Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bEsBslUM05EpSJiz62kp8esV-Ts.roa
File: bEsBslUM05EpSJiz62kp8esV-Ts.roa (raw, json)
Hash identifier: Qo94UyBXnikNEcCvQJlCJuVhXafd61um7n0/b0RiGKU=
Subject key identifier: 6C:4B:01:B2:55:0C:D3:91:29:48:98:B3:EB:69:29:F1:EB:15:F9:3B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189E5CE20C0BB9BB58270789AD778927C43
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bEsBslUM05EpSJiz62kp8esV-Ts.roa
Signing time: Fri 11 Aug 2023 18:13:58 +0000
ROA not before: Fri 11 Aug 2023 18:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e5:ce:20:c0:bb:9b:b5:82:70:78:9a:d7:78:92:7c:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 11 18:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c4b01b2550cd391294898b3eb6929f1eb15f93b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4e:cc:9e:36:43:5f:ca:54:56:f7:80:b0:b1:
26:e8:0b:31:71:d1:63:5c:c4:56:be:12:c8:1d:27:
3d:70:7c:77:72:55:d1:d6:0d:dd:21:b8:5b:d2:b0:
89:6b:54:4d:bb:a7:e3:f9:21:1b:26:87:74:5f:94:
24:f9:71:05:12:0f:01:0f:ef:f4:83:19:c3:e5:94:
89:23:bc:a9:cc:b9:f2:d4:2d:dc:b8:ac:78:b6:91:
c8:ec:16:33:47:ba:98:82:49:93:68:cc:b4:d4:56:
23:ce:87:8a:19:a2:c4:27:e8:b5:34:6c:9c:e8:18:
4f:86:65:0f:28:7e:af:c7:c6:55:be:a3:0c:df:5c:
21:e3:b3:e5:05:6e:de:84:e0:8d:b2:5a:27:a1:e2:
ac:d9:bf:56:1a:82:a8:5e:78:f6:fa:5e:29:0c:74:
df:eb:ac:d3:c1:ea:d8:a7:ed:90:f9:70:d4:77:77:
b1:50:90:e3:7e:33:42:18:1a:f0:b1:06:34:4d:24:
56:20:73:ef:db:3f:bb:0a:50:33:dd:93:0a:72:a8:
5a:f6:10:28:7e:92:d2:09:f9:50:7b:5c:6b:c9:85:
84:9f:2a:c5:69:c7:26:41:f6:20:07:50:69:48:91:
92:82:b2:df:1b:a0:a7:f3:d5:5a:eb:57:a7:cf:8a:
be:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:4B:01:B2:55:0C:D3:91:29:48:98:B3:EB:69:29:F1:EB:15:F9:3B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bEsBslUM05EpSJiz62kp8esV-Ts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
16:ab:70:8f:76:e1:f9:95:0d:5b:7a:82:63:a0:f6:85:70:43:
fb:15:ab:0b:e5:e1:91:6f:7a:72:4c:1c:fc:63:f3:27:fc:d3:
b1:0b:f7:a4:13:57:1f:a3:e5:93:87:a7:66:b6:db:21:1f:32:
98:d1:8e:1d:00:01:e9:b2:88:4d:8f:9d:79:8b:c2:45:87:4a:
59:9a:de:d1:52:2d:5a:ef:30:41:60:c4:6b:fb:09:61:da:73:
e3:2e:b7:36:48:55:92:aa:23:3d:d5:08:66:17:d4:3a:15:c8:
0c:95:9e:f5:41:f1:98:21:08:2f:71:50:01:28:32:83:88:1c:
9d:99:2f:65:43:b9:1c:75:ee:22:ca:5c:4c:0a:68:a8:57:34:
f0:72:35:fe:1e:fa:d4:aa:24:53:f2:52:5b:f1:88:e4:41:83:
c9:27:f5:5e:23:0c:c7:fd:6e:f9:b3:9d:d7:03:6a:73:b0:18:
70:96:ca:d1:1d:5b:22:86:7e:b8:27:01:62:2c:f2:d8:a1:83:
5f:80:d2:80:95:dd:c4:01:3c:ae:24:9e:8b:94:39:66:00:50:
3c:58:b2:8c:1a:00:36:9f:ae:fd:b1:5e:73:4c:91:32:85:a9:
3a:e9:fe:32:12:a4:1d:13:a1:c4:61:d7:82:c3:75:2b:96:2f:
db:1f:5f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 16:27:58 2025 by rpki-client