Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BBYn178DGy6Vc59ItRomrhSyVPk.roa
File: BBYn178DGy6Vc59ItRomrhSyVPk.roa (raw, json)
Hash identifier: oywVettD1rtNgmzklRN8DW6P2E2cKd/lDu/Oe5MKOP0=
Subject key identifier: 04:16:27:D7:BF:03:1B:2E:95:73:9F:48:B5:1A:26:AE:14:B2:54:F9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182B0A84BB0B92806A54D930E0B2CCD9EA4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BBYn178DGy6Vc59ItRomrhSyVPk.roa
Signing time: Thu 18 Aug 2022 11:13:15 +0000
ROA not before: Thu 18 Aug 2022 11:13:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b0:a8:4b:b0:b9:28:06:a5:4d:93:0e:0b:2c:cd:9e:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 18 11:13:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=041627d7bf031b2e95739f48b51a26ae14b254f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:29:53:c0:5d:ad:91:dd:3b:f3:23:00:84:ec:
96:6d:94:e2:c2:5a:3b:66:b3:b5:37:a1:45:6e:0a:
d5:8f:d1:27:9b:cb:23:50:09:e7:56:62:fb:1b:2d:
58:03:04:ca:30:e0:68:75:35:2d:d9:f0:60:34:be:
2f:75:a0:e3:34:9a:0e:58:7b:26:18:1a:6b:60:6a:
14:5f:5f:c2:ad:eb:b0:bd:d7:c2:37:47:80:32:1f:
df:03:26:19:a4:7a:56:bc:50:1c:ff:b8:8e:67:74:
0c:43:9e:f6:17:19:8a:93:32:12:1f:32:2d:e9:49:
29:3e:9d:63:10:b8:db:bf:f6:42:d3:4d:08:94:58:
ae:21:bf:b6:05:15:70:44:72:4e:22:a4:e3:4f:ee:
fa:2b:8d:22:51:be:8b:40:1f:e2:74:28:f8:42:c6:
df:4f:a7:05:1d:d4:ac:cd:fd:47:bd:f5:0a:40:d4:
b4:0a:c5:43:ad:44:1e:54:b1:9e:97:b7:b8:a6:cc:
1c:7f:4a:3e:5f:c2:ce:5e:bb:84:34:f4:8e:aa:63:
a1:3c:60:53:0d:c5:52:6b:2b:10:1b:4b:0f:db:7e:
bf:d3:0d:ca:13:b1:b1:bc:03:55:96:f7:c5:d1:07:
62:60:ce:cf:b9:dd:d8:ec:67:9a:8f:99:85:d2:cd:
35:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:16:27:D7:BF:03:1B:2E:95:73:9F:48:B5:1A:26:AE:14:B2:54:F9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BBYn178DGy6Vc59ItRomrhSyVPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
15:e5:8d:83:5d:e3:75:4b:27:70:06:6e:7e:21:c3:7c:ac:ba:
93:75:12:09:bc:05:6c:9b:05:ae:85:53:e2:0d:cf:52:85:d3:
0b:cc:9d:a5:65:0c:ae:89:3b:0a:2e:6f:b6:da:44:23:79:2e:
d9:70:88:86:b5:38:66:ef:16:46:19:2b:6e:bc:ee:6a:66:71:
a5:5e:3a:31:68:40:3e:e1:04:43:46:7e:a6:67:e9:db:44:f9:
46:5b:3b:cb:e1:92:f9:ce:8b:cc:d4:cc:ab:fc:44:0c:69:93:
e8:31:24:d2:d6:78:c8:78:99:c0:a6:63:8c:1d:5e:3b:52:19:
32:5b:76:df:99:49:d0:f4:93:5c:48:74:57:e0:c6:25:57:4e:
a6:cf:c9:22:7c:1f:70:07:be:a2:a5:d0:ca:e2:8f:9a:e6:c6:
92:d8:4d:e6:35:2b:4f:77:d0:0f:3c:d6:27:24:45:21:df:de:
db:27:f6:87:37:2e:b2:f5:74:58:1a:ad:b5:99:c5:1c:ee:40:
a4:65:aa:06:fc:6e:d9:03:1b:61:d3:55:28:9e:6c:e4:0a:10:
30:e8:6d:6c:b8:db:bd:78:9c:d5:1c:b8:20:46:f7:53:43:40:
59:09:d1:a8:a1:50:03:ff:9e:17:a4:03:5b:f3:ce:90:3a:ad:
f5:d2:51:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:14:54 2025 by rpki-client