Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bKnPqvk29a-cNPY-d3oQiqytKM8.roa
File: bKnPqvk29a-cNPY-d3oQiqytKM8.roa (raw, json)
Hash identifier: NPMVg8DW+RGNYR00qnK7CPuFKivQU/fnVxZuWIppKu4=
Subject key identifier: 6C:A9:CF:AA:F9:36:F5:AF:9C:34:F6:3E:77:7A:10:8A:AC:AD:28:CF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018528C4F7B0AF1F2C6EF41A1A1A29A7B756
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bKnPqvk29a-cNPY-d3oQiqytKM8.roa
Signing time: Mon 19 Dec 2022 05:04:35 +0000
ROA not before: Mon 19 Dec 2022 05:04:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:185:28c4:d06b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:28:c4:f7:b0:af:1f:2c:6e:f4:1a:1a:1a:29:a7:b7:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 19 05:04:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ca9cfaaf936f5af9c34f63e777a108aacad28cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ab:73:24:cc:49:fa:78:32:eb:5a:ae:a8:7a:
54:62:c7:0d:bc:15:11:df:33:69:a8:97:69:c0:a7:
eb:c3:3b:2a:e6:b4:ee:21:e0:24:6a:8b:c4:3a:ab:
ae:ec:eb:b8:e1:75:6c:16:33:41:81:af:75:42:b3:
2f:da:38:b0:5a:1e:e5:4c:e0:4e:f1:4f:d8:e4:3b:
cd:10:68:08:a3:26:78:05:3e:43:05:03:40:b9:ec:
c0:6c:c6:bf:fc:f7:58:36:69:37:f6:32:dc:cc:20:
ca:8b:e5:2a:cd:c6:dd:16:c9:6f:20:6f:0c:0b:88:
b6:38:4f:cd:da:de:af:71:b1:41:ce:28:3f:3a:54:
86:01:f2:97:18:62:e3:25:19:51:3b:4e:c1:5a:00:
49:4f:ad:93:a1:75:ee:99:4d:f7:7a:98:e4:39:e3:
d9:49:5f:9b:19:e7:96:fe:6a:30:5a:ae:2b:a7:22:
39:86:dd:eb:82:73:6d:78:83:1c:ee:2d:a5:77:9f:
32:f2:72:69:de:fa:46:f1:6a:a0:e9:a1:8b:d7:6e:
00:fe:5a:b2:cb:7e:60:71:24:49:ca:f6:d3:15:de:
b2:27:9d:c7:3b:39:81:32:25:f4:f7:3e:43:43:e0:
90:79:46:82:2b:2f:14:79:4c:80:de:d8:90:d1:14:
ae:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A9:CF:AA:F9:36:F5:AF:9C:34:F6:3E:77:7A:10:8A:AC:AD:28:CF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bKnPqvk29a-cNPY-d3oQiqytKM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1e:3b:22:4c:d2:e6:f1:47:68:bc:7b:0b:b3:69:b4:68:b5:d2:
b8:8f:ca:e3:cd:5c:2a:2b:ec:6b:b6:0e:e6:19:37:50:0d:f9:
3b:48:97:01:85:e3:a8:3c:68:08:98:8d:c0:2e:09:be:94:ed:
84:d3:05:2f:5d:32:d7:7f:a0:ac:ed:61:9e:9c:26:3a:d8:9b:
f0:b0:c7:f0:68:87:f4:ef:6e:8d:86:8a:d4:6b:ed:db:61:2f:
c5:23:e8:68:ec:d9:26:4b:2f:29:18:59:b6:f8:c9:7f:c7:01:
2a:f9:21:2e:7c:53:76:bc:da:9f:e6:0f:52:86:d7:d7:a4:6a:
2c:ff:d8:8e:5c:92:bf:42:e7:ba:46:c8:c3:bd:c6:50:4f:78:
a0:c6:18:fe:ec:b9:9b:92:e6:60:63:fc:af:51:4c:3b:d5:bb:
f8:bd:7a:a6:22:9b:9f:4a:e4:a7:8b:0c:22:c3:31:95:af:83:
a1:ea:70:58:6f:19:f0:af:41:e5:f6:0a:a2:a5:d3:ea:9e:5d:
f2:42:c5:8c:b0:42:d8:98:0d:74:31:62:79:2e:9c:84:41:ab:
34:be:c4:23:20:17:ab:11:17:6d:fd:b0:79:5d:27:3e:12:a8:
d5:3e:5a:d0:39:9b:24:b2:e4:0b:cd:14:6b:38:b5:ac:37:80:
14:5f:54:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 06:40:10 2025 by rpki-client