Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bDWpQjewY2t9BHuRNhQ-q0MJ-KA.roa
File: bDWpQjewY2t9BHuRNhQ-q0MJ-KA.roa (raw, json)
Hash identifier: F0RwoBMgbg7K0RDgpjm58NzgwbVnH+PQ+y+s3nkzUp4=
Subject key identifier: 6C:35:A9:42:37:B0:63:6B:7D:04:7B:91:36:14:3E:AB:43:09:F8:A0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186AA9473A2DF31F43AACB27F55F16FAF5B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bDWpQjewY2t9BHuRNhQ-q0MJ-KA.roa
Signing time: Sat 04 Mar 2023 03:05:00 +0000
ROA not before: Sat 04 Mar 2023 03:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:aa94:174f/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:aa:94:73:a2:df:31:f4:3a:ac:b2:7f:55:f1:6f:af:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 4 03:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c35a94237b0636b7d047b9136143eab4309f8a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f7:e1:e5:1f:15:2d:16:72:4d:dc:e0:98:60:
47:1b:91:57:09:b8:ac:00:a9:05:6f:88:03:5e:b7:
37:d2:e1:67:9b:c4:fb:80:46:05:26:58:84:de:c0:
32:d0:55:57:14:a2:a1:58:ac:90:c7:4c:fa:64:86:
6a:51:bb:0a:f9:06:1f:99:05:b8:d6:7a:9f:9d:3e:
e2:2f:46:f2:4b:23:db:c2:e1:9e:c2:48:c0:c8:68:
ff:97:2f:fe:fb:fa:d1:05:96:b9:bd:8f:2a:dc:35:
e6:a6:63:92:31:c7:cd:82:fe:bb:5a:07:f9:d7:7e:
ff:fd:b8:c7:4d:76:37:87:15:82:68:77:0a:84:a9:
9d:83:ea:37:e2:0e:06:ab:a2:16:0e:ce:1c:8b:8b:
2b:7d:0b:1d:60:ca:bc:24:28:3a:ee:75:da:e1:f6:
ad:53:d8:d8:8e:20:21:7f:02:89:be:49:b7:a5:67:
11:ae:b7:28:f5:bf:56:3c:1e:90:88:d7:22:15:29:
f7:21:16:f5:2d:dd:b9:57:62:12:ce:8d:c9:6d:9f:
4c:fb:82:60:39:22:d3:70:47:d5:1b:a0:fe:04:fd:
21:4e:87:2d:2c:0f:04:58:20:17:4d:89:2f:e6:e7:
30:c5:27:5f:fc:77:47:27:d4:1d:2b:ba:aa:4d:93:
35:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:35:A9:42:37:B0:63:6B:7D:04:7B:91:36:14:3E:AB:43:09:F8:A0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bDWpQjewY2t9BHuRNhQ-q0MJ-KA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
43:e7:fa:44:42:39:d6:17:a0:8b:4a:ef:71:60:e3:51:e5:e5:
16:69:77:92:fb:38:f1:69:9b:fb:cc:83:32:76:29:5f:cc:ba:
b0:c2:ae:02:69:50:ab:92:79:bf:2d:08:89:e0:10:89:6b:19:
91:ba:d1:cc:fe:f8:b8:23:f6:55:7b:3e:22:04:47:31:c5:4c:
70:da:44:a8:f3:f6:c0:f0:fd:26:26:6d:38:95:f7:16:71:2f:
71:ae:83:da:1c:74:f3:56:11:98:ec:56:a3:25:b4:60:fa:79:
84:bf:9d:57:63:d6:ff:3b:fb:a1:48:86:1b:1d:9c:60:0d:6c:
d2:64:f5:aa:93:4f:4e:92:ef:28:c3:b8:8b:eb:c9:49:3b:fe:
f4:39:8c:93:39:62:9b:9d:24:28:b4:9b:13:21:d0:fe:ca:ff:
dd:34:98:0d:f7:78:0b:bc:3e:b3:1d:6b:87:70:c7:49:30:92:
0c:0d:f2:e7:07:36:0a:c3:74:be:46:67:b3:8a:0f:6c:85:57:
af:a8:ba:0a:29:03:0b:d7:af:57:68:f8:a7:42:e7:7f:39:fc:
8f:c3:40:7f:0b:e8:bd:91:d1:96:ba:94:ae:63:f5:44:0d:51:
fb:b8:f1:c5:80:92:2f:e8:15:bd:17:73:53:77:7d:49:1c:da:
3a:ad:37:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 04:05:55 2025 by rpki-client