Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bs_rN0CJfe4H68PkYkeFuwTvd5A.roa
File: bs_rN0CJfe4H68PkYkeFuwTvd5A.roa (raw, json)
Hash identifier: mYK+MlVH1PdmX8Sp5/PV6FZBWtfWePTfhsWXjWs2IG8=
Subject key identifier: 6E:CF:EB:37:40:89:7D:EE:07:EB:C3:E4:62:47:85:BB:04:EF:77:90
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018830E50019D4CAD39B56BAB6450DFEBFF8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bs_rN0CJfe4H68PkYkeFuwTvd5A.roa
Signing time: Thu 18 May 2023 22:04:54 +0000
ROA not before: Thu 18 May 2023 22:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:188:30e4:5d5e/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:30:e5:00:19:d4:ca:d3:9b:56:ba:b6:45:0d:fe:bf:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 18 22:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ecfeb3740897dee07ebc3e4624785bb04ef7790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:40:12:ca:04:09:11:81:ac:15:04:b7:c4:88:
60:fd:4b:c7:06:c4:49:4a:6f:4a:7a:de:16:81:da:
4f:43:88:bf:38:c2:7d:ef:04:ba:96:02:18:8a:ed:
d5:27:0f:14:76:9e:f0:10:1e:2e:25:50:30:91:58:
80:15:a7:de:a9:e4:a1:b4:f9:18:57:3b:c2:16:e8:
dc:55:c8:64:ab:e3:27:a5:ef:cf:a0:36:5f:d9:7e:
9d:93:1b:3b:d8:e0:3b:c8:ed:0b:30:dc:c6:7f:31:
88:f0:50:00:1e:3d:f8:67:0c:cf:d1:0a:b3:f3:f4:
f2:9b:32:48:dc:50:4d:52:4c:6a:57:a3:85:33:1d:
17:95:5d:12:7c:0f:5a:38:cc:07:b4:d3:f4:09:c5:
4f:8b:c0:fb:1d:fd:6d:9b:c8:34:69:fe:cc:dc:7d:
99:95:b2:9f:d4:a3:e1:40:12:cf:ff:4d:88:bd:18:
93:0e:1d:e4:a8:0b:a8:9d:20:ce:4f:90:36:51:99:
66:4a:88:8a:0f:50:3c:d0:4e:5f:18:e1:90:cd:5b:
8d:ce:a2:df:73:80:39:dc:f9:03:e1:e6:8f:b5:c6:
e4:2f:50:ea:6e:6e:52:cb:63:de:2f:a1:3a:00:b0:
70:75:67:74:28:1c:21:f1:a2:ed:a3:66:6c:ee:03:
99:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:CF:EB:37:40:89:7D:EE:07:EB:C3:E4:62:47:85:BB:04:EF:77:90
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bs_rN0CJfe4H68PkYkeFuwTvd5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
aa:e8:fe:94:a9:fa:43:93:66:62:3f:55:f0:80:49:40:32:1a:
66:37:1a:25:0c:70:39:44:4f:32:8b:c6:14:57:99:3c:cf:9c:
4c:14:32:fd:a4:8e:0c:b5:1c:bd:f1:45:d2:82:20:d6:9f:ab:
7e:37:7d:be:06:ba:55:fa:b6:ec:eb:ba:b5:fd:e1:5a:b9:1f:
2d:f2:0e:36:6f:0a:99:60:e0:fc:9b:30:ce:d4:f1:b0:d9:a6:
97:ef:26:f3:6d:da:90:c2:b9:d2:e9:40:ad:0d:01:b7:8a:41:
d1:05:3e:05:36:0a:4b:c1:47:f7:c2:0a:47:60:85:51:48:38:
72:d8:43:19:8a:44:99:4c:31:6e:46:7e:51:e1:dc:5f:8d:be:
ab:4d:cd:78:80:9d:12:09:e6:eb:77:b7:ce:f1:24:28:a3:98:
6c:9b:24:16:98:86:71:8c:60:d4:03:41:8e:8a:fb:66:1b:7d:
7a:18:ec:f9:9c:ba:9f:84:ee:17:64:8c:7e:19:bf:b6:f3:3d:
70:3f:b6:4e:5b:09:50:a6:36:ff:4e:77:70:43:4d:56:f8:76:
bb:71:04:92:4f:22:72:66:79:b6:b9:02:fa:e0:9a:d0:7f:86:
a3:f7:45:c0:c1:23:4f:8c:f7:1f:1c:13:80:9b:b8:4b:4d:ed:
d8:f6:80:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:00 2025 by rpki-client