Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bbUjhMizp9-t8n9Ms0VUE5VGlVA.roa
File: bbUjhMizp9-t8n9Ms0VUE5VGlVA.roa (raw, json)
Hash identifier: iymholgw6sW6LxktdKuZ4zWiDWuIq5PhMGjJ6pcFtjU=
Subject key identifier: 6D:B5:23:84:C8:B3:A7:DF:AD:F2:7F:4C:B3:45:54:13:95:46:95:50
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01897CA0E97278F2E2A70E867E4B9413FED7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bbUjhMizp9-t8n9Ms0VUE5VGlVA.roa
Signing time: Sat 22 Jul 2023 08:04:27 +0000
ROA not before: Sat 22 Jul 2023 08:04:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:189:7ca0:b757/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:7c:a0:e9:72:78:f2:e2:a7:0e:86:7e:4b:94:13:fe:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 22 08:04:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6db52384c8b3a7dfadf27f4cb345541395469550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0e:40:65:5d:b0:12:37:b4:bf:1c:08:3f:e2:
fe:51:1b:eb:9b:fe:4f:65:ac:2e:40:df:09:6b:b1:
3e:25:2f:a9:0f:48:75:cc:2b:32:73:51:e6:58:15:
75:d6:80:8c:2c:c9:aa:18:08:c1:28:47:e4:73:02:
90:9f:bd:9f:93:77:aa:72:98:6f:de:80:71:fe:c3:
0d:50:d7:28:f6:a5:ff:70:46:79:50:f5:af:43:f1:
0d:1c:15:65:69:65:30:1c:26:dd:ea:88:48:0f:69:
e3:3d:6d:4d:de:f4:8d:c2:7f:58:24:71:a9:c0:64:
89:34:d6:7a:bc:0e:b2:7f:94:45:57:b5:20:f4:e6:
bd:3b:ce:03:39:91:ef:8d:d1:6c:f2:c6:af:58:ea:
fc:75:82:2e:20:87:fd:89:d6:a0:35:5f:4f:12:f0:
48:d0:5b:cb:2a:c3:03:96:82:9b:b1:d0:a8:c9:05:
2f:d5:ff:b6:09:8a:e4:72:da:81:ce:03:07:08:54:
94:54:17:26:62:d4:86:0e:ca:c0:1d:4f:ca:3c:f6:
d0:6d:44:ad:4b:cf:94:18:c3:43:e2:f8:2f:6d:a0:
e3:bb:be:09:43:e8:2a:cc:81:31:79:16:6a:6e:ea:
9c:9d:06:40:0a:90:10:b5:ac:d0:50:09:d6:2a:73:
ec:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:B5:23:84:C8:B3:A7:DF:AD:F2:7F:4C:B3:45:54:13:95:46:95:50
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bbUjhMizp9-t8n9Ms0VUE5VGlVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
80:36:27:ac:74:38:1b:32:08:c0:a7:fa:9b:ae:83:9f:ff:5d:
ec:34:97:52:a8:8b:d4:90:64:67:5d:60:e9:8b:8e:d6:37:85:
fb:7f:22:c3:d6:c3:c7:fc:51:fc:87:dd:ef:a2:3f:08:f5:84:
9c:1f:bd:f9:97:6c:04:76:fd:93:6e:0a:7a:0b:04:83:50:11:
dd:1a:88:1a:7e:96:f3:70:36:bf:c0:f3:4c:03:a0:df:b2:ba:
66:5a:da:65:d4:09:15:bd:d2:bd:f3:07:8d:43:ae:8a:dc:24:
a2:e7:a9:9b:fe:95:b0:80:95:f5:90:89:7f:d0:76:fd:c1:e7:
35:57:dc:09:6c:a0:77:08:f8:ed:64:24:79:b5:09:ee:69:cc:
92:c1:c8:2c:e1:b8:70:a0:1e:c2:80:41:1b:3f:1e:36:7a:05:
f3:77:1f:9b:3c:8e:66:fd:a5:cd:cf:a9:d7:23:39:a7:d3:e2:
d7:60:9e:65:9c:59:e8:60:ae:d2:0a:90:cc:fd:4b:be:0a:f8:
70:a8:e9:63:a5:a8:9f:25:21:c0:53:e1:b8:fa:c8:b4:71:82:
fd:d7:e9:85:67:67:44:ae:ce:a8:81:92:18:f1:03:19:38:8a:
61:5f:18:6f:db:56:a6:ca:63:46:6f:83:75:95:8f:f7:1b:5d:
4d:2c:b6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:50:24 2025 by rpki-client