Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BTISni7A5t11xOE32MjVMUiof_0.roa
File: BTISni7A5t11xOE32MjVMUiof_0.roa (raw, json)
Hash identifier: 9kThMdFVOcvALDDILQFU+js5gEOXm1wyNineFVro8po=
Subject key identifier: 05:32:12:9E:2E:C0:E6:DD:75:C4:E1:37:D8:C8:D5:31:48:A8:7F:FD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182900EBF9EAAB3C693AA660E1FC5C0512C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BTISni7A5t11xOE32MjVMUiof_0.roa
Signing time: Fri 12 Aug 2022 03:17:41 +0000
ROA not before: Fri 12 Aug 2022 03:17:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:90:0e:bf:9e:aa:b3:c6:93:aa:66:0e:1f:c5:c0:51:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 12 03:17:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0532129e2ec0e6dd75c4e137d8c8d53148a87ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:7a:c0:cc:02:2c:a9:44:e1:c7:f0:2a:e2:02:
ba:2e:47:ac:75:96:05:72:e9:9d:a8:8b:7f:34:9c:
6f:f0:ef:98:0b:6b:77:43:0b:86:b2:86:6f:c7:b4:
cf:89:0e:23:ed:3c:61:96:3a:96:76:97:48:b1:ea:
01:83:3d:a6:8d:36:03:4b:c0:64:ac:70:fb:7d:f8:
3a:e2:96:0b:a3:36:a8:6f:c9:33:0d:f8:3f:81:50:
af:8f:27:4f:03:94:de:72:1e:b6:a4:cd:49:2e:48:
84:40:0d:8c:2a:27:9e:1d:fc:4b:ca:03:30:94:b9:
8f:72:d5:bd:92:00:5a:1e:eb:7a:67:4a:da:e8:ee:
a3:86:a0:7b:ca:fa:9b:6d:e3:7e:f8:73:84:8f:95:
29:a5:55:09:ad:83:89:0e:62:90:87:44:c1:28:27:
02:85:ea:98:93:ee:67:4d:4f:7e:68:bb:4a:dd:be:
f9:9a:98:4f:56:4c:4c:a6:0a:1a:36:6a:33:e9:3b:
78:fd:b8:f2:42:71:ca:2c:63:78:e7:7a:2f:e0:6f:
f2:d3:b6:ce:36:2f:c3:99:14:e7:18:1e:d2:74:be:
ed:04:91:97:04:01:0f:d2:44:86:02:0f:b4:7b:b7:
07:38:7f:66:92:7e:c4:25:ac:b8:26:60:65:22:05:
1b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:32:12:9E:2E:C0:E6:DD:75:C4:E1:37:D8:C8:D5:31:48:A8:7F:FD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BTISni7A5t11xOE32MjVMUiof_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a5:07:23:c2:8a:12:66:85:83:13:a6:b2:ce:9a:30:c9:33:d5:
45:d2:00:b4:ca:35:54:c8:eb:18:f6:59:61:30:1f:32:22:6a:
51:58:2a:17:53:f3:87:48:38:96:94:ad:99:c5:00:3b:46:18:
32:24:5d:bb:14:0e:a1:47:83:e6:f2:f4:a3:c7:1b:b9:81:47:
b9:2e:2f:af:53:45:da:a6:fb:72:7f:80:0d:21:dd:2d:37:24:
9c:fd:f1:1f:7f:c8:14:f2:90:99:43:03:55:b0:27:9a:4a:bd:
02:29:f9:5f:52:84:dc:8e:e1:48:ae:c9:d0:00:d9:fe:e5:b1:
e1:a4:2c:15:60:3e:0f:b3:53:1a:22:98:32:f0:cc:ce:17:fe:
ed:fb:aa:42:a9:fa:01:0c:f9:c4:55:59:51:d0:3e:77:42:80:
87:a5:78:aa:d4:1f:d1:f7:4f:81:fe:cb:90:84:fe:12:22:29:
21:28:c4:4e:76:80:37:75:06:a8:17:ff:ab:0d:e3:78:2b:38:
7a:6d:8c:69:31:d1:97:c2:2c:6b:e8:da:b6:38:ce:ec:98:a7:
36:19:d2:4f:00:24:ae:63:ca:de:c3:8e:e8:85:6f:59:22:73:
a1:5a:22:92:41:01:9b:d7:cb:1d:02:3b:b4:85:9f:a6:95:59:
ef:c2:44:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:52:38 2025 by rpki-client