Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bwpgvYQq4ePVoCfKUuyS9GhIx-E.roa
File: bwpgvYQq4ePVoCfKUuyS9GhIx-E.roa (raw, json)
Hash identifier: 7viYZkWmQYPav69rFyRyaNQQaeGa0/k98Iz5fv92+6U=
Subject key identifier: 6F:0A:60:BD:84:2A:E1:E3:D5:A0:27:CA:52:EC:92:F4:68:48:C7:E1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186BC9AB593FBB06D3B738816F1A26B610F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bwpgvYQq4ePVoCfKUuyS9GhIx-E.roa
Signing time: Tue 07 Mar 2023 15:05:00 +0000
ROA not before: Tue 07 Mar 2023 15:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:bc9a:197f/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bc:9a:b5:93:fb:b0:6d:3b:73:88:16:f1:a2:6b:61:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 7 15:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f0a60bd842ae1e3d5a027ca52ec92f46848c7e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e5:10:09:e1:a0:df:56:89:28:4c:90:19:02:
54:5e:3a:5d:eb:ff:8d:95:0a:72:f4:53:33:a3:d5:
98:b3:44:a2:e5:44:d0:e8:bc:0b:e0:a9:bd:55:c4:
d8:8f:89:11:59:50:03:03:41:f6:c5:6b:33:88:c2:
0c:6b:c9:a3:22:4e:29:97:43:22:3d:7c:da:b6:92:
d5:10:95:3b:1c:35:1c:70:97:26:2a:19:af:9a:45:
e8:6f:d0:a3:58:5a:5e:35:a7:68:3e:2a:07:59:0a:
78:1c:02:e4:4f:a4:31:f1:32:eb:61:bb:19:6e:74:
24:18:89:9d:3a:41:80:84:4c:1f:0d:98:91:73:30:
e7:56:ef:f9:7c:ab:fe:10:1c:f4:d6:2b:7a:72:0a:
4f:3d:54:2f:b0:6a:eb:34:83:bf:99:a0:b7:5b:c4:
30:0e:84:64:d1:6b:7b:59:b3:9d:b3:73:65:ca:d4:
d0:e4:29:6c:dc:4e:10:ac:de:2b:10:7d:42:90:3a:
b5:e4:c6:60:c8:d7:07:23:7d:57:f5:78:af:fe:91:
45:1f:17:7d:4d:b7:ce:45:1d:bf:ad:f3:3b:f3:4b:
b9:92:e0:14:cd:f5:4a:5b:c6:22:5b:cf:ff:00:4e:
f2:42:73:ee:df:71:01:0e:e0:fe:eb:16:73:b0:3d:
06:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:0A:60:BD:84:2A:E1:E3:D5:A0:27:CA:52:EC:92:F4:68:48:C7:E1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bwpgvYQq4ePVoCfKUuyS9GhIx-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6c:99:7b:24:0f:75:03:63:e9:72:60:3d:ab:3b:73:f8:80:59:
78:e3:d8:58:66:22:d5:93:a0:f7:81:27:c2:f1:44:eb:e2:09:
65:c6:1b:7c:ba:e4:74:9b:76:74:b3:02:7c:21:d2:33:aa:13:
ec:34:9f:63:39:cb:d0:99:82:ae:1c:cd:9b:d3:d8:42:db:18:
9b:42:be:89:30:6a:b3:6c:03:ef:7b:47:79:4f:27:8f:b1:2f:
92:2b:60:cf:a0:2f:0b:a7:d6:e7:10:38:e5:9c:7a:b8:2e:5a:
d8:70:e7:bc:7b:f2:4b:4d:4c:8f:d5:7f:18:5c:9b:10:64:3c:
12:dc:e2:95:a4:ff:42:59:7e:b5:34:26:9e:06:e1:a4:b3:9d:
2f:21:1e:99:e0:4f:46:7c:8f:dc:59:9c:bb:e9:f2:6f:f7:90:
50:07:32:f8:a8:6c:a6:86:7a:ad:95:36:cf:44:52:a9:11:58:
4e:9c:ea:0e:38:2a:98:f7:6a:8a:5f:75:d0:7d:ad:26:78:dd:
db:2a:3e:82:75:f6:d3:b3:32:64:7f:42:3a:a7:dc:a8:b7:53:
89:eb:67:73:26:6a:cc:0d:36:04:17:f0:00:91:48:eb:35:d9:
77:5b:6b:ff:8f:31:d3:4f:3f:0c:3d:c4:5d:5d:90:48:70:78:
82:5a:f6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:19:42 2025 by rpki-client