Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BjwRViJv0tnSnA-eo3Zfh1xkZLU.roa
File: BjwRViJv0tnSnA-eo3Zfh1xkZLU.roa (raw, json)
Hash identifier: wwgmDSThJmb1Z465mvm8sxjoSuBPPxj3zq0cckBts7c=
Subject key identifier: 06:3C:11:56:22:6F:D2:D9:D2:9C:0F:9E:A3:76:5F:87:5C:64:64:B5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01876FD3E616EA7CF7EEBE70B0B8C4CF35DF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BjwRViJv0tnSnA-eo3Zfh1xkZLU.roa
Signing time: Tue 11 Apr 2023 10:19:30 +0000
ROA not before: Tue 11 Apr 2023 10:19:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6f:d3:e6:16:ea:7c:f7:ee:be:70:b0:b8:c4:cf:35:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 11 10:19:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=063c1156226fd2d9d29c0f9ea3765f875c6464b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7a:aa:11:ca:5e:a3:4c:19:7a:ce:f6:13:23:
57:4f:ce:ce:77:e5:20:99:43:4b:b8:1b:07:b7:ba:
50:ac:dc:30:5f:75:8f:3e:de:0e:1d:0d:71:25:bc:
4f:53:0a:8e:a6:1b:64:93:df:6d:f6:75:47:9d:ef:
4a:c5:9a:df:17:40:cb:de:ab:cd:28:77:3c:4d:42:
3f:1d:db:60:90:e9:c6:91:75:f9:a2:3d:6b:b2:eb:
88:97:86:51:23:6b:46:23:da:de:c0:28:f2:18:f9:
d0:d1:86:4f:4b:82:f8:bb:cd:fe:5c:a1:eb:68:b1:
23:b0:6b:18:83:47:94:82:9d:f9:88:f5:ea:7d:89:
8c:48:c2:7c:a1:f7:2c:15:e7:10:68:0b:b3:a2:2f:
5f:69:94:36:96:2b:21:fa:58:29:5d:bc:46:18:f9:
df:01:6e:3a:57:de:b1:1a:e5:c8:74:9c:dd:84:59:
78:50:55:be:c7:73:97:16:c1:e9:0b:6b:fa:3b:15:
fc:b1:66:81:4b:b6:89:59:ac:72:19:e1:16:4f:9a:
70:57:84:32:38:0a:28:3c:1f:90:c5:59:00:8b:bb:
81:b4:5b:f2:6e:7d:5f:d1:79:a3:f1:21:c2:7f:61:
98:a1:b2:1a:79:e4:64:61:fa:1b:7b:b4:a4:05:f1:
a6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:3C:11:56:22:6F:D2:D9:D2:9C:0F:9E:A3:76:5F:87:5C:64:64:B5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BjwRViJv0tnSnA-eo3Zfh1xkZLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
66:98:90:5e:47:a1:50:e5:ef:2c:99:ea:7c:74:eb:ad:4b:cc:
99:5f:9c:b3:1b:aa:af:76:e3:df:14:ae:8d:87:2e:52:1e:1b:
e1:67:f4:f0:06:f6:d7:76:67:77:be:88:85:d2:58:06:c3:65:
24:2f:68:b9:34:f8:2f:dc:f5:ce:50:81:38:fb:22:7b:12:04:
5d:d6:0c:67:76:04:05:70:62:9d:3e:a3:bf:a4:3d:94:fa:6c:
14:58:81:58:9a:a2:fd:11:9a:31:60:a1:04:29:30:a9:8a:bd:
a2:71:77:b1:4c:2d:db:94:7a:a5:48:2e:18:49:55:b8:cf:0a:
6c:d1:2f:d6:e0:a0:06:ca:a3:55:12:cc:63:51:33:6a:b0:84:
ee:c6:cc:10:ce:27:94:ff:88:f0:14:4f:f1:f5:a1:55:d4:2b:
d7:c7:74:22:0f:4e:ca:37:2e:61:98:e9:3a:87:44:ab:8c:e0:
45:91:7c:8a:d5:a3:a4:e6:79:ce:93:dc:11:54:95:e6:75:cc:
49:93:25:72:88:8d:ed:f8:17:6b:af:25:e4:f3:10:cc:63:99:
1d:55:aa:cf:58:ae:c7:64:47:a8:93:b6:0b:55:da:ec:d6:2c:
44:29:89:1e:3d:f7:35:e0:a5:94:2b:73:98:e9:f1:d1:ea:8d:
05:93:87:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:23:25 2025 by rpki-client