Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bmd8Iux-Sq_4RtOl_1FuGUn8k_c.roa
File: bmd8Iux-Sq_4RtOl_1FuGUn8k_c.roa (raw, json)
Hash identifier: WFMJyI3OBBsj5iA8tL1lZs3WzlgPXo2Y5mPmLVesTa4=
Subject key identifier: 6E:67:7C:22:EC:7E:4A:AF:F8:46:D3:A5:FF:51:6E:19:49:FC:93:F7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01844CE031178BF907B4E55A0386C4116D91
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bmd8Iux-Sq_4RtOl_1FuGUn8k_c.roa
Signing time: Sun 06 Nov 2022 12:17:51 +0000
ROA not before: Sun 06 Nov 2022 12:17:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:4c:e0:31:17:8b:f9:07:b4:e5:5a:03:86:c4:11:6d:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 6 12:17:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6e677c22ec7e4aaff846d3a5ff516e1949fc93f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:07:02:32:f2:18:a5:71:6c:6a:31:36:f0:a5:
c8:73:e3:01:61:5f:9a:13:58:0a:b6:29:89:26:83:
50:61:ed:14:7b:65:e5:23:04:0e:4c:92:dc:91:7e:
dd:bb:bf:92:29:4a:49:da:f4:9c:b0:dd:2f:18:43:
9e:b4:1b:d2:ee:3d:cc:b6:3d:0a:f3:1a:65:83:51:
cb:12:c2:0d:a1:a6:00:76:1d:96:44:c6:fb:20:e8:
93:e0:6e:33:bc:ec:f8:dc:72:f3:5e:f1:72:62:6f:
1f:e2:d1:d3:83:60:63:b3:3d:2f:ee:4a:7e:2d:78:
0f:ec:3c:b1:52:66:67:84:3d:3e:b2:bf:ab:c9:e6:
8f:70:5b:9c:8f:09:6b:ae:ce:18:5f:60:3e:48:4d:
bb:80:26:3f:9b:01:dd:39:65:d2:12:bf:2f:2b:c5:
56:ac:fe:36:ae:5d:6e:4f:9f:a6:e4:44:24:31:87:
30:64:40:75:1b:52:58:09:40:73:9e:9a:90:b6:14:
f4:a7:a7:32:e5:95:1f:02:d0:75:73:c2:4d:58:53:
33:2c:d9:31:99:b8:58:80:f5:f1:26:6e:38:6a:2f:
52:9e:d7:9e:77:df:b0:c4:b4:87:d7:e5:ac:ba:ec:
d7:b7:73:46:cd:ef:a9:54:be:37:2a:08:95:84:2b:
1a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:67:7C:22:EC:7E:4A:AF:F8:46:D3:A5:FF:51:6E:19:49:FC:93:F7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bmd8Iux-Sq_4RtOl_1FuGUn8k_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
25:64:e9:24:45:97:ac:94:61:67:b8:01:4f:2b:87:c5:0b:0b:
47:e5:07:45:2e:f3:8e:5b:53:57:c1:1d:60:8b:bc:54:36:03:
f6:de:2e:0c:bd:28:4b:60:0b:cc:41:bc:8d:30:5b:41:5a:2a:
ff:80:7f:2d:31:ed:cb:c2:6d:2c:ba:a3:4f:19:d8:a8:72:99:
c6:70:b4:2c:16:33:1b:3a:c4:1a:ef:68:51:9f:65:95:63:e5:
2c:06:d2:10:3e:73:ee:ac:a0:88:19:42:c6:0d:60:f7:ef:ff:
d9:30:91:32:e3:bf:62:39:10:d5:fc:61:b4:68:cc:e4:f5:86:
46:ba:8b:61:f6:ad:40:70:00:4c:94:50:69:65:80:7d:c9:28:
3d:b6:4d:c2:51:c9:b3:af:a9:f2:ca:36:e1:1c:c1:59:98:e1:
b5:c1:83:d4:4c:cf:a5:c6:fd:70:79:b3:3a:21:14:3c:18:91:
77:9e:f9:aa:73:91:8e:c2:5b:14:52:40:6a:d4:b3:94:64:58:
ef:bd:b7:da:87:df:9f:16:b1:2a:31:fa:a6:d0:c7:f3:77:f0:
d1:40:cc:92:86:aa:2f:4f:a2:29:64:2a:6f:1b:ce:96:b1:2d:
85:c8:2b:46:fb:d0:ff:39:fd:a5:4e:9b:05:cc:64:42:6a:2c:
a0:cb:48:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:45:13 2025 by rpki-client