Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bWLLzLDjrwbplP9bqfyT6j91Mx8.roa
File: bWLLzLDjrwbplP9bqfyT6j91Mx8.roa (raw, json)
Hash identifier: vtQ2sEmhrLEcdjC28hZseC9QhsD+VGRcPbb+qvS1ab4=
Subject key identifier: 6D:62:CB:CC:B0:E3:AF:06:E9:94:FF:5B:A9:FC:93:EA:3F:75:33:1F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189639059CFFDA1FA22AE0927D3B46AFC1B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bWLLzLDjrwbplP9bqfyT6j91Mx8.roa
Signing time: Mon 17 Jul 2023 11:15:51 +0000
ROA not before: Mon 17 Jul 2023 11:15:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:63:90:59:cf:fd:a1:fa:22:ae:09:27:d3:b4:6a:fc:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 17 11:15:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d62cbccb0e3af06e994ff5ba9fc93ea3f75331f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:39:ea:ac:cd:28:ff:60:e4:82:4a:31:62:4c:
cc:e3:7c:6f:39:00:cc:c5:0f:f2:96:34:25:35:d8:
13:21:45:84:f6:ab:bf:e3:13:ce:c6:b7:9c:f2:06:
c4:7b:f4:4b:0f:99:ba:cf:86:25:ee:48:97:03:47:
8f:49:fd:1b:e9:19:1e:8a:f5:ae:28:8a:22:92:8e:
2c:8e:8c:81:dc:9c:4d:9b:ad:a2:0a:b5:dd:41:bd:
c7:1b:15:b6:fe:16:1b:2f:f6:ff:59:33:24:b7:51:
be:1d:5b:64:f5:2d:fe:81:0d:ce:f5:ee:61:38:2e:
67:40:dd:ef:88:f4:ff:d9:4e:44:04:59:ed:75:28:
44:b0:09:11:40:e1:d7:4b:51:c9:ae:87:8a:fd:8a:
cd:da:44:dc:e6:67:75:3c:39:60:df:ff:f7:fe:5a:
9b:7d:f5:93:de:9e:3e:b9:ea:4d:07:34:35:04:09:
45:b3:b3:73:17:8c:0a:f2:f3:10:46:45:d0:8d:8f:
95:1b:a3:84:44:7d:b3:cf:ac:1b:d5:6c:f7:06:88:
7b:7c:30:a4:bf:37:9b:d9:67:9a:09:54:7c:78:e2:
18:b0:b9:1c:ac:db:eb:be:ce:a8:4b:52:48:5a:ae:
55:43:ca:86:f8:25:e4:fd:3c:bd:d1:50:94:4b:90:
8c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:62:CB:CC:B0:E3:AF:06:E9:94:FF:5B:A9:FC:93:EA:3F:75:33:1F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bWLLzLDjrwbplP9bqfyT6j91Mx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ad:21:db:25:65:3b:83:10:13:5e:66:88:9c:b8:f1:25:d9:ac:
b0:78:59:f4:8e:75:8a:e1:90:8c:ce:ad:94:56:9a:d6:ab:ff:
a8:ef:6d:a8:da:5a:26:ca:ac:f1:a1:96:cb:b0:76:4a:a1:e7:
97:e2:ac:82:d0:ab:3f:a7:6f:a4:9e:cb:34:55:e2:72:ae:df:
4d:de:26:78:1a:76:90:08:6a:1d:dc:f8:08:46:f1:05:e8:05:
de:c5:c5:56:21:6e:58:37:a0:a5:04:2e:92:b0:96:02:91:fb:
75:9b:db:ae:32:1e:69:9b:12:0f:a3:2f:d2:f3:d6:e4:c8:f2:
f5:1d:a0:d7:6d:4d:19:3e:55:e4:1a:c4:13:28:8c:ad:01:8e:
64:f8:3b:11:d7:e8:5e:80:6f:c8:81:0e:08:85:88:d5:f4:7e:
44:53:b5:6b:96:4f:42:fd:b9:8a:07:c6:f0:30:bd:20:5e:82:
21:e6:4d:77:cb:69:4f:6c:ac:8b:a0:1f:ad:f2:75:44:af:da:
bb:b2:69:b1:e9:2d:31:90:21:98:8a:f5:40:27:b2:f0:73:95:
5c:fd:5d:d1:cf:f2:76:fa:cc:35:8a:8a:c4:b0:32:ee:44:1b:
a1:dc:52:86:e0:9d:cc:f8:43:a2:7c:30:64:1d:25:4d:dc:89:
6e:4d:42:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:44:39 2025 by rpki-client