Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bF1saCgnOtuWTHE1XeUpEl3vmWo.roa
File: bF1saCgnOtuWTHE1XeUpEl3vmWo.roa (raw, json)
Hash identifier: uOD86f4Wy7KAd485pwdgu1SuGCQcnt713voSfgiPFTs=
Subject key identifier: 6C:5D:6C:68:28:27:3A:DB:96:4C:71:35:5D:E5:29:12:5D:EF:99:6A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187A2DCA3E8F481E6F24C343E396118F3DB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bF1saCgnOtuWTHE1XeUpEl3vmWo.roa
Signing time: Fri 21 Apr 2023 08:09:41 +0000
ROA not before: Fri 21 Apr 2023 08:09:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a2:dc:a3:e8:f4:81:e6:f2:4c:34:3e:39:61:18:f3:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 21 08:09:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c5d6c6828273adb964c71355de529125def996a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e3:64:90:59:8f:9b:40:76:c7:7b:dc:a9:b6:
9d:e8:fd:e9:34:ba:6a:a4:24:00:ec:5c:11:d6:70:
42:6d:be:88:31:8c:da:87:92:e6:15:bc:51:9f:6c:
f8:08:43:cb:a1:58:6a:5e:7a:ce:f0:58:0b:b7:28:
5f:27:3e:0a:4e:fc:b9:a1:26:4a:58:6b:03:4d:85:
c5:ea:7d:9b:23:55:1a:72:d2:fa:45:6a:f4:b6:c1:
29:f1:5b:29:f4:98:81:21:03:71:38:0f:61:69:0f:
94:93:6f:15:00:60:4c:11:86:dd:0c:0b:68:eb:11:
fd:fb:7c:eb:de:c0:03:b5:e8:42:81:ac:01:1a:89:
35:e1:a4:95:d6:5c:f8:f9:61:eb:6a:57:bb:50:5b:
b6:33:a9:c6:92:4c:31:d4:70:86:06:5a:89:a2:78:
aa:47:7f:15:c8:15:44:ec:fe:7c:1c:67:a4:3e:12:
0c:eb:06:c3:65:21:0e:de:43:c9:dd:1d:28:1d:4b:
c3:ee:03:83:6e:3e:65:65:12:03:e7:07:00:f8:2a:
c0:52:e0:bb:3b:94:1d:47:bc:97:32:06:fd:b2:6e:
cb:81:c8:d4:d7:4c:66:7e:c9:ef:d1:dc:4d:89:50:
b2:d3:87:f9:0e:61:e9:38:7f:f8:5a:94:8d:cd:0a:
01:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:5D:6C:68:28:27:3A:DB:96:4C:71:35:5D:E5:29:12:5D:EF:99:6A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bF1saCgnOtuWTHE1XeUpEl3vmWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
67:75:14:c9:df:0e:2f:3f:85:51:57:72:4e:44:1c:76:4b:3e:
46:08:3d:6a:08:a7:f0:43:0c:d0:a2:c5:0f:f3:ed:59:bd:46:
bd:98:9c:11:ab:66:1c:54:82:88:92:f7:05:72:1b:bb:fc:04:
9c:e4:ee:bf:86:85:21:7e:2d:9c:0b:96:89:c0:08:22:7c:47:
a1:96:cc:d9:3a:99:73:ec:39:1b:ef:e5:4d:92:62:24:14:bd:
e1:d8:2b:ab:db:95:57:20:a5:30:6a:44:8a:3c:9f:b3:6e:a3:
30:44:57:a1:f0:a1:9d:12:fa:f0:53:21:33:c4:2d:e6:38:5c:
8e:a6:dd:57:66:b4:e8:62:8d:0e:83:0f:c7:dd:40:7d:32:ef:
89:c6:5c:67:cf:c3:92:65:a6:81:f6:39:43:e7:00:3b:d8:39:
34:37:78:71:76:20:ca:ce:13:f2:7a:c0:1e:dd:32:30:77:d5:
40:1d:ea:04:e5:96:f5:37:70:4a:e9:16:e3:aa:67:9a:2a:1d:
0b:cd:98:fa:ea:b1:5a:c1:d9:60:4e:ea:fb:2d:d6:00:4a:b9:
35:f3:fb:cc:a0:89:c9:a2:ad:13:92:0d:7d:dc:05:4b:bc:39:
0e:3f:6f:07:5f:c5:d5:a4:13:8e:d8:03:ab:dd:50:fa:28:66:
64:b6:f3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 02:21:13 2025 by rpki-client