Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bgB_-7kyFGN7qHANX65YsTN2F2s.roa
File: bgB_-7kyFGN7qHANX65YsTN2F2s.roa (raw, json)
Hash identifier: I4dSqyr3wbp2a5xSP3KIOgaJD/6LspV5nL/AABaLVOk=
Subject key identifier: 6E:00:7F:FB:B9:32:14:63:7B:A8:70:0D:5F:AE:58:B1:33:76:17:6B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186A7CA562A4B51946E13ECD77D13CBA146
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bgB_-7kyFGN7qHANX65YsTN2F2s.roa
Signing time: Fri 03 Mar 2023 14:05:00 +0000
ROA not before: Fri 03 Mar 2023 14:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:a7c9:95c0/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a7:ca:56:2a:4b:51:94:6e:13:ec:d7:7d:13:cb:a1:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 3 14:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e007ffbb93214637ba8700d5fae58b13376176b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:14:c3:98:cf:d0:e9:06:d3:c7:b0:71:bf:95:
b5:88:d8:0a:98:67:2f:aa:95:05:c1:39:a7:67:d5:
03:27:08:e2:83:77:75:34:c1:69:a1:7e:20:f9:fe:
9c:e6:a5:a0:7e:1e:b4:3b:f9:1e:46:30:fa:51:b0:
14:89:82:e1:8b:38:88:58:bb:61:d1:a0:9b:98:8f:
84:ed:69:65:45:51:81:3a:34:6e:e9:ed:85:9d:53:
7a:a6:eb:d6:b0:78:4c:68:b3:28:29:cd:44:a6:74:
e8:a3:8b:a6:c5:78:dc:bb:e7:26:51:b3:90:f2:f5:
32:e0:77:6f:15:93:39:c6:61:4b:e6:86:dd:9f:84:
f5:bd:5c:5b:47:65:87:21:df:ab:ff:ab:cc:ae:5f:
65:ab:d6:1c:14:84:f4:f5:b9:c5:74:38:ad:9e:87:
9c:b2:0b:9d:b3:13:63:68:d9:45:c8:84:8e:05:9b:
46:8d:ce:1a:c4:12:fb:09:37:38:77:f1:9c:28:b1:
fa:e8:09:c8:45:32:73:cd:d4:87:07:b0:a9:a0:0b:
08:1f:9e:66:ff:47:68:3d:be:b0:bc:8e:70:fd:e0:
de:2f:50:d1:e8:a7:b8:ed:11:f6:94:36:cf:1f:6d:
ec:2d:0c:0a:72:34:96:9b:7d:ae:48:f9:0a:bb:46:
83:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:00:7F:FB:B9:32:14:63:7B:A8:70:0D:5F:AE:58:B1:33:76:17:6B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bgB_-7kyFGN7qHANX65YsTN2F2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
78:09:9e:df:9e:3f:77:2c:f9:d5:7e:7a:45:ba:fd:84:ba:82:
67:aa:14:e8:74:4e:07:cc:d5:c8:46:4b:99:69:d2:db:e6:68:
db:73:f3:b1:23:2f:a9:e2:32:cc:79:c8:e4:60:73:75:6a:28:
c7:5b:ed:4f:66:81:b4:90:15:55:8f:e5:79:13:6e:8a:f7:2c:
e9:22:25:cd:f9:5e:37:16:a0:73:ec:95:77:97:cb:d8:7b:df:
46:db:00:fe:10:52:25:54:e8:d3:3a:7f:57:d8:58:22:e9:eb:
8e:80:74:a9:a2:67:47:a2:c8:2b:ba:d1:91:7e:ef:29:a0:4d:
0b:d8:80:22:32:51:e5:1e:fb:59:d2:c4:b2:97:5a:1a:1c:77:
79:66:bd:f7:8b:f9:8c:d0:cd:b9:52:f6:0f:39:b4:f5:74:df:
19:e0:20:3e:5d:87:bc:da:27:14:ca:49:33:f6:d0:dd:a2:93:
af:49:5b:4a:d3:d6:f1:7e:6a:cc:ee:c4:a0:9f:30:49:b8:38:
c0:60:36:1f:c3:62:1a:46:fa:f8:a2:06:3d:c5:f8:4a:1c:10:
b0:aa:6f:bf:e0:8d:ad:ae:07:3f:da:65:7c:43:0f:31:59:4c:
05:a0:b9:66:e0:20:4d:03:b1:ec:ee:85:db:4b:7b:15:15:45:
89:b1:ca:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 07:18:49 2025 by rpki-client