Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bY1CjV0a5fTUN6NzxiVb8OMfXYc.roa
File: bY1CjV0a5fTUN6NzxiVb8OMfXYc.roa (raw, json)
Hash identifier: jFMvMMFKvWUcpe1tTbcwzw4ampyGRQyI0CTmTssWy/Y=
Subject key identifier: 6D:8D:42:8D:5D:1A:E5:F4:D4:37:A3:73:C6:25:5B:F0:E3:1F:5D:87
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01870071BF9F05606C3D2A6255D9838D281E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bY1CjV0a5fTUN6NzxiVb8OMfXYc.roa
Signing time: Mon 20 Mar 2023 19:14:27 +0000
ROA not before: Mon 20 Mar 2023 19:14:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:00:71:bf:9f:05:60:6c:3d:2a:62:55:d9:83:8d:28:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 20 19:14:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d8d428d5d1ae5f4d437a373c6255bf0e31f5d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:da:6a:3b:c1:86:6d:e2:03:32:17:0a:80:1d:
0c:1b:73:58:d0:74:62:6e:de:fb:85:70:b7:74:96:
a9:55:18:ab:42:03:42:47:80:69:73:00:86:24:15:
35:d2:4a:82:9b:29:20:4e:2d:46:5d:c7:7f:29:b8:
1c:7a:d2:78:78:16:47:73:0d:81:31:b1:6e:de:c1:
40:a4:75:b8:f9:73:de:f7:2f:d6:94:1e:3a:b2:cd:
16:d5:4d:e3:a4:03:c1:61:10:f8:ff:ea:46:09:3d:
99:f2:18:61:06:a2:ed:b3:e2:d8:e2:04:7a:d1:d5:
32:72:11:69:40:8b:2d:8a:bf:35:99:0c:ce:c0:84:
59:b9:0d:9f:d7:bd:ea:a1:e0:88:e7:a2:ef:57:31:
2e:22:ec:a3:b4:39:bb:91:ba:94:64:94:40:07:ee:
f2:0d:02:04:de:4b:ea:c7:58:e9:1d:23:88:ca:b1:
2e:e2:a9:fd:98:ec:12:35:2c:41:5d:3a:f2:fd:87:
44:ca:4c:61:f9:04:02:3e:7e:86:69:8e:b0:2c:d6:
59:dc:3b:d9:fe:6a:30:b4:93:32:c3:27:f1:83:09:
c2:8d:43:8b:81:8e:a1:24:02:85:35:97:0d:64:f1:
d3:3b:c7:c2:80:b2:67:be:8a:07:79:b6:54:0a:b5:
9c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:8D:42:8D:5D:1A:E5:F4:D4:37:A3:73:C6:25:5B:F0:E3:1F:5D:87
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bY1CjV0a5fTUN6NzxiVb8OMfXYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
55:50:ec:3d:35:48:98:37:2c:00:c2:ca:70:74:0c:5f:13:ce:
e8:02:12:6c:1c:3e:3a:44:60:7a:fc:8e:c4:e2:8d:b8:d6:c8:
cb:cc:03:d1:62:be:38:51:e6:cd:c6:68:e6:7c:fc:5b:a6:57:
00:83:4a:41:94:3f:33:d0:38:19:15:df:b7:ba:02:34:27:6b:
39:6a:37:92:67:db:b2:b0:eb:54:eb:2c:0d:3f:65:d0:bf:3a:
bb:8c:e9:82:48:d6:96:b0:d5:cb:99:32:0d:92:4f:7e:f1:84:
a7:e0:0d:49:f2:f4:f6:06:17:3b:95:ad:56:f9:0c:6e:c5:3d:
1b:25:dd:62:43:57:87:7c:88:90:8c:40:5f:c7:76:26:1e:3e:
53:15:b0:5c:d5:62:87:b8:1a:6b:e1:f3:c4:8b:38:c5:96:fa:
90:c8:ca:dd:3b:02:33:69:96:c8:07:f5:ca:e4:6b:61:36:1e:
4c:3d:05:a6:a0:b5:75:9b:64:0d:1e:ed:5f:18:15:c4:b6:24:
4c:e2:84:69:63:9f:7d:d5:2d:08:02:aa:21:38:12:4f:55:01:
0a:d5:2a:e4:39:12:40:42:90:68:e1:d0:0e:91:76:5a:a5:22:
f4:77:ec:14:bb:51:16:f5:fc:e4:c7:8e:d4:6c:eb:5e:7e:86:
50:98:36:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:40:52 2025 by rpki-client