Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bnjLyf6r2vs9EDcu7ccc312RWbs.roa
File: bnjLyf6r2vs9EDcu7ccc312RWbs.roa (raw, json)
Hash identifier: HyUmNhHDCd6SKjK+bK0FRJXlV584r3svczAXfta1W3Y=
Subject key identifier: 6E:78:CB:C9:FE:AB:DA:FB:3D:10:37:2E:ED:C7:1C:DF:5D:91:59:BB
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BC17D51D572470BAE99CC1A468AE1F1A5
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bnjLyf6r2vs9EDcu7ccc312RWbs.roa
Signing time: Sun 12 Nov 2023 03:04:57 +0000
ROA not before: Sun 12 Nov 2023 03:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64:ffff:0:18b:c17c:eddf/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c1:7d:51:d5:72:47:0b:ae:99:cc:1a:46:8a:e1:f1:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 12 03:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e78cbc9feabdafb3d10372eedc71cdf5d9159bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:45:b8:c5:e0:82:46:f1:c7:69:86:93:49:36:
1b:20:aa:e9:28:f2:b9:5a:f3:86:e9:c5:1b:3e:01:
61:dd:37:96:53:c7:d6:fe:15:a4:2a:12:d0:ec:c5:
4d:3e:79:a6:97:55:d1:ab:b0:58:26:cf:86:eb:cd:
eb:7d:eb:df:d2:ec:d6:65:89:30:d7:90:79:d3:e3:
f8:6f:6f:40:66:f0:7a:eb:d4:6d:9e:62:a4:ab:53:
71:aa:2c:96:63:d4:29:a4:61:74:bc:87:ee:a5:46:
ae:bf:66:11:81:b6:3e:c7:25:35:f5:e5:93:17:42:
dc:76:a2:7d:e1:e7:96:23:e9:91:86:53:8c:1f:15:
2f:c0:82:c9:4b:86:43:57:95:02:e9:ce:f5:9a:97:
9e:a6:8e:96:0c:38:20:25:07:1f:fe:04:a2:73:7a:
d0:ac:1e:98:4e:8e:c7:3f:eb:b3:2f:c7:a0:03:6b:
a2:68:5e:eb:ab:49:47:f4:ce:1c:0d:fa:2c:15:51:
d3:ad:11:3b:d7:51:6e:af:b5:d2:d2:2a:ff:47:13:
1f:64:62:f7:3c:52:be:96:3d:e7:42:d1:2e:4b:fc:
bd:62:e6:23:0a:87:55:23:82:b9:58:ce:dc:21:9f:
18:ac:46:5a:3a:a6:52:09:39:38:f3:96:de:d9:03:
e9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:78:CB:C9:FE:AB:DA:FB:3D:10:37:2E:ED:C7:1C:DF:5D:91:59:BB
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/bnjLyf6r2vs9EDcu7ccc312RWbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
91:10:ed:a8:77:cb:9f:16:f1:76:59:99:4e:7a:ac:fc:8f:f5:
c9:85:7e:4d:f9:c6:87:68:db:98:cf:6a:4d:aa:41:0f:aa:32:
75:4b:16:6f:1f:6f:7e:f4:09:69:d5:38:cc:5c:34:c9:fd:f1:
ec:01:bd:c8:a7:47:9e:5c:37:de:7d:54:31:7d:bd:9b:d2:b6:
0a:a2:19:88:bc:92:24:ea:20:4a:70:bd:9a:50:4e:f1:cf:c8:
60:59:23:27:f3:57:d7:ed:c6:32:ff:80:d7:ea:89:37:66:04:
3a:cb:65:c7:78:8d:e2:37:fa:3c:b1:a3:1b:10:2d:55:f1:33:
bd:63:a8:43:e0:5c:22:56:68:cb:05:3c:a9:71:4d:1b:68:49:
fc:e4:85:e2:7f:02:b9:2a:ee:d0:02:f4:0f:22:e3:7b:86:28:
0d:18:d1:5a:5d:6a:7c:f4:c1:61:c9:93:da:0f:2f:9f:87:22:
5b:e3:d1:fa:3a:5e:6d:a6:ce:95:d5:26:7f:df:49:ad:57:16:
e8:f2:ab:4b:a1:09:34:64:a5:7c:bc:e7:57:7a:30:0c:9a:11:
28:49:58:f8:c2:5f:ab:30:55:ec:36:e2:57:b9:67:44:6f:ba:
e4:9e:58:52:92:65:d1:0c:7c:d1:33:b7:7c:d3:fb:d2:5e:19:
8d:68:64:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:25:33 2025 by rpki-client