Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BmEaImA21f4ncJtyyiWzrWY3Um8.roa
File: BmEaImA21f4ncJtyyiWzrWY3Um8.roa (raw, json)
Hash identifier: nblz33unD5is7cIzm8C+05KwhevNInXj2IqWmnDE6GI=
Subject key identifier: 06:61:1A:22:60:36:D5:FE:27:70:9B:72:CA:25:B3:AD:66:37:52:6F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A1A8F780C37127E1310489ABA73A08DA7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BmEaImA21f4ncJtyyiWzrWY3Um8.roa
Signing time: Tue 22 Aug 2023 00:05:24 +0000
ROA not before: Tue 22 Aug 2023 00:05:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:178d:7ed9/128 maxlen: 128
2001:67c:64:ffff:0:18a:1a8e:b665/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1a:8f:78:0c:37:12:7e:13:10:48:9a:ba:73:a0:8d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 22 00:05:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06611a226036d5fe27709b72ca25b3ad6637526f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:88:37:1d:33:6e:b0:6c:77:fb:7f:99:51:95:
f6:30:d6:fe:e5:c4:b4:d0:6c:b4:55:19:5c:26:97:
1f:59:4a:99:ba:19:64:94:52:d0:bc:a9:0e:4d:82:
94:60:25:09:f9:21:59:db:2c:91:dc:48:ff:10:99:
11:2e:a7:3f:a9:49:bf:4e:78:db:f9:ad:38:e3:ec:
74:a3:43:ce:e2:45:c9:f8:b0:84:1a:e9:d7:17:7f:
17:46:5a:89:90:46:83:bd:ba:ed:96:bd:1d:88:30:
3f:08:09:61:b9:7b:19:4f:68:17:19:5d:75:5e:3d:
de:d4:48:4e:81:f1:a6:ec:6e:f9:1d:1c:d7:74:a9:
89:32:48:20:bc:17:18:f4:cc:7d:84:e0:01:e4:0b:
87:d0:ae:99:fe:79:22:4b:79:f9:ac:7c:25:21:7f:
4a:97:9b:d0:62:d2:01:de:a3:8b:f2:91:24:75:7c:
b5:f6:27:67:08:4f:d7:93:19:b1:3a:45:f7:9a:31:
24:5b:30:1e:e3:4f:21:c4:0c:72:03:4d:cf:10:56:
a5:ba:e8:51:5c:9a:64:bc:94:e1:03:75:d8:ae:76:
8b:6a:18:3e:1b:6b:50:39:b2:3b:37:20:d4:8e:7b:
fc:5c:25:41:52:41:e3:d5:08:aa:b4:66:58:d7:2c:
2c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:61:1A:22:60:36:D5:FE:27:70:9B:72:CA:25:B3:AD:66:37:52:6F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BmEaImA21f4ncJtyyiWzrWY3Um8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0f:5c:0d:88:dc:c9:f9:08:bc:2a:16:21:fb:e4:f1:ae:92:68:
71:2c:93:52:79:c5:2e:af:66:6e:c4:6f:6b:6d:d4:f4:d9:d8:
6c:b8:f6:c3:be:92:ec:d0:e6:f0:f0:a1:17:a5:3e:6b:37:06:
51:e9:14:e8:cf:26:ff:a7:d1:0a:44:d9:45:5b:7c:fd:4f:76:
fd:41:91:84:ef:ac:90:3a:2c:39:e9:b4:17:50:60:91:80:94:
01:45:37:5a:c4:aa:0b:a5:bf:ba:9b:a2:53:65:21:ea:1e:20:
7d:87:2a:04:5b:e4:60:dc:99:40:c4:62:c6:f0:ca:c5:84:c5:
bf:1b:8b:8a:f1:9f:3c:8b:a1:f6:30:1c:fa:4f:52:0a:c3:99:
47:c3:55:22:30:60:a8:eb:1e:9a:ca:0e:0c:c4:26:b9:23:17:
bd:25:c8:83:f6:b6:4e:31:c8:7c:12:67:ab:62:4c:c6:e6:1b:
64:aa:b7:1e:bd:14:2c:26:6a:4d:ad:60:61:fb:3a:a7:f2:40:
c9:64:ba:cc:da:9d:c3:e6:06:98:f5:86:b7:90:c5:fc:78:86:
ad:55:b2:f8:f5:ef:3a:ba:e7:8c:80:db:b8:97:ad:38:2e:f8:
ea:13:23:74:ab:8e:e4:7b:48:45:d9:a4:d7:e9:42:b7:bb:5c:
1c:54:48:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:06:08 2025 by rpki-client