Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BNVFd1uEd5RPONQ6Pd_ySnh9dAQ.roa
File: BNVFd1uEd5RPONQ6Pd_ySnh9dAQ.roa (raw, json)
Hash identifier: +tAMTja5J3RYkNDdpatZmyDjhUm74XAbPQe95zPrdNs=
Subject key identifier: 04:D5:45:77:5B:84:77:94:4F:38:D4:3A:3D:DF:F2:4A:78:7D:74:04
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018549D4353A1595DEAE79468E7FAFFC6003
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BNVFd1uEd5RPONQ6Pd_ySnh9dAQ.roa
Signing time: Sun 25 Dec 2022 15:08:42 +0000
ROA not before: Sun 25 Dec 2022 15:08:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:49:d4:35:3a:15:95:de:ae:79:46:8e:7f:af:fc:60:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 25 15:08:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=04d545775b8477944f38d43a3ddff24a787d7404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b5:c4:0a:8d:f9:b5:3a:e6:b2:5e:99:25:76:
d7:49:68:13:16:f4:38:6e:89:7b:1f:68:75:66:76:
c7:53:f3:11:9a:34:d9:a7:44:05:d2:b1:87:30:e0:
15:2a:c1:96:69:93:41:5c:cf:3b:27:aa:f3:0d:5f:
b5:93:d1:34:83:f1:c9:75:83:46:5d:77:29:82:55:
2b:3f:2f:c0:c0:43:4f:43:0e:7b:41:4e:af:1e:90:
7c:7e:60:c3:e9:fe:8c:4f:57:8c:05:a3:a4:5e:4d:
07:83:61:f6:30:71:12:8b:91:67:73:47:a2:e5:7c:
74:da:eb:fb:12:13:64:4a:bc:1a:ab:eb:ac:2d:6a:
ce:32:a4:1b:6f:47:b0:d2:f7:4f:d2:2b:f8:ed:7c:
0e:c3:08:f4:8a:4a:6d:3c:29:cb:ec:8b:52:84:70:
c8:32:1e:ca:07:01:9d:2a:e7:de:7c:a5:ad:a7:2f:
9a:cc:af:88:7c:e2:a1:c7:3f:64:67:14:c8:ea:f7:
2c:3a:4e:7b:ff:12:04:60:1e:f6:15:03:aa:ac:fc:
0d:13:28:20:29:ee:ed:6f:be:b1:ee:76:51:57:a0:
3b:ed:5e:ec:a3:af:1f:36:79:bd:45:c3:fb:f9:05:
39:a9:8f:27:d0:95:cf:dc:60:06:4b:03:26:bb:1b:
88:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D5:45:77:5B:84:77:94:4F:38:D4:3A:3D:DF:F2:4A:78:7D:74:04
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BNVFd1uEd5RPONQ6Pd_ySnh9dAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
63:d9:51:81:5f:cc:10:9b:19:ab:45:b6:88:f4:2c:b9:07:51:
15:1f:50:5d:e0:35:e2:63:1b:32:cb:cb:57:9b:1c:dd:3b:4d:
38:22:a1:aa:c5:48:4f:57:06:f8:7d:e2:41:bf:8d:6d:35:5e:
bd:60:7d:73:f3:83:c3:87:bb:ca:0a:d3:65:48:3b:31:e8:d4:
24:64:29:97:70:93:eb:71:2f:2c:e8:dc:aa:3e:b4:07:c5:90:
44:99:59:1c:ce:ad:eb:de:b3:83:29:3d:18:84:53:6c:7b:ef:
44:2f:b6:82:16:79:de:72:eb:94:9b:d3:67:35:7c:fc:1d:26:
a8:47:e7:d0:1a:c5:43:4b:f0:87:30:d3:d6:30:29:82:54:35:
32:8c:b3:54:c9:37:da:d5:18:91:17:43:68:36:0c:f9:2b:b3:
38:11:4e:c1:b8:a5:3d:e6:76:99:8b:f5:55:0c:c0:07:f2:83:
8a:88:3f:24:94:67:b8:26:d5:87:dc:0e:c0:30:cf:1f:d4:31:
8a:68:6a:5f:fc:2f:5c:71:0d:8e:02:0c:81:f9:58:91:83:55:
b7:e7:d5:57:08:23:38:0d:ac:f1:62:00:56:47:41:ac:9e:44:
fe:c1:8c:60:0f:61:f3:d5:07:63:64:db:4a:53:cb:a3:4d:c9:
20:04:a2:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 09:19:48 2025 by rpki-client