Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/B4CLhaC91eav-yZ9Wvr740XvZJ0.roa
File: B4CLhaC91eav-yZ9Wvr740XvZJ0.roa (raw, json)
Hash identifier: THKchfGxiXEkq2W1r3uxtP6GpU4cqBERQm0AletDh/U=
Subject key identifier: 07:80:8B:85:A0:BD:D5:E6:AF:FB:26:7D:5A:FA:FB:E3:45:EF:64:9D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A25C806DFD7ACA146CA672F0AADFB0D96
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/B4CLhaC91eav-yZ9Wvr740XvZJ0.roa
Signing time: Thu 24 Aug 2023 04:23:00 +0000
ROA not before: Thu 24 Aug 2023 04:23:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:178d:7ed9/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:25:c8:06:df:d7:ac:a1:46:ca:67:2f:0a:ad:fb:0d:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 24 04:23:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07808b85a0bdd5e6affb267d5afafbe345ef649d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6d:7f:8e:1c:86:55:df:67:95:0d:19:c9:c7:
19:66:ae:b4:57:96:50:ce:a1:89:e1:50:4b:3a:21:
d6:54:89:73:0e:45:2b:b5:0b:2c:73:06:f9:f5:93:
12:97:5e:fd:0f:f8:53:b6:da:1b:3e:61:42:70:a2:
f5:58:03:c4:61:32:70:d8:30:2a:f4:9d:c7:76:69:
bc:4b:67:cc:84:69:d1:17:29:68:9b:ad:b8:32:1a:
2a:0f:af:f4:24:e1:2a:ec:9c:8f:f5:e3:2b:b4:52:
ba:90:89:df:63:a5:3f:be:36:26:85:66:d8:b2:b2:
8c:9e:b4:81:a1:7f:c0:31:83:72:db:7d:fa:bb:93:
c1:f4:e0:1b:af:36:05:de:e5:37:47:d6:bf:1d:c3:
88:fc:1e:ed:f2:2c:e3:de:94:1b:a8:45:98:2f:f8:
ef:02:86:84:40:ac:60:f0:78:07:70:95:84:29:6d:
e2:c8:1b:ad:9f:d5:98:d9:1d:87:36:9b:c3:21:55:
dc:9a:ff:cf:04:d3:70:46:d6:3d:7b:c2:d9:90:36:
c1:3a:18:a9:09:b5:82:d6:70:72:8d:23:2e:f6:0d:
1a:3c:9f:f8:f4:33:8a:7f:6e:22:6b:4e:32:c9:61:
49:70:7d:a0:c0:13:57:b4:fa:6e:36:08:f0:c5:23:
5d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:80:8B:85:A0:BD:D5:E6:AF:FB:26:7D:5A:FA:FB:E3:45:EF:64:9D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/B4CLhaC91eav-yZ9Wvr740XvZJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
aa:50:16:76:d4:64:be:c9:f3:66:85:c4:f8:bb:7b:b4:1f:b8:
b7:3f:2d:08:17:69:c7:25:22:23:c3:6b:58:fa:56:01:d8:a8:
22:9c:62:ca:db:bf:0c:cf:12:89:24:db:3d:c4:1c:59:b5:fa:
6d:1c:fd:9b:d9:45:18:c6:b0:69:df:90:87:33:02:e7:05:c0:
94:28:f6:05:5a:1a:1b:e0:9c:4b:c3:1f:08:98:81:45:a4:9b:
27:7e:04:ab:57:5c:7c:79:c9:07:50:91:3e:a4:d9:7d:19:a1:
3e:24:cd:3d:85:de:f1:d7:4d:f3:59:45:57:92:67:a2:69:e4:
1d:c4:7e:a8:a3:8f:bf:61:ac:97:9f:27:52:d1:9f:ff:6d:7f:
86:f0:91:25:b8:f0:14:d8:58:8b:81:7f:58:d9:c6:7c:82:a6:
1c:6e:13:37:1e:26:07:25:cf:cf:07:f3:22:8b:a8:4b:81:d5:
27:d9:8e:ec:fb:d6:9b:2b:eb:3b:44:f4:62:7b:bf:0b:fc:d1:
d4:35:38:31:0b:3d:24:b7:83:40:76:c3:9f:c1:cb:51:05:a1:
b4:96:5c:df:86:58:19:84:bc:ec:6f:5d:18:ba:6a:cd:e4:ce:
22:e8:a6:cf:7d:bc:05:d9:7f:d6:76:aa:5c:34:8b:5a:d3:08:
2e:f8:d2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:30:23 2025 by rpki-client