Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bj_mDTQ02x7hhQ-hy_RAN58_J64.roa
File: bj_mDTQ02x7hhQ-hy_RAN58_J64.roa (raw, json)
Hash identifier: FVOXTL4Dle8WgCMqyFr4v8hC6BC4JM2N8/apxIzwy+8=
Subject key identifier: 6E:3F:E6:0D:34:34:DB:1E:E1:85:0F:A1:CB:F4:40:37:9F:3F:27:AE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018360DA3C02465D92402E4B35AD165F548A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bj_mDTQ02x7hhQ-hy_RAN58_J64.roa
Signing time: Wed 21 Sep 2022 16:20:58 +0000
ROA not before: Wed 21 Sep 2022 16:20:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:183:5f81:ab13/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:60:da:3c:02:46:5d:92:40:2e:4b:35:ad:16:5f:54:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 21 16:20:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6e3fe60d3434db1ee1850fa1cbf440379f3f27ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3b:0d:ae:a3:96:2b:29:3a:1a:cd:75:aa:fb:
c8:c8:a1:88:b0:bf:2c:7a:d8:c3:80:75:1a:f2:50:
99:c2:d1:e3:7e:cf:f9:bf:67:47:16:52:bf:79:2f:
d6:22:bd:ce:8d:59:50:1e:af:cb:a9:53:1c:cd:ef:
f1:a0:d2:6c:83:c4:9b:6f:c4:6c:a6:6a:ae:3a:04:
e7:cf:91:df:0d:ab:e7:7d:be:cd:41:84:a4:68:a0:
ed:0c:8a:2a:cc:11:8c:1c:e7:c7:fb:67:da:6c:de:
fe:0b:d7:dc:7e:c8:56:3e:f0:2c:a0:63:70:f6:56:
77:57:90:f0:37:81:c6:fd:41:ea:e4:09:00:eb:e6:
07:69:b9:60:24:0b:d4:18:d0:52:85:b3:22:49:07:
bc:15:b6:01:89:3f:3e:83:27:95:1f:41:6f:73:4f:
37:16:fe:ca:25:2c:3b:d3:c0:71:ed:a7:89:8d:8f:
b0:90:a1:77:58:ea:cc:4c:20:ec:e5:00:26:48:6d:
8a:32:2e:59:81:26:ad:68:97:a1:2e:1c:1d:1e:be:
a2:9b:9b:86:47:23:b4:fa:53:9e:ed:70:ca:d3:7f:
57:0b:35:02:ab:35:62:23:96:cc:58:69:02:7d:d8:
de:a6:e1:de:a3:79:57:af:98:8b:b1:a7:f5:b6:92:
af:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:3F:E6:0D:34:34:DB:1E:E1:85:0F:A1:CB:F4:40:37:9F:3F:27:AE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bj_mDTQ02x7hhQ-hy_RAN58_J64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
96:87:49:76:b8:7b:6e:d2:91:9b:98:34:55:57:81:5f:ae:d4:
3d:ef:9e:87:f8:11:89:cc:0a:6f:b7:ab:af:62:3d:85:f9:6d:
fe:8d:c8:41:11:6c:66:a1:5e:ac:95:1d:25:fc:98:99:84:01:
78:5b:4c:10:ff:68:78:6b:ad:cc:9d:a0:fc:29:a8:70:28:16:
71:47:c0:53:e1:14:02:af:8b:a2:d1:73:b0:34:7a:c2:f2:bd:
89:b7:a1:61:e1:1b:f5:df:55:e0:d4:34:b4:79:5f:38:a7:13:
68:bf:72:12:9b:f2:80:21:ae:7a:05:52:2a:b5:41:cf:e9:c2:
b0:ba:90:16:8e:ef:b6:84:01:b1:1f:3c:c5:3c:6f:14:84:f9:
0d:31:6a:1e:e8:b7:45:2c:fe:4d:4f:b5:43:c5:b9:b6:49:94:
f8:4a:1a:67:a6:39:7c:ca:bb:8a:be:b9:0f:4e:dd:5a:10:fd:
9c:12:29:09:81:63:6f:56:b2:ed:b3:83:21:4d:5e:71:b0:a2:
e7:67:be:bd:33:2e:ca:56:61:38:87:53:9f:c0:11:2a:3b:80:
c0:df:78:99:3f:2f:af:51:65:b1:76:f4:e2:87:da:e8:bb:98:
5c:a4:ad:2d:80:64:8c:24:81:96:2b:af:02:84:3d:52:02:74:
86:1b:8c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 20:47:32 2025 by rpki-client