Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bdwtLBhqB0p78E0NKbnvdmNKrRE.roa
File: bdwtLBhqB0p78E0NKbnvdmNKrRE.roa (raw, json)
Hash identifier: CMq7hK9tlOMlPuVtotfPrTjp4jGQcofUhtJZyg4eCOg=
Subject key identifier: 6D:DC:2D:2C:18:6A:07:4A:7B:F0:4D:0D:29:B9:EF:76:63:4A:AD:11
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189988E43A280DE6909FB368B4375930F3C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bdwtLBhqB0p78E0NKbnvdmNKrRE.roa
Signing time: Thu 27 Jul 2023 18:13:27 +0000
ROA not before: Thu 27 Jul 2023 18:13:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:98:8e:43:a2:80:de:69:09:fb:36:8b:43:75:93:0f:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 27 18:13:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ddc2d2c186a074a7bf04d0d29b9ef76634aad11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:41:a7:bf:1d:93:66:93:74:5a:55:71:d0:6d:
5a:26:05:38:c5:ea:08:81:f1:6a:2d:70:1b:23:ce:
84:e9:c4:51:6a:b3:b7:88:51:ec:f0:37:92:c9:a6:
75:14:44:40:5b:71:50:a9:bb:1d:6f:cb:b0:50:eb:
ae:d5:a4:4c:c8:b5:66:6a:e4:2b:98:17:46:35:0a:
8a:75:36:53:75:67:ef:ca:44:28:47:56:f3:b8:1d:
93:ca:68:cb:43:29:8f:be:b3:cd:6d:8c:df:bb:3a:
d0:22:88:0b:99:a3:1d:dc:ef:6a:cd:33:67:d5:5c:
25:9b:bb:36:76:6d:a4:e5:3f:d4:96:96:e8:3b:04:
cc:9b:71:14:82:c8:1e:76:9e:df:2c:e4:a8:e0:e3:
52:b0:90:c7:26:5a:bf:7e:91:d6:e2:d3:ea:2b:d5:
6b:ea:d2:9f:f9:c7:ba:3b:af:49:9b:89:5a:27:ac:
b5:a8:cb:85:60:09:22:3b:83:2f:e6:fb:8b:d0:71:
93:d4:a2:48:20:41:b9:2c:02:01:1a:cf:05:5a:2f:
f8:5b:7f:df:a4:a7:37:a7:be:6b:fc:61:f4:ca:be:
0c:03:7b:b2:e3:c7:cd:8a:d9:81:6f:cc:e7:a5:fa:
d8:0b:8a:d1:87:ad:93:5c:96:60:03:c4:19:9c:fe:
10:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:DC:2D:2C:18:6A:07:4A:7B:F0:4D:0D:29:B9:EF:76:63:4A:AD:11
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bdwtLBhqB0p78E0NKbnvdmNKrRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a7:df:7c:77:ec:ff:87:cb:a4:1d:0a:67:6e:77:7e:fc:66:b8:
0b:72:85:f7:ba:a1:14:45:07:2a:10:5f:7f:ab:b7:7b:a4:bb:
db:ad:67:9f:82:e0:8b:6d:c7:8f:69:e3:01:77:cd:3d:6e:2e:
34:54:99:6d:5e:17:d3:21:c3:6a:88:f3:f9:10:86:c1:d7:57:
56:86:e8:68:b9:c9:37:3b:de:65:67:f6:47:5c:fc:d0:da:e4:
28:94:1b:a5:02:63:fc:2b:79:df:2f:26:87:a6:db:d9:62:32:
05:12:1f:43:ed:50:d3:5d:0e:39:94:25:67:06:dd:8d:7d:86:
5f:a1:f3:4f:83:bd:6e:40:86:99:05:7e:b5:51:e7:0a:de:29:
b7:e9:99:12:6f:4d:a4:70:2f:db:36:ef:ab:12:aa:e4:34:b4:
63:a1:47:50:6a:22:12:e8:04:e9:6c:a5:73:4d:43:c2:bb:ad:
82:3d:e4:fc:73:f0:ca:91:a5:99:4f:e7:ec:70:14:6e:f5:a2:
6f:b1:8e:e6:cf:7b:cf:52:d6:66:e2:6e:8c:fd:63:34:38:35:
fc:30:45:87:16:20:5e:f8:0f:fc:c9:7b:d3:47:ae:b6:80:00:
3f:fd:ec:38:28:bf:3b:fb:f1:3f:a9:0c:82:10:76:ca:56:df:
f3:03:99:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 07:45:55 2025 by rpki-client