Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bmXdaxhDa6uVL6PPOTdbO07XW3s.roa
File: bmXdaxhDa6uVL6PPOTdbO07XW3s.roa (raw, json)
Hash identifier: k9tG0bThXCN0Yfj5coVRdpAa/68C94E0t/hKJkajNA0=
Subject key identifier: 6E:65:DD:6B:18:43:6B:AB:95:2F:A3:CF:39:37:5B:3B:4E:D7:5B:7B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189F278038F88321BFCEDF11653ED2BB952
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bmXdaxhDa6uVL6PPOTdbO07XW3s.roa
Signing time: Mon 14 Aug 2023 05:14:58 +0000
ROA not before: Mon 14 Aug 2023 05:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f2:78:03:8f:88:32:1b:fc:ed:f1:16:53:ed:2b:b9:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 14 05:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e65dd6b18436bab952fa3cf39375b3b4ed75b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4d:57:35:c1:a9:47:f3:b6:0c:95:55:44:47:
73:f2:c8:60:fb:45:ba:c8:21:ca:38:0f:c1:70:cb:
ca:9e:bc:11:71:83:6d:82:47:10:2f:32:5b:c0:44:
10:52:d0:dc:9f:2c:99:6c:5f:94:9f:f4:4c:97:b1:
40:6d:77:50:9d:9c:0e:c2:bb:a4:c6:2f:19:fb:68:
6b:5e:49:a3:a4:52:57:ed:d5:72:28:91:2d:47:07:
fa:fa:18:2f:bd:45:bc:d6:08:75:08:27:21:8b:06:
85:26:f0:6e:5b:1b:be:76:6e:98:23:98:04:5b:9a:
5a:dc:7d:0b:f9:7d:91:0d:c9:a2:c5:07:2b:9c:8e:
ec:65:91:75:99:39:51:f9:d2:ad:27:f2:73:2e:1c:
a3:4c:fc:09:14:ea:c5:bd:f5:fb:ce:d8:d6:19:0e:
46:86:7d:00:aa:f2:68:9d:eb:81:8c:36:a4:77:d4:
75:a4:6b:8b:11:38:7f:0f:2a:1b:9c:56:85:a5:cd:
77:9d:e4:71:9f:18:43:76:76:32:68:d1:af:7a:67:
b3:32:d2:45:e3:53:8c:18:21:ee:0d:85:a9:6d:bd:
d1:96:ff:1b:a8:5c:10:8c:d8:9f:a0:3d:a7:13:26:
d8:8c:93:2f:ec:37:bd:2e:68:78:65:5e:98:5c:ef:
86:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:65:DD:6B:18:43:6B:AB:95:2F:A3:CF:39:37:5B:3B:4E:D7:5B:7B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bmXdaxhDa6uVL6PPOTdbO07XW3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
68:39:8f:ab:9b:d0:e9:60:78:71:eb:11:f7:12:32:0a:39:e1:
05:fc:4b:7f:66:57:19:72:cb:31:a8:ef:db:71:c0:24:10:93:
74:e8:12:b1:f6:1b:2e:bf:1d:8a:c4:7f:14:96:ef:1d:29:35:
54:9d:da:a3:21:4c:6e:cf:69:b5:0c:cb:1c:98:69:c2:0f:64:
4b:a3:f6:19:90:73:07:78:aa:d0:4b:74:38:11:9e:46:22:7b:
f5:48:36:81:99:d6:e2:d5:33:31:2a:38:3b:1d:57:3c:62:f6:
f4:2e:28:69:c2:52:7f:fe:72:ad:79:ba:4e:d1:8d:4c:9f:5c:
cf:b5:d8:d1:98:74:54:00:1d:c9:20:cd:f5:48:5e:c6:d7:4f:
24:55:2b:2d:25:cb:b7:6c:fe:81:35:95:2b:79:c3:66:57:b7:
08:74:06:5c:35:12:8e:ac:43:5b:eb:c9:1d:83:73:81:0d:d0:
ff:82:40:b6:2e:72:5f:6f:9f:2e:61:c7:cf:98:fe:14:c6:e3:
0d:96:be:16:1b:fd:8b:8f:15:6e:99:b5:9f:52:41:b1:b1:ec:
d1:26:9d:1f:0d:f3:84:e4:ea:10:2c:bf:be:83:d5:b3:0c:12:
dd:b6:9f:85:2d:78:07:8d:02:c3:d1:30:a5:04:04:12:3e:db:
6e:b0:8b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:37:52 2025 by rpki-client