Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bb3csZF0FNBG3ymLqGJi7t4F4h0.roa
File: bb3csZF0FNBG3ymLqGJi7t4F4h0.roa (raw, json)
Hash identifier: lv8Ydl943F9+mADYqPjntHhnSNkIhAAtzythun7ADx0=
Subject key identifier: 6D:BD:DC:B1:91:74:14:D0:46:DF:29:8B:A8:62:62:EE:DE:05:E2:1D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189B92B6D9D01BE32199E9BF99C73631AD0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bb3csZF0FNBG3ymLqGJi7t4F4h0.roa
Signing time: Thu 03 Aug 2023 02:12:58 +0000
ROA not before: Thu 03 Aug 2023 02:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b9:2b:6d:9d:01:be:32:19:9e:9b:f9:9c:73:63:1a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 3 02:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6dbddcb1917414d046df298ba86262eede05e21d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b6:1b:f8:d6:bb:01:7e:f2:1e:44:ed:34:67:
46:46:5f:a9:98:1f:ef:4d:2a:9d:14:a3:a3:1d:78:
51:2e:76:45:e2:c1:4c:5f:80:6a:60:7e:fc:d3:76:
45:b5:1e:4a:35:44:db:e8:e1:38:65:c1:7e:7e:80:
4d:d1:de:22:55:d5:c4:16:aa:45:7b:8b:d9:92:a5:
48:d3:d2:64:6a:2b:a1:65:e8:0f:dc:ee:9b:81:3c:
43:4a:50:92:2a:11:5a:94:fb:fb:3c:ef:ef:e0:df:
29:3c:82:c5:6d:c8:04:e6:73:b4:5c:bf:91:2d:d9:
8f:46:66:b5:43:41:e4:74:9e:6e:ce:4b:b0:65:81:
a2:35:20:a6:51:a0:f0:98:67:cb:89:82:b8:9e:0e:
79:86:66:74:08:e4:aa:10:32:9a:11:b6:73:81:ef:
1d:1e:14:3f:b8:5d:2c:b2:dc:38:17:2d:01:84:dd:
c4:98:6b:f8:ab:ec:c5:18:6d:ea:cb:d5:0e:5f:6d:
9b:82:82:9f:15:82:d4:9c:fc:b5:4b:e1:66:74:f9:
bd:ad:9d:95:8e:f1:29:52:5d:0a:4b:52:e0:66:c3:
bf:4a:dc:e2:d9:3d:d8:8d:12:d1:da:dc:13:c2:b0:
59:f0:41:54:95:e7:83:1c:4f:cb:96:81:90:23:39:
2d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:BD:DC:B1:91:74:14:D0:46:DF:29:8B:A8:62:62:EE:DE:05:E2:1D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bb3csZF0FNBG3ymLqGJi7t4F4h0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
32:35:92:c0:dd:37:d9:75:a4:8b:56:be:11:1c:e6:cf:2d:9e:
c7:58:f4:86:77:3b:22:f3:82:f9:99:6e:35:90:89:50:b0:e4:
1f:49:23:98:e6:87:bf:28:d1:95:a1:27:5e:3a:4f:35:b7:48:
89:16:bb:6b:ae:64:13:74:f2:ce:99:78:c6:65:0e:46:34:66:
30:2d:30:a4:6e:74:f4:27:6f:f0:21:6e:16:ee:d9:f2:c9:55:
4f:b5:48:f9:80:fb:3a:a6:42:45:13:a9:1f:37:8f:cd:1a:04:
f7:04:26:f2:aa:c2:30:78:47:77:c6:97:10:79:ce:01:1e:04:
96:d5:ca:ae:5f:7f:a4:cf:84:a9:80:28:f9:0b:58:fb:f7:ed:
af:99:16:21:4b:ba:4c:2d:f0:8a:77:29:86:2f:7a:ba:62:14:
d5:c9:17:b9:83:5f:30:12:9f:e9:a7:0f:34:f3:e1:92:dc:53:
04:75:15:02:eb:f3:4a:11:9b:2a:43:16:4f:83:e3:df:df:e3:
17:03:dc:0c:16:29:54:f1:21:7c:7a:f8:6f:1e:f8:84:fa:26:
fc:80:58:9d:3c:91:fd:97:d4:dc:9b:0e:6a:7f:49:f4:66:a7:
5c:58:89:04:43:0b:91:b1:b2:16:ed:8b:15:ee:94:07:f3:12:
59:7f:e8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 19:49:18 2025 by rpki-client