Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bWoqbzK-6BWOOjWBv1GuslOjpDk.roa
File: bWoqbzK-6BWOOjWBv1GuslOjpDk.roa (raw, json)
Hash identifier: I9v3DcYox3mfDqnvx0xjtZFyOXVB0eW7XZJnR05wGTo=
Subject key identifier: 6D:6A:2A:6F:32:BE:E8:15:8E:3A:35:81:BF:51:AE:B2:53:A3:A4:39
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188B3962C47172748A4441E5BBD025826BE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bWoqbzK-6BWOOjWBv1GuslOjpDk.roa
Signing time: Tue 13 Jun 2023 07:09:03 +0000
ROA not before: Tue 13 Jun 2023 07:09:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b3:96:2c:47:17:27:48:a4:44:1e:5b:bd:02:58:26:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 13 07:09:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d6a2a6f32bee8158e3a3581bf51aeb253a3a439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:06:7d:7c:96:58:c6:c6:19:3e:70:c5:13:61:
74:42:45:0c:59:61:83:52:4f:c5:3e:2d:59:b2:a1:
87:bf:5b:e3:72:23:05:a7:56:99:81:f0:cf:df:3e:
63:0c:57:89:40:9f:68:84:1d:e8:77:32:f9:18:70:
fb:b2:79:23:9a:40:e6:c9:a6:e4:c2:93:d0:fa:20:
69:c7:d7:df:63:86:ac:4b:d6:c9:6e:fd:4b:41:d5:
e6:a7:5c:83:4a:e3:2d:3c:a5:29:f3:0f:26:27:b9:
3b:7a:c1:00:7c:59:c9:cb:bb:9d:e2:4b:0e:0e:3c:
53:4e:ab:18:30:80:bc:cb:08:12:94:66:60:21:82:
c8:b0:23:fe:5d:33:6e:75:e0:50:5a:45:53:13:23:
b2:1f:79:ab:00:3e:9f:29:d9:2e:e0:30:54:b4:6a:
11:2c:b9:3c:cc:62:c5:e7:0e:62:5b:42:61:70:15:
fe:49:23:25:cd:bc:d9:8c:1d:a5:d1:7c:5f:f9:07:
e4:f0:fe:15:74:66:27:f4:18:1b:36:14:de:35:3b:
c9:b2:18:90:e1:6e:45:ca:15:fe:21:0c:fe:54:5d:
f6:76:c7:c2:d9:f1:08:6a:5b:c8:fa:2e:01:e9:d7:
b8:26:3c:63:ec:57:df:4c:79:8b:87:1e:c2:74:9d:
ef:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:6A:2A:6F:32:BE:E8:15:8E:3A:35:81:BF:51:AE:B2:53:A3:A4:39
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bWoqbzK-6BWOOjWBv1GuslOjpDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
62:81:37:f0:5f:e5:bb:f8:61:35:f9:e6:35:5e:80:96:f1:b4:
93:1f:04:83:87:a3:ef:31:58:ff:58:ce:98:c3:1c:f8:56:0b:
c3:00:b0:58:40:39:ff:a3:d2:e2:9b:6b:86:e6:64:f8:e6:ee:
4f:71:25:8a:bc:e7:59:9d:ae:de:d4:9c:d1:96:64:2b:e5:64:
3e:37:78:e3:da:07:93:74:c9:89:f0:63:58:0c:c5:dc:1f:61:
e3:5e:c1:fe:7f:75:13:99:f6:51:c1:a9:93:a3:18:ef:12:29:
6c:ec:de:e7:3c:ad:52:dc:e7:e0:38:39:41:89:b8:0a:56:c2:
8e:dc:b6:dc:44:be:44:25:47:0c:0f:b4:48:ff:8a:44:c1:4e:
b3:de:61:7e:da:85:e3:a9:d1:5b:30:9d:e5:96:55:40:07:aa:
36:6c:d0:46:10:a8:b0:43:2a:a0:47:8a:cb:ee:87:8c:a1:23:
be:38:84:bc:e9:e3:6b:c3:bd:50:73:3d:07:ee:43:bf:e0:f5:
ca:1c:a4:61:cd:74:00:74:97:a3:e0:ab:48:36:bb:34:57:ca:
26:25:55:7c:f9:97:37:9a:a7:3e:aa:e8:a8:bd:da:2c:b9:7b:
d8:24:f5:55:d0:84:8f:47:ad:a4:c2:f8:67:bc:d3:33:7b:54:
ea:15:1c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:11:05 2025 by rpki-client