Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bpcDIjsakLJ0FCqgD5VnKhUYfrA.roa
File: bpcDIjsakLJ0FCqgD5VnKhUYfrA.roa (raw, json)
Hash identifier: LJNy/ax4E37lmpjNaYfzkSYPCPGQ+vqLIbYENIiJ9Tw=
Subject key identifier: 6E:97:03:22:3B:1A:90:B2:74:14:2A:A0:0F:95:67:2A:15:18:7E:B0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 839B7253
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bpcDIjsakLJ0FCqgD5VnKhUYfrA.roa
Signing time: Fri 13 May 2022 08:18:01 +0000
ROA not before: Fri 13 May 2022 08:18:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2208002643 (0x839b7253)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 13 08:18:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6e9703223b1a90b274142aa00f95672a15187eb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e6:83:9f:33:c9:90:ab:55:f9:b6:12:ba:c4:
52:da:e0:11:d9:c4:cb:e6:d2:69:c4:13:ac:f5:7c:
34:74:23:ba:b9:b3:19:72:20:35:c6:8a:fa:bd:15:
ed:fb:64:f7:20:d5:3c:31:f5:91:3a:b5:f6:98:5c:
af:56:2d:11:7f:23:82:26:78:cc:db:b2:a3:5e:29:
2e:ba:3e:93:4b:59:15:42:4a:56:fb:d0:74:5d:66:
fc:44:68:c4:f1:86:88:c6:c6:44:e0:03:c3:0b:80:
76:c3:bc:79:64:c1:e4:76:23:de:f9:9d:3c:54:0f:
70:f6:51:d6:6c:a4:25:c7:4e:e1:3f:01:6b:36:d6:
a7:28:2f:e2:e9:49:4d:66:f8:53:13:a7:b7:7a:11:
39:ec:65:52:fc:6b:f4:97:5d:19:62:5a:bd:66:23:
c6:4d:0a:9f:29:dd:2c:b2:9b:2c:e6:11:b8:9d:43:
c1:36:28:4f:d3:e1:9a:21:6e:ab:01:3c:66:65:11:
9a:38:db:ff:c0:d3:1a:61:2a:c9:f2:f5:90:5e:37:
30:17:07:b4:34:98:73:c7:29:75:c3:cc:57:1a:ad:
cd:76:86:57:f5:61:6d:7d:3c:a5:29:9d:22:60:b2:
0f:ef:05:a7:86:26:78:5b:64:c5:60:7e:c5:a4:cb:
89:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:97:03:22:3B:1A:90:B2:74:14:2A:A0:0F:95:67:2A:15:18:7E:B0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bpcDIjsakLJ0FCqgD5VnKhUYfrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9e:1c:79:aa:06:a8:a1:78:1d:64:8f:e0:8a:02:d6:ea:d5:f0:
2c:45:af:5f:f3:c8:f2:f5:5a:e1:bf:c0:41:6e:18:ac:ba:43:
f4:08:2f:3f:fa:63:f2:a6:d2:83:36:48:3a:37:2f:87:bb:be:
ec:d6:c0:8c:a9:3e:84:1a:6b:e3:e6:61:13:a3:9a:b4:6f:57:
7d:aa:b8:36:f3:cc:3b:04:2d:0b:b2:ac:aa:03:2f:ce:5d:a8:
ca:14:8c:64:72:7e:62:24:2a:86:c3:7e:a4:f1:df:b1:d6:87:
dd:07:40:72:69:ab:65:ec:3e:71:94:5b:0c:f8:d0:cd:ba:1c:
9a:da:0a:1b:19:e6:0e:29:b1:44:32:09:01:17:36:56:71:92:
d6:2c:e3:3b:5c:36:0e:86:c1:43:74:c1:55:d5:ed:c7:26:29:
c9:97:0d:94:e9:b5:d7:68:bb:91:06:eb:29:07:0e:de:5b:06:
ee:7a:dd:1f:5e:3f:e0:27:4d:8c:23:5d:21:0e:58:cd:49:d8:
fa:dc:ed:82:15:48:36:27:dc:74:da:8d:43:dd:08:5c:49:32:
51:17:73:49:be:77:90:4b:91:4f:8e:14:d3:fa:f4:b8:0a:21:
32:47:59:07:08:f1:f7:b5:05:6b:12:be:81:6c:25:2f:db:c0:
3c:fd:94:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:50:49 2025 by rpki-client