Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Bt46mCKTN2da4Ibg5KA5a5gu7d8.roa
File: Bt46mCKTN2da4Ibg5KA5a5gu7d8.roa (raw, json)
Hash identifier: mNTpVj0krfe09/kweVDntHyEnTD+fIGWZ5OXX9xXhE8=
Subject key identifier: 06:DE:3A:98:22:93:37:67:5A:E0:86:E0:E4:A0:39:6B:98:2E:ED:DF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189B321B2852F9609BD9571C3F5BC72AB7E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Bt46mCKTN2da4Ibg5KA5a5gu7d8.roa
Signing time: Tue 01 Aug 2023 22:04:37 +0000
ROA not before: Tue 01 Aug 2023 22:04:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
2001:67c:64:ffff:0:189:b321:5b7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b3:21:b2:85:2f:96:09:bd:95:71:c3:f5:bc:72:ab:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 1 22:04:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06de3a98229337675ae086e0e4a0396b982eeddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:2e:9b:1e:46:09:3c:ee:0c:90:b4:b7:8d:3a:
f5:71:93:50:42:07:fa:48:89:14:4e:8f:9b:22:09:
73:16:04:0f:3c:e3:61:ea:6f:70:93:7b:8d:fa:57:
ab:7d:67:56:57:18:11:3e:07:8c:d1:6f:23:87:2f:
31:19:30:b7:14:18:b1:ee:99:0c:5f:0b:39:4c:5a:
68:e7:2a:cb:20:88:82:0f:82:e4:d2:7f:07:b3:6c:
c7:7e:c4:bc:30:7d:e9:91:32:e2:fd:a3:48:35:b5:
e5:aa:72:e7:56:6c:97:e6:07:21:d7:39:2a:a6:3f:
5b:ed:65:e8:54:d0:0f:09:44:0e:80:3a:ce:7f:52:
76:50:e0:aa:74:e3:c6:9e:49:2d:d4:0f:c4:cd:6a:
51:f8:26:d5:89:44:d9:cf:91:69:2d:3b:bf:19:f3:
ec:ed:67:6a:7f:c3:cf:e4:ff:a4:50:13:e2:6c:ab:
02:b8:c1:b2:95:c8:64:89:9d:ce:9d:6a:b3:53:e0:
2a:26:1f:7e:37:0e:ac:5d:52:c6:01:01:74:7d:c2:
b9:71:c3:8b:a2:16:e6:75:0a:88:b2:f9:4b:4e:62:
5d:28:11:e4:3b:f2:dc:5f:bb:43:cd:38:66:ee:a3:
69:0c:26:bb:ab:46:de:2e:88:7c:5c:37:4f:ac:fd:
2c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:DE:3A:98:22:93:37:67:5A:E0:86:E0:E4:A0:39:6B:98:2E:ED:DF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Bt46mCKTN2da4Ibg5KA5a5gu7d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
96:69:99:ae:c3:65:98:b9:f5:f9:67:57:46:7c:c9:1f:10:65:
7a:87:46:28:85:12:40:ef:d1:ec:69:7a:a1:8a:01:5c:d0:9e:
49:cc:a1:bc:26:9a:0f:33:ae:c4:ed:7c:3a:79:8e:a0:4a:95:
9e:35:cd:69:5a:55:39:61:10:79:64:d4:ea:4b:94:25:69:35:
9f:75:74:c5:ba:c2:af:f8:70:9c:78:43:c1:f7:37:bc:6d:db:
87:39:3f:e1:9f:5d:c5:75:54:d0:f0:02:36:82:94:fa:ea:d0:
ed:b9:78:36:5c:60:83:13:c6:19:e4:79:21:c3:9f:0a:14:c0:
e0:e3:af:7f:a2:7b:86:93:ca:77:83:0a:ca:7b:a5:35:0f:f7:
c6:1c:be:14:80:45:ec:b5:01:dd:3a:3b:bd:b1:c3:77:65:86:
6c:cb:ec:34:0e:f4:e1:d6:d2:aa:bc:62:82:98:2d:eb:77:26:
14:0a:23:1d:0c:0b:0e:71:ff:ed:16:32:8d:9e:f9:d7:06:f3:
40:81:3e:05:e1:18:e6:a8:7d:65:e0:4a:76:6c:00:0f:eb:18:
3f:7d:a6:05:bd:a7:c9:54:33:0c:6c:9b:72:06:37:ba:3d:c0:
f5:fb:a8:68:99:b7:b8:8e:47:b5:ae:e4:d2:d9:1c:86:75:74:
95:0d:37:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:43 2025 by rpki-client