Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BIs1VXfsnnKQHEgZ9SmWomIbP60.roa
File: BIs1VXfsnnKQHEgZ9SmWomIbP60.roa (raw, json)
Hash identifier: mvzbw18wzrgt0RAxt/DgGTe7AKo+ns6jVLFUizmNQrI=
Subject key identifier: 04:8B:35:55:77:EC:9E:72:90:1C:48:19:F5:29:96:A2:62:1B:3F:AD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188597736E83C03E9CE340358ADBD2AA2E7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BIs1VXfsnnKQHEgZ9SmWomIbP60.roa
Signing time: Fri 26 May 2023 19:09:25 +0000
ROA not before: Fri 26 May 2023 19:09:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:59:77:36:e8:3c:03:e9:ce:34:03:58:ad:bd:2a:a2:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 26 19:09:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=048b355577ec9e72901c4819f52996a2621b3fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d0:3a:1b:42:44:03:3b:6c:64:7f:8f:0b:97:
f4:0e:b0:01:38:80:66:2c:43:65:49:03:5d:10:1c:
52:2b:ef:5d:02:a9:c3:41:e6:ad:01:51:97:75:5c:
81:08:d9:0b:a0:e5:03:22:3f:8c:28:f0:c9:c5:6f:
0c:70:77:24:14:19:24:b2:02:a9:a5:9c:98:d5:83:
eb:20:55:2c:aa:7c:f8:11:8c:13:d9:01:c5:a6:a7:
7a:14:69:1f:96:c6:3a:cb:4d:7b:37:70:81:ce:8d:
57:02:e5:bc:57:54:82:14:40:b8:f4:db:4a:2a:68:
1e:c9:e0:0d:d0:7f:fd:c5:73:e8:f6:b0:7c:7e:71:
70:ca:7c:34:1b:71:a0:ca:8e:43:20:f7:90:c0:04:
ab:a2:7c:07:6e:0c:82:c1:f1:e7:ba:4c:7c:84:c4:
a2:50:6d:53:ec:5f:f3:1c:05:e9:2a:e7:cc:43:a7:
70:45:8b:9a:e2:58:ff:0c:a6:77:b7:22:74:23:e4:
2d:ef:cf:0a:51:4b:ac:29:86:81:cb:14:8b:da:79:
eb:26:46:5c:d4:fb:8a:cf:b2:19:11:da:8a:10:28:
ec:2a:aa:70:e3:e3:03:38:4c:0f:89:41:93:d6:25:
8e:74:37:6d:69:27:e9:cb:9d:b8:95:79:b7:eb:51:
29:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:8B:35:55:77:EC:9E:72:90:1C:48:19:F5:29:96:A2:62:1B:3F:AD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BIs1VXfsnnKQHEgZ9SmWomIbP60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ad:df:8a:02:c7:d4:62:7f:0e:71:6b:66:42:ae:89:d7:bc:d9:
28:d7:35:6d:62:a6:78:38:d9:33:4e:b7:f0:be:be:9a:86:9a:
8f:0e:79:f6:45:2c:17:b4:49:f4:8a:f8:4e:5b:10:a8:e4:42:
e8:7a:d0:ef:b3:ea:de:ae:02:52:36:9d:41:bc:6b:ac:89:c0:
a7:0d:02:86:e4:bd:07:e3:d7:3a:ba:2e:12:52:08:3d:8b:0d:
4c:5d:0c:77:12:46:6e:61:67:ce:e0:ce:26:8f:4c:30:a4:74:
5b:66:19:02:20:1d:65:03:7f:c0:bb:e8:c0:32:57:06:1f:a5:
a8:18:8f:43:92:9e:b0:d2:17:d4:2e:7b:4d:20:7a:7d:c1:c4:
41:ef:2a:2f:13:52:15:2d:75:cd:9d:ab:88:a7:81:94:af:96:
ac:82:41:28:ab:4a:1f:98:31:07:98:20:36:2c:a7:f5:1a:74:
6d:b9:0d:4b:9c:23:65:e7:24:9d:1e:58:ba:ad:4d:96:f2:d6:
b0:d4:33:05:a4:ee:6d:ab:cb:d7:5e:92:fb:a0:65:a7:65:80:
f8:11:3f:94:91:6e:70:51:99:b6:ee:bd:04:8b:5e:34:ab:36:
48:bd:03:f4:8f:d4:83:5e:7e:05:f8:c6:a8:01:f1:88:ae:bf:
1a:5d:69:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:52:03 2025 by rpki-client