Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bni-7sDeEreO9JaJTpgNLn94hoQ.roa
File: bni-7sDeEreO9JaJTpgNLn94hoQ.roa (raw, json)
Hash identifier: DCdpNXAGDsVE/sJYP84zEoHq9dxBv/d/LaecdKDDhws=
Subject key identifier: 6E:78:BE:EE:C0:DE:12:B7:8E:F4:96:89:4E:98:0D:2E:7F:78:86:84
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B103F9345A0DEDA7EC9F2FA338A40DDF4
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bni-7sDeEreO9JaJTpgNLn94hoQ.roa
Signing time: Sun 08 Oct 2023 17:04:43 +0000
ROA not before: Sun 08 Oct 2023 17:04:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:103f:4c38/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:10:3f:93:45:a0:de:da:7e:c9:f2:fa:33:8a:40:dd:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 8 17:04:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e78beeec0de12b78ef496894e980d2e7f788684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a9:15:5b:ed:2e:a5:23:80:7b:86:78:17:fc:
a1:4d:0e:7e:60:44:01:69:17:f1:82:bd:84:b4:bc:
14:2d:a3:b5:bd:fe:7c:b5:da:a9:a1:a2:6f:ed:50:
59:5f:14:f1:6e:96:bd:b3:1b:1b:91:68:e9:36:c7:
63:34:28:2d:85:6f:ee:24:55:ed:e1:bf:16:b9:15:
28:82:32:f4:ed:41:41:cd:7a:de:22:93:24:76:a2:
68:b8:bb:bc:6e:c0:7a:df:d1:f9:2f:67:15:82:c5:
df:9d:7b:fe:20:d9:86:0d:36:ad:0c:41:8e:49:a7:
ab:fa:96:c7:79:70:bc:94:a9:97:da:01:5d:88:0b:
1e:f6:30:2d:22:fe:ff:42:5f:1d:da:e9:33:b9:d8:
f8:da:2e:5c:3b:9d:fa:2d:36:5b:5c:e1:b7:d0:2d:
ff:1a:79:92:9a:0c:81:b6:4a:76:a3:94:2b:80:3f:
7a:bd:34:37:2f:80:a2:ac:8c:02:49:9d:0a:05:a4:
99:5c:1b:99:ea:6e:a1:1a:92:1f:e5:4d:6b:9e:c2:
0a:85:ee:84:04:a1:d9:f0:bd:f8:33:ae:22:18:99:
c4:58:30:65:27:bd:12:19:88:fa:d9:f7:09:fa:e6:
97:88:71:cb:89:32:d1:44:25:f2:38:d0:d8:7a:e9:
b0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:78:BE:EE:C0:DE:12:B7:8E:F4:96:89:4E:98:0D:2E:7F:78:86:84
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bni-7sDeEreO9JaJTpgNLn94hoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
30:ac:1a:c4:7b:5d:d3:d2:c1:29:fa:02:aa:e3:4f:4b:e1:11:
52:4f:3e:c1:09:9d:1b:8b:cb:1c:79:5d:89:fa:bb:2e:d0:f0:
ce:18:82:1b:ec:9c:e3:92:ea:3b:23:5c:7c:9c:2c:09:28:95:
ed:33:23:20:68:07:fb:b9:7f:b8:96:80:99:a0:3f:6b:1a:2b:
e8:4c:83:1f:ce:c1:6d:23:0c:c7:f2:31:55:3e:8b:e7:82:2f:
d0:3e:da:49:94:ea:68:22:c8:7b:22:bd:2c:0a:bc:c9:16:c7:
5f:e8:26:c3:b2:6b:d8:d7:d6:b1:11:44:6e:40:85:03:15:b0:
dc:27:b0:43:b6:99:7d:2e:65:e5:2c:1a:b1:01:76:d1:6c:8b:
29:ff:79:30:3c:80:ea:53:8b:82:9d:e8:93:c6:c7:ba:81:40:
c6:fc:49:1c:ff:cd:7e:46:fb:0f:b0:ce:71:12:51:7e:2c:6e:
00:f1:cf:f2:c0:24:ec:34:1b:72:e6:89:bb:f1:d3:53:68:72:
c6:e9:42:02:a7:e8:66:1b:83:3e:8c:2a:29:ca:f2:5f:48:83:
61:73:fa:79:8d:29:e6:dc:5f:6e:66:81:b0:cd:c5:70:78:3f:
79:d6:55:1f:b1:61:05:c1:16:cb:ea:cb:23:23:d8:b9:8b:9a:
98:cd:62:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 12:35:41 2025 by rpki-client