Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BvTVMiHXvepA5sIli732rhf_xAI.roa
File: BvTVMiHXvepA5sIli732rhf_xAI.roa (raw, json)
Hash identifier: JW93NJ0WYF4p3r4C6/Sa0XBZMKwEre3SHV/CPQL2rBI=
Subject key identifier: 06:F4:D5:32:21:D7:BD:EA:40:E6:C2:25:8B:BD:F6:AE:17:FF:C4:02
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189CF7D3B8C2AF618FB79AEE7D83429C1AD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BvTVMiHXvepA5sIli732rhf_xAI.roa
Signing time: Mon 07 Aug 2023 10:13:58 +0000
ROA not before: Mon 07 Aug 2023 10:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:cf:7d:3b:8c:2a:f6:18:fb:79:ae:e7:d8:34:29:c1:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 7 10:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06f4d53221d7bdea40e6c2258bbdf6ae17ffc402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:96:46:52:33:4a:c7:24:be:8b:48:b7:a3:4f:
36:6d:de:e8:e4:48:c9:99:62:61:59:aa:80:8b:9d:
92:72:a3:37:3c:3e:ad:60:74:be:33:78:46:66:a8:
67:bf:a7:9e:5e:bd:e4:ac:38:a7:19:a6:e0:93:71:
24:59:72:0d:c6:f3:9a:24:24:fd:c0:69:a5:51:4d:
e7:8d:33:73:b8:fd:b8:95:2f:6a:b1:de:86:47:b5:
84:a4:97:13:53:ef:7f:1d:07:98:74:b9:f0:ef:9b:
a8:3b:04:3e:4c:89:2f:10:8e:80:51:bd:25:94:88:
96:6a:15:7a:b3:7b:c3:58:ee:ac:6d:d0:0a:14:84:
1e:8c:16:bb:79:80:e8:14:40:7c:46:6c:72:32:52:
fa:81:07:14:6f:6f:01:39:63:5e:d8:63:cf:94:6b:
be:96:d0:aa:e9:c4:cf:fb:c4:15:c1:fc:e1:95:f1:
b3:b0:f7:b3:90:cf:3f:3a:1b:3f:03:b1:53:d9:43:
2c:80:c4:43:88:d4:66:ea:46:55:17:17:73:d9:5b:
2a:84:af:50:8a:73:b3:96:3c:79:4d:04:8e:ca:6d:
e4:7a:87:56:4e:8e:6e:10:ea:0c:1e:2f:1a:75:b9:
3f:08:21:ea:8e:4c:7b:ff:ae:e5:1f:50:25:6d:8b:
2e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F4:D5:32:21:D7:BD:EA:40:E6:C2:25:8B:BD:F6:AE:17:FF:C4:02
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BvTVMiHXvepA5sIli732rhf_xAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
26:30:09:cc:2d:29:cc:18:15:46:a9:80:66:5e:0a:07:1b:d5:
86:06:d6:69:ce:4a:21:fd:15:ef:ae:0f:4e:cb:6e:79:af:ac:
24:e1:67:c4:da:99:26:da:1d:50:a4:dc:3e:0d:6d:03:7b:d2:
a6:4e:5f:0b:56:48:70:fd:13:a2:8d:7b:fd:eb:8d:ba:e9:2b:
a1:ee:a1:b6:a4:2f:a2:d4:45:14:6d:49:a0:ca:50:86:3e:8e:
74:45:8a:5f:fe:98:0c:e7:ea:d8:b0:4c:3c:31:f5:01:86:1a:
f8:ea:31:1a:6d:6b:8a:69:c5:80:ca:21:8b:7c:93:f8:03:61:
f7:e5:10:a8:a8:d9:b8:78:78:83:28:db:a9:03:74:ae:0f:32:
b9:a4:ae:99:3a:27:a9:fa:78:a8:8f:18:3b:22:25:9f:ec:0c:
87:58:0b:fb:90:9d:8d:be:73:09:e8:13:a1:11:29:b1:29:39:
cc:b9:df:fe:f7:22:ee:7a:91:a3:29:5d:1a:ea:bd:f4:fa:07:
35:fa:c7:b5:2c:cd:d4:0d:b1:74:59:97:93:c7:08:cb:0c:f4:
2a:a1:86:96:2b:99:82:71:61:94:4c:8e:a5:ef:e4:94:62:8a:
cd:8e:63:ac:40:d0:27:1c:4c:36:1e:cf:03:40:21:de:2f:25:
74:47:74:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 23:10:42 2025 by rpki-client