47:02:23:0c:e3:a0:d9:2f:d2:7f:13:69:98:
df:cb:4d:1f:ab:04:85:76:76:ae:11:3f:a8:6b:59:
0b:37:f0:0f:e4:8b:f9:a0:ee:ad:d2:59:71:61:21:
1c:ac:09:a7:a4:44:9f:b6:cd:30:7d:a0:7b:78:20:
54:d2:18:92:b5:98:2f:ac:ac:13:25:1a:33:6c:85:
4c:81:4d:28:45:0a:81:ca:46:f4:d7:fd:5f:a0:01:
a7:22:d6:5a:bc:32:0c:68:db:f9:09:23:e0:e9:a6:
56:29:8f:53:45:d7:5d:7e:2c:c6:32:cd:78:e8:77:
6c:f7:3e:b0:9a:ba:a3:e4:73:d9:ec:5b:a0:97:90:
c9:b6:a7:4d:ba:4f:18:a6:49:1d:82:d0:df:f9:0e:
91:a1:9b:b7:b9:cf:5d:79:f2:1e:5b:a1:62:48:b6:
ef:c4:14:70:b1:e6:bb:38:58:07:93:ef:bc:ff:65:
56:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:06:32:90:A0:EE:E4:38:35:7A:C6:07:2F:6B:73:34:1F:17:1D:78
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BgYykKDu5Dg1esYHL2tzNB8XHXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
66:f0:91:a2:fa:83:57:c3:8f:48:93:d6:77:3c:85:7d:ee:77:
db:43:4a:af:fe:9a:1f:a4:86:55:9a:7e:c5:1c:3d:bc:ad:12:
3c:ca:9b:65:c0:c8:45:3a:0b:e8:ca:72:7d:4e:51:75:a1:3c:
27:25:a9:c4:5d:00:58:7c:0c:c5:ae:f0:3a:57:69:2a:26:d8:
f4:1d:a2:9e:cc:a5:69:f4:10:cb:7a:b5:a4:7b:a3:75:3c:ec:
e9:fb:7c:35:e6:1a:11:2f:02:e4:e6:fa:44:b6:4c:46:b5:58:
17:07:02:bd:11:60:71:28:d3:aa:fc:78:d0:4c:d7:30:db:62:
ff:06:fc:2b:05:87:ea:94:bf:3e:f5:68:38:d6:84:92:5e:ce:
ff:29:45:f6:b4:62:f2:7c:92:99:ee:60:ed:51:08:8f:73:31:
36:68:c7:0f:68:3b:24:bd:b6:9b:55:83:2f:2d:ee:58:1c:c5:
e6:17:72:0e:74:7e:7f:05:9d:c0:27:8e:71:6e:19:2d:6f:ee:
2e:71:b8:6d:88:54:e3:bf:c4:b6:ce:4a:cb:29:6d:ae:8f:14:
34:29:67:64:b7:99:86:2a:4a:f7:fd:63:56:5e:9b:01:dd:64:
05:6d:72:5c:86:1e:5c:13:ea:93:3c:be:81:60:41:c2:26:57:
db:38:a6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:56:17 2025 by rpki-client