Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BrQpnDPn4PuGg4bIkxej0u4Z17o.roa
File: BrQpnDPn4PuGg4bIkxej0u4Z17o.roa (raw, json)
Hash identifier: DHqexPUhSK4kgV28GBl9NgXY5X6d47sECEDFHrOuT6Q=
Subject key identifier: 06:B4:29:9C:33:E7:E0:FB:86:83:86:C8:93:17:A3:D2:EE:19:D7:BA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018936E90DDE2F217335F807ECA7CEA1280D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BrQpnDPn4PuGg4bIkxej0u4Z17o.roa
Signing time: Sat 08 Jul 2023 19:09:50 +0000
ROA not before: Sat 08 Jul 2023 19:09:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:36:e9:0d:de:2f:21:73:35:f8:07:ec:a7:ce:a1:28:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 8 19:09:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06b4299c33e7e0fb868386c89317a3d2ee19d7ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:11:6e:2b:62:b0:d0:16:9a:cd:d0:60:ae:ff:
6e:16:17:7c:35:15:98:d7:23:ea:67:48:04:9d:7b:
b1:4f:b2:f1:ec:bd:b0:d8:95:25:0a:01:7d:42:09:
7c:9c:2e:a8:ff:82:4d:95:f8:1a:f2:33:c0:65:23:
36:f3:87:9b:69:2e:43:50:66:b9:eb:a8:01:e3:a9:
36:fb:59:9b:0a:e9:8a:84:1f:2d:45:d6:03:c5:68:
12:d0:73:a5:2b:0f:a6:99:e6:4b:a1:7c:4d:c2:9d:
4b:30:da:4b:92:dd:6c:d9:96:5f:96:0e:66:59:ce:
2e:95:84:02:73:94:f8:b6:ad:8e:47:da:ad:14:ea:
23:b7:f3:f4:43:92:f3:27:4e:11:9d:d1:08:1b:70:
56:3a:a5:e1:27:15:92:f8:be:81:fd:93:0c:39:3b:
7a:c3:11:6f:01:21:c9:e8:d0:7d:ff:30:4f:44:fc:
49:4b:ef:1d:c0:58:4d:3c:a2:02:ae:35:43:c8:04:
5e:db:dc:5c:d9:be:37:26:f0:d0:80:00:04:20:d3:
7c:f5:0c:01:24:24:b0:d6:16:4c:15:14:c9:fd:6b:
33:00:27:ae:e6:d3:1d:09:3e:b6:8f:31:52:4c:4b:
5b:70:b1:8c:61:dc:00:fd:a7:57:31:a4:79:f0:89:
67:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B4:29:9C:33:E7:E0:FB:86:83:86:C8:93:17:A3:D2:EE:19:D7:BA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BrQpnDPn4PuGg4bIkxej0u4Z17o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7e:9b:0e:cf:82:ad:1a:52:5b:63:71:56:9b:55:b2:b2:14:09:
44:30:2f:4a:f5:b1:0d:29:b9:c3:c2:a4:65:72:66:ae:98:3e:
55:f8:8d:78:13:9a:18:18:e1:5f:3d:7d:4e:23:74:e1:8b:8a:
79:93:22:a5:c0:d0:53:3b:72:b1:57:2b:ce:e9:3a:94:f8:a0:
e0:2f:0d:c9:2c:ad:ff:36:f6:e1:11:4c:3f:72:0f:44:93:df:
e4:d7:7a:09:b6:52:ba:2d:49:01:8f:ce:0b:89:39:1a:b3:48:
d5:a6:97:3d:b3:01:bc:3f:79:54:65:1b:5d:ee:54:ae:83:89:
6b:a9:56:d2:ad:91:05:08:ab:28:45:9f:61:cf:e8:29:26:37:
34:e5:98:23:c0:7f:20:32:0f:77:52:b4:19:41:19:97:31:89:
0d:df:34:e6:67:74:fe:d8:35:0d:01:b8:d9:ac:53:0d:f8:65:
fe:5f:df:7f:37:54:99:4f:aa:33:05:50:cc:8d:68:9f:43:35:
ba:33:1e:23:83:d1:76:82:be:57:ee:ad:75:3c:5c:90:35:4a:
06:b3:a4:45:c4:fd:84:c5:7f:e0:0d:f1:42:57:61:74:17:1d:
77:5a:10:f5:23:c4:88:09:18:9f:f1:c7:bd:21:c7:9a:af:de:
9f:12:05:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:43:32 2025 by rpki-client