Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_BZCD_DXgBOTeLyzh4NRwnDNlU8.roa
File: _BZCD_DXgBOTeLyzh4NRwnDNlU8.roa (raw, json)
Hash identifier: O6CqGqjyxsOWlZxbsa9nXSZ6eY4X6GF58d+VLPOJbJg=
Subject key identifier: FC:16:42:0F:F0:D7:80:13:93:78:BC:B3:87:83:51:C2:70:CD:95:4F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01899AEA8054BF9B2F753285BEDAE0CEFA54
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_BZCD_DXgBOTeLyzh4NRwnDNlU8.roa
Signing time: Fri 28 Jul 2023 05:13:26 +0000
ROA not before: Fri 28 Jul 2023 05:13:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:9a:ea:80:54:bf:9b:2f:75:32:85:be:da:e0:ce:fa:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 28 05:13:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc16420ff0d780139378bcb3878351c270cd954f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:88:30:88:73:7c:82:a9:1d:b1:18:4a:2f:46:
93:6d:d1:3e:7b:e7:6c:f8:9c:a2:17:2d:6d:bb:20:
28:32:cc:ba:22:7d:42:e5:48:de:bc:34:ed:dd:b9:
6d:f6:35:4b:66:1e:4f:a3:a9:66:a7:33:a3:1a:cc:
c8:0a:28:03:ce:f3:f7:66:68:1e:d9:cf:be:c0:22:
30:68:2a:52:8f:92:eb:31:6f:8f:0f:c6:e0:c6:5a:
cc:68:ad:c1:5c:0a:04:a2:fc:be:91:7e:23:a4:27:
c4:4e:10:b4:4c:c1:36:49:8d:1b:d6:b3:21:66:1a:
3e:d3:5e:42:68:c8:e9:de:08:60:12:59:97:da:06:
3e:59:b6:50:31:97:8f:37:c2:01:d3:1e:8b:2d:18:
e9:6f:d6:84:f7:82:0e:b7:29:7d:36:95:6b:0d:e6:
50:d9:98:da:87:9b:d1:ca:d4:73:1b:4a:e9:5a:36:
9e:a4:62:ea:6a:2d:9e:10:4b:f9:d4:ac:8b:47:55:
b2:be:00:04:51:32:da:0c:1b:ae:af:d7:f4:4f:a0:
41:25:25:2d:1e:51:bc:b9:75:4b:77:fd:fb:4a:a2:
8f:e8:ee:35:7f:07:9d:3e:45:57:98:af:1f:8c:7d:
2c:dd:46:bf:02:47:1b:74:a0:ac:96:1b:b6:2c:b9:
65:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:16:42:0F:F0:D7:80:13:93:78:BC:B3:87:83:51:C2:70:CD:95:4F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_BZCD_DXgBOTeLyzh4NRwnDNlU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
16:be:06:e3:80:d2:b7:8d:57:6b:72:0c:ff:63:cb:85:06:2f:
d0:0b:52:10:a1:76:5f:ec:df:f5:1b:59:96:41:c7:9b:96:a3:
19:34:a4:ff:1e:88:5b:3b:65:a8:62:62:55:b8:40:cf:e3:a5:
50:5e:91:b4:d4:92:2d:44:72:5d:6b:89:23:83:3c:b6:e7:4a:
da:e6:f4:bd:5a:67:ea:a9:19:dc:95:cf:91:3a:06:89:b1:30:
e3:a3:e7:07:d2:ac:35:0b:b8:74:5d:12:fd:9c:6b:d9:b5:fa:
44:3e:41:17:14:df:59:50:68:e1:fd:70:2c:a6:8c:a6:74:42:
91:25:68:8d:02:9b:15:55:de:19:c5:f8:b0:8f:f8:a0:83:60:
b0:ca:56:eb:49:69:16:24:22:0b:30:98:b9:f5:ad:86:79:b4:
70:a7:1e:3a:20:68:7d:22:3d:77:0c:c8:fb:fd:d4:96:a3:20:
af:57:9d:f2:b2:a0:9e:cc:5f:22:38:d9:1e:94:f9:f5:22:45:
9a:88:6c:cf:cf:18:04:c6:36:bd:30:1b:94:61:ac:74:09:12:
1c:66:77:a8:30:8a:ad:d9:9c:01:b3:83:b8:52:31:12:b7:80:
97:9f:91:7a:ab:2b:25:a3:a7:d2:26:d7:5b:2d:49:ad:02:32:
fe:49:f5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:00:35 2025 by rpki-client