Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bh7EaOudcPCrfB4t8uAuH67y99s.roa
File: bh7EaOudcPCrfB4t8uAuH67y99s.roa (raw, json)
Hash identifier: lSbJFp+s13oRFY9RsQCjrxFhCods1uuE1eGHKKVdoXQ=
Subject key identifier: 6E:1E:C4:68:EB:9D:70:F0:AB:7C:1E:2D:F2:E0:2E:1F:AE:F2:F7:DB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01878AA1082EF8058835E421B9F3B0DBE7DB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bh7EaOudcPCrfB4t8uAuH67y99s.roa
Signing time: Sun 16 Apr 2023 15:13:41 +0000
ROA not before: Sun 16 Apr 2023 15:13:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:8a:a1:08:2e:f8:05:88:35:e4:21:b9:f3:b0:db:e7:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 16 15:13:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e1ec468eb9d70f0ab7c1e2df2e02e1faef2f7db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9b:27:a1:8e:25:29:35:83:30:32:06:ea:e2:
23:39:64:af:f3:65:a2:3a:90:62:01:80:19:8c:08:
c1:09:aa:31:df:2f:d5:e9:c3:c1:72:cb:38:ca:6c:
93:6b:a4:fe:41:55:36:1e:89:fe:d9:03:6d:06:50:
cf:4c:cf:e8:ab:5a:73:3c:73:81:ce:ae:4b:9e:0c:
12:4c:20:dc:b7:99:f0:32:39:d2:7d:18:78:8c:ed:
16:41:b5:02:23:dd:d7:7a:6f:f6:14:59:0d:43:7c:
d3:da:87:6a:36:8c:65:dc:10:d6:0d:03:0b:cf:21:
3c:bc:64:ea:40:fd:11:2d:c7:89:f4:2a:a6:5e:62:
ac:45:af:66:20:77:61:54:a5:69:30:01:4e:d3:cd:
0d:9b:2e:7a:10:9d:4b:e3:48:18:e9:26:c4:a7:ae:
49:30:b1:0a:60:a0:b0:5c:f0:ca:0b:d0:65:5c:ab:
7a:bd:33:da:2a:62:24:ca:80:c0:46:16:dd:79:0b:
6b:d8:c5:81:eb:e0:06:bf:99:bc:85:05:27:b7:32:
5e:ee:28:42:1e:68:b4:7e:b5:4d:17:ae:e0:ad:64:
95:40:7d:3c:1e:ca:34:84:6a:bd:5b:b5:3b:e3:8b:
23:fb:0e:68:1d:63:a4:02:46:64:10:37:e4:82:31:
d3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:1E:C4:68:EB:9D:70:F0:AB:7C:1E:2D:F2:E0:2E:1F:AE:F2:F7:DB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bh7EaOudcPCrfB4t8uAuH67y99s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6e:84:04:34:b1:d3:80:e0:b5:4c:7a:2b:fb:9f:5c:b3:50:61:
1f:07:d0:3c:b3:2e:00:59:71:e1:45:f0:81:46:bd:cf:34:e2:
30:a6:bc:1c:23:8b:d5:dd:52:c9:73:a2:0c:e4:e6:8b:e8:65:
3f:41:40:b6:f1:90:7f:9d:bb:66:ca:e1:83:d6:8d:9b:0d:c1:
7f:1b:2e:a1:0a:5f:65:1f:40:cb:01:a6:7f:e1:a2:80:ee:d9:
b0:07:03:7e:10:89:ee:c8:32:d3:a6:2e:5a:d7:ea:e1:05:d8:
55:1d:50:7c:d9:9f:46:f4:4c:96:98:5b:08:4f:18:b4:55:d8:
d5:fe:d5:77:63:a2:ec:34:9e:79:24:6f:16:e6:09:84:d5:d9:
c4:e4:42:8a:67:be:4a:eb:e9:3a:a6:97:c5:2f:75:8b:81:2f:
bd:0e:66:fd:06:f5:13:bc:03:b5:13:18:e7:6b:c7:50:9b:6c:
f8:eb:32:9e:89:0b:8f:2e:64:5b:7a:05:fd:62:65:71:42:15:
d1:14:f6:06:35:0b:0d:d4:89:8f:62:f2:58:04:e1:39:d2:49:
c0:d0:ec:94:a3:40:83:96:83:c0:4c:ac:16:2b:71:47:b8:7c:
9d:e3:5e:5d:b8:52:f5:c2:f1:e1:db:b6:dc:85:1f:9f:cc:ac:
cb:c0:b4:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:25:50 2025 by rpki-client