Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/BMwqriPGBQd8QZv0K7J55onJFRY.roa
File: BMwqriPGBQd8QZv0K7J55onJFRY.roa (raw, json)
Hash identifier: zD+uvJiYzKtGgbZQl93M5OpFCjdkM3gNXA7KNV3vJ5I=
Subject key identifier: 04:CC:2A:AE:23:C6:05:07:7C:41:9B:F4:2B:B2:79:E6:89:C9:15:16
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018DEDABFE4CD2B3C3F5AD2A35595DC9C886
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/BMwqriPGBQd8QZv0K7J55onJFRY.roa
Signing time: Wed 28 Feb 2024 03:04:48 +0000
ROA not before: Wed 28 Feb 2024 03:04:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18d:edab:e70f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ed:ab:fe:4c:d2:b3:c3:f5:ad:2a:35:59:5d:c9:c8:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 28 03:04:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=04cc2aae23c605077c419bf42bb279e689c91516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:17:7c:e0:9c:a9:7e:aa:5a:72:06:32:5e:e5:
6a:7d:43:e9:55:6a:ff:3b:50:78:cb:80:c0:ff:74:
e1:0a:66:64:d2:91:7e:71:17:aa:71:97:fd:cd:a5:
e8:2e:53:e8:69:ba:4a:be:bd:d2:55:7a:01:b2:86:
46:6c:c1:1a:6f:ae:8e:e0:f1:ca:c0:89:7f:86:0b:
3e:0e:16:89:9e:43:58:02:07:5d:b5:6b:04:85:40:
1f:02:6a:79:3a:7f:38:94:ce:f5:12:e9:3a:a0:1f:
db:8e:ed:e0:b9:30:d3:73:96:c4:58:37:b3:72:e3:
fc:1f:34:e9:d3:eb:9d:e0:d6:57:56:57:d3:a1:7d:
6b:dc:07:ea:6a:37:7e:d7:21:60:b9:3e:89:61:86:
8f:2e:bb:14:04:4f:3a:4c:19:02:19:12:29:c7:84:
a0:1c:1a:ce:92:a8:68:2e:7c:4c:e1:bc:97:49:f4:
be:e8:92:51:4c:7c:90:f9:45:4a:94:ca:e5:f7:12:
10:46:aa:ab:11:c0:32:f6:95:b4:3a:34:b5:75:5a:
1d:00:4c:81:cb:57:47:b1:31:9f:64:02:fb:7e:57:
dd:cc:98:7b:59:89:87:e3:ad:bf:e7:9b:51:f5:4c:
93:2a:ef:f1:4c:b5:78:0a:40:c4:42:93:57:78:27:
c3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:CC:2A:AE:23:C6:05:07:7C:41:9B:F4:2B:B2:79:E6:89:C9:15:16
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/BMwqriPGBQd8QZv0K7J55onJFRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8b:fa:12:d3:ee:09:4d:eb:8a:c9:54:96:f1:30:ea:09:07:3b:
76:06:c6:ef:30:3e:ed:bb:88:8c:16:7c:d8:75:d7:ad:45:16:
16:a1:b0:3d:bc:8c:8b:1f:b7:9f:4e:57:a5:91:4b:42:ff:e7:
5d:2c:07:86:a4:26:c0:52:47:3e:78:71:1a:6c:be:8b:e5:28:
64:b8:34:3b:9a:f2:83:b1:27:7d:ac:58:00:57:8c:f7:0d:05:
34:d8:ef:de:38:60:0c:e5:54:76:32:a6:f4:dd:dc:b7:f9:b9:
bb:58:58:13:d7:f1:3f:ef:10:5c:f0:60:45:54:58:19:42:8f:
85:00:25:41:3e:34:5d:a7:e3:85:e5:4e:c7:3c:ea:f4:e2:c9:
80:e6:52:a5:46:cb:c6:75:1e:23:c6:93:b1:71:25:96:3a:17:
75:a8:73:71:72:34:07:26:df:52:77:ae:78:0e:22:a0:d8:dc:
18:83:88:3f:48:fc:3f:89:d2:fd:cd:10:22:7a:bc:cd:00:c2:
38:55:84:f5:08:a4:b4:a0:17:65:f7:0f:bb:d6:56:1b:e5:e2:
4d:d7:ae:27:9f:0f:cc:56:3c:a9:a1:ec:3e:6e:56:38:6a:f6:
07:cc:36:19:07:0a:16:4d:34:38:96:b5:b5:27:72:b2:41:60:
d3:c9:7f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:20:18 2025 by rpki-client