Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/boXkvsgNpGKoahZ5l7JyvPn7FAY.roa
File: boXkvsgNpGKoahZ5l7JyvPn7FAY.roa (raw, json)
Hash identifier: eBHhGN+0O7z139BhBGZ2NlwRa/PMqENhlS4Sf0lDekE=
Subject key identifier: 6E:85:E4:BE:C8:0D:A4:62:A8:6A:16:79:97:B2:72:BC:F9:FB:14:06
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189D4646A842516ADE1D9BFD36F131FD318
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/boXkvsgNpGKoahZ5l7JyvPn7FAY.roa
Signing time: Tue 08 Aug 2023 09:04:57 +0000
ROA not before: Tue 08 Aug 2023 09:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:d464:1882/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d4:64:6a:84:25:16:ad:e1:d9:bf:d3:6f:13:1f:d3:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 8 09:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e85e4bec80da462a86a167997b272bcf9fb1406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c6:4c:d4:1c:15:3b:0e:ff:b1:ed:9f:c0:7e:
16:c1:cf:b9:dc:a4:85:43:1c:65:86:f2:4b:44:3d:
42:4f:b3:f2:d1:61:ec:05:07:ff:4d:32:4a:0f:a4:
56:e0:8b:1f:0f:ec:d1:17:6c:1d:57:24:78:3e:b1:
9c:65:8c:44:7e:43:bb:3e:d7:8a:59:d7:9e:02:8b:
4a:e3:e1:d6:69:dc:b4:48:a4:f3:7d:9b:39:1a:58:
d9:93:32:7b:1d:53:27:a7:25:6c:37:60:0d:f8:53:
7f:35:2a:11:54:66:ee:1b:d6:ac:76:5e:b8:b8:16:
c7:eb:7b:4e:6e:2d:f4:73:81:a8:78:25:fc:12:ac:
ce:58:cb:2b:88:d2:8a:60:0c:fe:68:7c:80:59:36:
8c:63:cf:92:a9:1e:27:56:03:0a:e3:a5:be:7a:2b:
78:08:09:08:b3:ba:68:02:f6:fc:71:8a:3d:b5:d8:
2b:5c:ec:c7:03:e7:fb:04:1f:7a:8f:39:f5:e7:7b:
bf:d7:4d:3e:a1:28:39:70:42:f2:8e:f0:0a:a1:31:
42:a8:5b:79:ef:ce:dd:92:1e:53:01:f2:e7:66:28:
bb:e1:1a:21:2c:a0:a2:00:82:82:78:68:d7:f9:9c:
c7:bc:28:e3:00:f3:ba:35:4b:29:cd:b2:da:32:6e:
e9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:85:E4:BE:C8:0D:A4:62:A8:6A:16:79:97:B2:72:BC:F9:FB:14:06
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/boXkvsgNpGKoahZ5l7JyvPn7FAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
42:9e:01:29:05:05:50:0e:be:65:bb:0a:5d:0b:ef:ff:3c:44:
ea:cc:22:4f:d7:49:6a:1f:d6:79:43:45:af:1a:c4:96:29:13:
96:db:5a:cb:3f:92:be:c2:35:e3:23:b3:cc:db:ac:e0:8d:3c:
28:79:6b:43:45:8c:c7:24:0b:fb:26:b7:35:c4:d7:fd:9d:a4:
64:1a:6b:a6:5d:33:ed:f2:25:0a:ad:35:7b:6d:1a:c7:d5:1e:
47:9d:ad:b1:8c:c5:3b:7c:d7:df:1b:44:e0:b3:43:93:d9:77:
95:a8:97:c5:ac:40:d5:9f:27:13:a5:4c:20:13:10:a0:e0:d1:
74:61:84:5a:d8:33:35:43:77:f9:5b:95:dc:ee:7a:ec:65:36:
d6:4d:e2:57:80:e1:05:c5:75:e3:03:d4:ee:af:30:e7:31:24:
9b:72:37:17:ff:32:b1:75:6d:ab:53:c9:ef:ae:0a:c4:f0:ec:
3d:83:bf:1e:77:8b:79:30:24:01:7d:b4:7f:f0:eb:aa:f8:3a:
8a:76:f5:e7:d7:1a:b2:8b:1c:80:e5:a4:18:bd:a5:e3:e3:41:
35:1f:6a:3b:ee:53:11:2e:4b:56:ef:3f:22:ae:64:5d:59:cf:
5b:24:e1:a1:75:7b:83:30:2d:c3:1b:0e:80:92:9a:2e:df:6c:
39:ee:19:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 06:05:44 2025 by rpki-client