Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Bu3l5gRXeKdwwmK5iZ9E6lxCN90.roa
File: Bu3l5gRXeKdwwmK5iZ9E6lxCN90.roa (raw, json)
Hash identifier: sDHwndcxEN8qAtgD/zUfnbDSEnT2PATAuFueHSaa7rs=
Subject key identifier: 06:ED:E5:E6:04:57:78:A7:70:C2:62:B9:89:9F:44:EA:5C:42:37:DD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01855120C9D7D505120783D050056DB409EF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Bu3l5gRXeKdwwmK5iZ9E6lxCN90.roa
Signing time: Tue 27 Dec 2022 01:09:41 +0000
ROA not before: Tue 27 Dec 2022 01:09:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:51:20:c9:d7:d5:05:12:07:83:d0:50:05:6d:b4:09:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 27 01:09:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=06ede5e6045778a770c262b9899f44ea5c4237dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d8:71:d3:8c:7e:1c:f9:83:d5:6e:d4:e0:30:
d5:ff:46:4c:5a:b8:be:04:1d:ff:97:a7:53:0f:64:
18:84:20:75:b5:6b:c2:95:12:db:57:19:34:ec:78:
a2:f7:34:f6:56:77:b2:6c:d7:82:80:1b:5b:d2:1d:
49:c9:af:85:1b:22:83:13:db:33:10:8f:80:51:f5:
2d:2f:29:8c:97:97:d6:74:e4:51:55:3f:3f:bb:d1:
87:e3:93:fc:43:60:ee:54:7d:de:24:da:6f:6c:60:
55:e6:49:1f:97:ce:3e:c3:ad:a6:4a:44:bd:1f:6f:
10:cd:bb:23:94:dc:2e:67:81:1a:8b:23:d4:76:cc:
9f:bb:e2:80:2a:35:3e:06:44:04:e3:58:db:58:83:
9b:30:e2:b8:47:b8:fe:f7:dc:05:7c:9e:41:8f:83:
64:0e:40:05:d0:cf:46:a5:4d:a0:23:14:c7:e8:ee:
e7:f4:d9:6f:03:8e:39:2f:31:2a:16:0e:3c:67:4c:
ad:df:6e:32:e9:8c:f7:d4:68:5f:8a:1f:55:57:44:
45:3c:e3:fd:ef:97:8c:a7:a9:21:f9:e8:63:f1:76:
25:94:57:30:32:e2:6f:c3:46:d9:60:e0:10:db:9f:
22:d4:64:5e:2c:03:2d:c3:26:ef:83:bf:3e:57:36:
25:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:ED:E5:E6:04:57:78:A7:70:C2:62:B9:89:9F:44:EA:5C:42:37:DD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Bu3l5gRXeKdwwmK5iZ9E6lxCN90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
90:2b:bb:ef:cc:c5:b7:8e:ab:2e:ce:8c:eb:7d:7f:32:42:14:
09:d8:3e:35:c6:1f:e0:9f:63:c6:33:22:a1:18:f5:e8:b9:ff:
9a:da:91:1e:99:dc:43:b0:87:52:7c:77:32:42:bb:19:a1:c7:
bd:af:2a:fd:ed:42:73:c5:b9:8d:7e:58:e2:98:33:c9:ab:83:
a3:46:74:b3:8d:c6:ac:78:e7:c0:65:92:65:29:d6:ad:ea:f9:
fd:65:ad:3e:e3:f9:1c:85:4a:66:03:d0:a3:e1:59:ee:ff:63:
d1:be:f4:80:5d:0a:b4:1a:39:a2:c4:46:4e:2a:05:75:9e:6e:
fd:8b:6a:e6:f7:8f:7f:c9:1b:0e:25:47:23:41:16:f0:fc:c1:
b7:9f:17:65:08:e1:d6:65:5c:e1:14:ec:db:c4:39:35:64:d6:
63:1f:b2:8c:2d:bd:a5:1d:c6:18:f4:35:c1:6c:19:92:b2:02:
86:9b:1f:75:05:09:87:f8:d4:76:7c:3a:8d:ac:ec:f9:bb:dc:
60:8a:ff:ea:3b:b9:4e:d1:64:77:a0:ab:93:db:2b:ef:cf:2b:
ef:1b:fb:68:5a:c2:d1:b8:f4:db:2f:bb:8f:ab:ea:31:40:34:
88:b4:ff:28:d9:65:45:85:08:65:f4:96:97:fd:c7:9d:a8:0f:
9c:25:02:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:43:28 2025 by rpki-client