Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bGCBxTPOh10oZojYxOZxAGovRAY.roa
File: bGCBxTPOh10oZojYxOZxAGovRAY.roa (raw, json)
Hash identifier: 0rIPzKchbWYzhtlMF+bYnxncTE23TRFypgPIXcSgti0=
Subject key identifier: 6C:60:81:C5:33:CE:87:5D:28:66:88:D8:C4:E6:71:00:6A:2F:44:06
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186A2A3FF1949CE57D13AB4152D3F9C82B8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bGCBxTPOh10oZojYxOZxAGovRAY.roa
Signing time: Thu 02 Mar 2023 14:05:01 +0000
ROA not before: Thu 02 Mar 2023 14:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:a2a3:6154/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a2:a3:ff:19:49:ce:57:d1:3a:b4:15:2d:3f:9c:82:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 2 14:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c6081c533ce875d286688d8c4e671006a2f4406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:52:89:79:f8:1f:d7:d7:d6:c7:fa:c6:6a:0f:
70:92:76:7b:1d:65:b1:4e:15:0c:16:5c:71:84:77:
17:49:be:04:07:b0:71:24:7f:ed:04:fb:34:f8:17:
ec:f3:ce:6b:bc:1b:9e:2c:6f:86:5e:e4:2c:7d:71:
36:66:e2:54:df:e7:f6:8a:03:f2:05:80:0c:f7:47:
3b:d3:b3:d4:cd:5f:e7:40:34:b8:67:eb:3a:cc:c8:
85:00:00:f4:5a:21:39:5c:89:71:bc:54:66:93:30:
5a:fa:ed:78:73:57:ed:e3:de:99:b9:68:e3:f6:6a:
82:ae:0d:22:e1:8f:46:e7:62:d5:48:dc:ac:5e:09:
01:35:a0:2e:f0:e7:3b:e2:ca:45:f8:bb:cf:de:63:
9b:a9:d0:f8:28:48:0c:4d:b3:e2:83:88:eb:fb:7a:
e0:f5:53:2c:dc:97:31:a5:94:7a:b4:4e:c9:0f:b0:
06:e4:37:59:bd:a0:dc:74:0f:19:cb:b9:fa:50:24:
2c:24:ee:f5:b2:90:34:52:26:92:4e:4c:c1:26:cd:
3f:72:e6:a7:3b:24:ec:62:ff:b9:ea:54:48:4c:72:
39:57:03:c7:ff:38:6f:07:ad:73:c9:43:8e:95:43:
12:d0:de:7c:cf:70:ca:3f:cf:54:2b:2e:fd:06:d7:
2e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:60:81:C5:33:CE:87:5D:28:66:88:D8:C4:E6:71:00:6A:2F:44:06
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bGCBxTPOh10oZojYxOZxAGovRAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6a:91:74:2e:27:cd:2a:42:24:63:12:6b:e8:18:99:91:e7:03:
ae:62:0b:07:ed:13:76:28:ee:26:ab:47:30:58:15:88:fa:6f:
e1:68:18:d4:26:b6:6a:3c:e7:85:90:b3:be:15:c8:8b:fc:cd:
29:b4:2d:c3:04:f0:58:e9:ca:2f:f1:f8:db:b0:22:2c:db:a3:
d0:de:d4:99:a4:33:d7:86:95:22:79:72:ae:d7:5a:08:5b:2b:
f3:55:42:21:72:65:df:63:c9:58:d2:6f:46:21:64:ad:22:a3:
24:0b:32:2f:93:b0:69:eb:84:b6:54:01:7a:bd:bf:01:49:1e:
2a:cd:93:47:48:b1:c0:97:b0:1f:12:57:d5:71:58:89:45:a9:
58:d7:72:f5:48:7e:02:d9:1f:72:ed:e2:f9:9e:40:40:c5:d7:
ae:6f:14:3d:bc:2c:13:70:3b:01:ce:15:2a:c0:97:a9:0a:17:
ca:c3:43:d2:78:c2:db:d2:4a:d3:b0:1e:c5:33:4f:8e:03:e6:
dc:6d:33:d4:11:16:f6:e1:f7:b9:e4:dd:62:11:e1:43:8f:ff:
7f:ef:3d:a0:f4:59:69:66:24:d8:46:cb:0e:94:f1:d3:8e:ad:
04:9a:52:32:a8:2e:01:ea:2f:3b:90:e4:b7:d6:e9:f6:04:c5:
d6:c5:13:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 06:43:46 2025 by rpki-client