Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Bwbqua65Ufq8Hke5hxTg_xWOlnM.roa
File: Bwbqua65Ufq8Hke5hxTg_xWOlnM.roa (raw, json)
Hash identifier: ggT1lsqz2O0aRHnsDZRfvbYSqDm2ILTDGkNzyEzh3vk=
Subject key identifier: 07:06:EA:B9:AE:B9:51:FA:BC:1E:47:B9:87:14:E0:FF:15:8E:96:73
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8989D31A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Bwbqua65Ufq8Hke5hxTg_xWOlnM.roa
Signing time: Fri 03 Jun 2022 09:11:20 +0000
ROA not before: Fri 03 Jun 2022 09:11:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2307511066 (0x8989d31a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 3 09:11:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0706eab9aeb951fabc1e47b98714e0ff158e9673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:54:cb:0f:c5:eb:28:a9:59:29:87:1e:87:34:
63:07:2b:cf:23:00:9b:fb:17:c1:b9:c9:5d:a9:84:
83:b7:7f:e2:55:b6:c3:0f:6b:f0:2e:9b:d0:3d:63:
ed:80:42:3d:90:ed:81:f0:e0:70:39:ba:d2:aa:95:
74:ba:2e:ed:ac:87:83:5a:bf:86:0b:2f:c7:d4:bd:
26:6c:3f:fa:50:4a:52:46:f8:d9:9f:51:fa:0c:6a:
84:46:ac:c5:39:95:b1:49:a4:28:bb:52:24:61:a4:
36:db:ac:cf:e1:b6:ba:07:89:f7:12:e7:55:03:3b:
bf:d4:23:c4:97:4f:5d:8a:23:38:b4:30:5b:28:88:
ad:06:96:a2:dd:7d:38:58:74:24:ad:57:07:19:73:
59:60:5d:c9:cb:2f:2d:c3:79:9e:94:91:80:70:2a:
e4:9d:32:7b:60:ae:a3:ad:6e:97:76:cf:af:89:34:
85:d4:91:89:dc:d4:29:1c:43:db:2e:80:24:fb:39:
7c:29:12:6e:e0:d5:55:b9:12:2c:1f:71:75:2b:ff:
d6:8b:ef:1c:1a:79:66:3e:ec:f7:f1:84:5c:dc:f0:
74:a4:4e:6f:f2:36:56:83:1c:31:bf:dc:30:13:03:
56:6e:61:bc:48:91:59:fb:e6:4f:13:eb:f7:6d:2c:
7d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:06:EA:B9:AE:B9:51:FA:BC:1E:47:B9:87:14:E0:FF:15:8E:96:73
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Bwbqua65Ufq8Hke5hxTg_xWOlnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0a:e8:59:18:b9:fe:41:93:11:0b:fd:71:18:5e:55:8a:f3:7b:
f3:d1:44:69:0d:3e:32:a9:67:0f:9a:41:14:35:44:dd:de:2c:
c7:49:76:da:a3:83:41:30:eb:65:5b:16:38:2c:19:0c:6d:1d:
7c:61:53:1f:36:c4:2c:a1:d3:35:64:68:19:2e:89:5c:0a:89:
cb:0f:e1:59:f9:c7:46:9f:57:27:1f:67:4e:5d:bc:36:9c:25:
58:a2:73:54:31:73:aa:76:4b:2e:6a:c6:0a:83:0d:27:1c:d2:
a8:46:1e:45:a4:74:23:9e:37:ca:15:2b:c9:a6:8a:b2:95:90:
d9:3a:0f:c4:f2:ad:62:c3:2d:54:f3:34:f7:91:fb:2f:c3:36:
b7:ef:d4:dd:1c:67:28:87:a9:a3:02:fb:97:2e:8a:1a:36:24:
9d:2d:d2:d7:20:30:0d:8c:e4:8b:2e:4f:28:06:8a:4d:3e:cc:
47:97:bd:1c:c8:d9:a3:5d:e5:e5:0a:96:dd:cc:24:e1:13:31:
9c:4a:46:71:ae:87:20:07:e1:0e:35:4a:2c:ad:73:31:f2:bd:
0d:25:89:1d:3f:6a:3c:31:3c:d0:ac:13:16:77:00:34:24:23:
3b:e2:83:29:f5:77:64:34:2f:f8:d0:19:ea:14:2c:8d:2d:d6:
88:9a:b8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:24:30 2025 by rpki-client