Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BOMCXHHkyPujwYGjSG0PrpG5wsE.roa
File: BOMCXHHkyPujwYGjSG0PrpG5wsE.roa (raw, json)
Hash identifier: C71e/y7VqsH3TbupL0wtNbZyhiQSBCpM5Xe6E9DyXYg=
Subject key identifier: 04:E3:02:5C:71:E4:C8:FB:A3:C1:81:A3:48:6D:0F:AE:91:B9:C2:C1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01882EFDF16909E5B59EB09C40FAC0DD88F5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BOMCXHHkyPujwYGjSG0PrpG5wsE.roa
Signing time: Thu 18 May 2023 13:12:54 +0000
ROA not before: Thu 18 May 2023 13:12:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2e:fd:f1:69:09:e5:b5:9e:b0:9c:40:fa:c0:dd:88:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 18 13:12:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=04e3025c71e4c8fba3c181a3486d0fae91b9c2c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:da:d7:a6:11:0b:e0:26:e4:22:4d:dd:61:a9:
31:2b:36:2d:46:0e:ad:e5:80:d6:73:81:ab:6a:86:
e2:bf:84:10:8f:07:0f:22:68:28:3b:8a:83:c5:dc:
ad:2b:86:09:d6:78:5c:34:e7:23:04:4d:f4:9b:85:
55:f6:5e:82:b7:d6:ad:3a:26:20:4f:87:0b:55:7d:
94:2d:cb:42:49:fb:4b:f7:95:2a:4e:90:95:99:ac:
f8:08:5f:ac:02:e4:c2:61:c5:ab:7c:28:7a:3f:78:
75:74:d2:ab:ec:7a:cf:f8:f2:e4:58:87:69:e1:44:
f8:d1:b2:b7:fd:c9:a0:42:22:75:c3:c5:64:37:8a:
af:99:c8:7f:88:08:8f:e1:bd:bc:a7:4b:3e:e1:f1:
a2:f5:5e:69:09:37:94:da:32:81:25:7f:8b:63:f8:
d0:89:88:1d:14:73:23:09:8e:b9:4a:d7:c2:aa:f9:
d3:ee:52:fa:dc:fa:60:dd:87:1c:48:81:f0:70:b8:
60:f9:f5:79:ad:23:b6:83:b8:6e:4d:87:46:3a:96:
3a:4b:56:7b:30:71:e3:ee:b7:15:e2:bf:7a:a7:2c:
f5:ef:d6:b2:23:71:70:b9:bf:08:81:76:33:f5:bb:
31:63:3a:c6:e4:7e:2d:74:b0:8a:6d:f0:33:1e:82:
d7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E3:02:5C:71:E4:C8:FB:A3:C1:81:A3:48:6D:0F:AE:91:B9:C2:C1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BOMCXHHkyPujwYGjSG0PrpG5wsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b5:2e:92:8d:7d:b2:aa:bb:07:d8:d4:f9:dd:96:b3:e9:b5:11:
e3:bb:ce:a3:3e:b3:3d:ae:8a:3f:c6:7f:73:b8:3f:06:0f:cb:
96:2b:2d:a9:27:ec:a4:42:2d:e9:9f:ad:d2:48:c8:e7:3a:47:
c5:38:52:bb:0a:50:56:03:1c:67:49:76:14:79:8e:a1:ea:e0:
4f:70:8c:09:a3:80:e6:71:ab:62:69:36:d9:16:32:a6:eb:f1:
7d:cb:c6:70:2e:6c:b7:1a:e2:b6:ca:3d:6e:7d:f7:b4:c5:da:
7c:cc:12:a0:28:91:4e:10:44:f1:c4:05:92:83:e7:7a:89:04:
a7:5d:c1:c6:c6:c3:9e:70:0d:b7:fc:1b:3f:a5:32:c7:04:e8:
e5:98:df:e5:4a:f1:b2:b8:ca:39:bc:1a:a0:c7:e2:9c:12:32:
c7:1c:a4:de:b7:08:87:8a:77:d7:01:08:1c:3a:60:3f:06:bc:
61:6b:5a:d2:29:22:96:a4:12:f7:94:dc:d6:ac:ac:b7:70:d7:
06:80:e2:58:7a:06:1b:e2:82:99:59:2b:a6:f3:5a:1b:a7:a6:
e1:7e:f2:40:b2:00:a2:45:0d:ee:6a:3b:ef:94:d8:d9:a6:57:
2a:ee:e0:6b:2d:8a:a0:f2:42:02:85:e8:c1:97:16:3b:02:ed:
e5:8d:a4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:58:19 2025 by rpki-client