Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bHrrrNb7epoby0rFJzFv2wa4Jr4.roa
File: bHrrrNb7epoby0rFJzFv2wa4Jr4.roa (raw, json)
Hash identifier: hXo55Y7ur7hKKFzDoE50+0rPvmSjWMjNYNXjacFabY8=
Subject key identifier: 6C:7A:EB:AC:D6:FB:7A:9A:1B:CB:4A:C5:27:31:6F:DB:06:B8:26:BE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189EC0810D3A607C2DA02241FE28E1283A4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bHrrrNb7epoby0rFJzFv2wa4Jr4.roa
Signing time: Sat 12 Aug 2023 23:14:58 +0000
ROA not before: Sat 12 Aug 2023 23:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ec:08:10:d3:a6:07:c2:da:02:24:1f:e2:8e:12:83:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 12 23:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c7aebacd6fb7a9a1bcb4ac527316fdb06b826be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:08:73:18:a9:c6:15:41:26:0a:b7:cb:36:eb:
4e:e1:2d:3c:d1:bd:22:0e:4b:cd:0d:27:5c:2d:de:
55:c6:46:1b:e6:e1:5b:e3:f9:02:eb:83:81:08:1b:
56:93:b7:15:94:f9:c8:4d:a8:8c:22:2d:c7:3d:29:
7d:50:cd:a4:a1:c9:b9:b5:87:2d:d2:63:b2:7f:2e:
89:36:92:9e:d8:ea:33:8e:8f:19:9b:4f:fa:90:ff:
a4:27:bc:03:c9:fd:4b:e6:24:38:9b:77:80:18:31:
5f:e0:dc:49:88:f8:08:be:60:ad:6a:f9:e6:a8:c6:
8a:6c:18:a0:47:87:5e:4b:13:c7:55:af:5c:92:22:
49:bb:2e:d9:c3:a7:2d:d7:d7:6d:9d:24:20:59:9c:
5d:70:aa:6d:1b:b2:6d:7d:fd:ac:c4:20:1a:af:b9:
51:8d:d9:e5:73:69:0b:eb:f4:48:c1:c5:14:09:4a:
45:f5:86:09:fe:1b:c6:7d:a1:3a:29:b7:52:07:c9:
ac:93:c6:e4:a1:a5:41:a8:7c:ba:b5:05:60:88:a2:
fa:ea:7d:0f:a0:24:a5:e5:19:e2:2a:79:21:9a:d9:
f8:16:18:94:2e:44:d3:bf:f7:69:c5:3d:bc:14:92:
f3:b7:91:08:b3:14:e5:d2:4b:6f:da:21:f0:2a:43:
83:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:7A:EB:AC:D6:FB:7A:9A:1B:CB:4A:C5:27:31:6F:DB:06:B8:26:BE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bHrrrNb7epoby0rFJzFv2wa4Jr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
74:ce:1e:03:f7:dc:f6:8c:b7:02:ce:dc:27:b6:88:bc:1c:7d:
b8:2b:72:ba:1b:06:9b:16:7e:e9:be:15:61:02:71:6f:9d:c1:
d6:1b:19:c8:68:f6:df:59:68:dd:b3:13:f7:a7:75:4e:84:6a:
80:fe:20:50:78:d2:48:53:bf:3d:c8:fc:dd:43:56:aa:c0:a9:
48:b8:00:75:e7:91:5f:36:c0:fd:eb:f3:31:45:73:b0:7e:5d:
5b:bb:2c:43:d3:1e:86:8e:52:74:9f:c1:32:4a:ba:fd:95:6f:
11:ef:2d:a9:26:1a:24:9c:3e:e1:d4:52:57:52:e6:fe:6a:40:
eb:7d:12:10:15:db:81:06:3e:1b:b4:d0:7b:f3:6f:e7:ff:24:
77:b1:b8:b9:81:07:be:ae:6f:4f:74:1c:d7:08:2d:fa:8f:e6:
f5:1e:a6:b5:f0:3e:bf:b3:bb:c9:cb:2c:a4:5b:7b:d0:14:f7:
1a:5d:b2:8c:a5:9e:c2:6d:48:5c:fb:cf:c8:ac:6d:14:05:94:
d4:05:4b:c7:a5:7c:4f:31:03:3c:45:5b:e1:01:16:45:09:b5:
b7:ae:2b:3a:2c:f6:21:9f:c6:0d:2b:e0:cd:7c:54:47:e4:91:
6a:bd:57:76:c6:9b:46:94:22:87:03:ec:76:94:3b:67:ae:85:
df:04:9b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:46:36 2025 by rpki-client