Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BTpkI-SI--uFwS7VX--4kok94wo.roa
File: BTpkI-SI--uFwS7VX--4kok94wo.roa (raw, json)
Hash identifier: WHB1UXpomI8ojHZ89ZX4ubaudOurF7Xuuo9F4BmrBZE=
Subject key identifier: 05:3A:64:23:E4:88:FB:EB:85:C1:2E:D5:5F:EF:B8:92:89:3D:E3:0A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018819BFF0CFB48C9C29C65B1CCC28CB9489
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BTpkI-SI--uFwS7VX--4kok94wo.roa
Signing time: Sun 14 May 2023 10:13:09 +0000
ROA not before: Sun 14 May 2023 10:13:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:19:bf:f0:cf:b4:8c:9c:29:c6:5b:1c:cc:28:cb:94:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 14 10:13:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=053a6423e488fbeb85c12ed55fefb892893de30a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6c:4f:d4:f9:df:d0:bb:18:96:6e:9b:44:47:
d0:50:f3:ff:68:d8:9a:75:61:f8:48:40:e7:7e:b0:
06:5f:e6:f8:c1:26:5f:7a:57:4b:02:30:d3:c0:68:
67:4f:cd:b7:da:fb:d1:90:3c:c2:f9:9a:d5:f3:66:
f6:5c:29:4f:98:e5:29:88:b1:7c:a8:b8:dc:4c:8f:
b6:dd:17:80:0c:e9:62:8b:ae:1b:14:99:7b:9a:a4:
99:d7:a5:02:ff:c0:a2:cf:4d:c5:28:be:e1:b1:5b:
36:b4:d7:9f:ac:50:29:cd:2b:b6:d7:53:3b:81:56:
46:67:6d:9a:00:5b:1e:37:3d:8b:74:b4:b4:c9:a4:
ac:68:06:c9:d6:14:bd:8d:f3:23:9f:ed:cd:6c:3b:
5a:4f:af:a9:fe:07:e9:21:8e:6c:68:2f:6d:74:f1:
30:ea:21:e1:24:af:fb:45:e6:7a:b5:98:7d:bf:c3:
f6:71:f8:72:7f:9d:43:74:31:70:34:10:6c:7e:86:
eb:8d:93:5c:45:21:c3:e1:be:42:f5:d7:df:1d:11:
6b:37:97:93:81:70:d5:6e:f4:61:f6:92:e6:65:61:
1b:5c:11:a7:b6:cb:9a:44:f9:00:0b:1c:cf:dd:c0:
66:83:de:0b:33:20:b4:1e:b0:22:b3:0b:99:1e:17:
a4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:3A:64:23:E4:88:FB:EB:85:C1:2E:D5:5F:EF:B8:92:89:3D:E3:0A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BTpkI-SI--uFwS7VX--4kok94wo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9c:e0:55:0d:e3:29:22:da:a8:56:44:c0:5f:0a:8e:80:52:76:
05:94:76:9a:26:79:20:1f:b3:3d:f8:40:88:3d:b1:eb:b1:45:
d2:62:3f:57:43:3c:30:0e:db:61:60:85:f7:3f:cd:18:27:e4:
5a:ab:5c:75:5e:70:15:b5:77:9d:f2:9f:47:8c:e8:ea:1e:b7:
0d:d5:82:39:bb:8b:cc:7f:5e:25:40:77:d5:4e:35:dd:51:ff:
13:05:2e:a3:a1:96:a9:1d:57:db:1c:54:2e:5d:b8:5e:c7:3b:
d2:16:20:f6:61:94:08:e7:ec:16:1e:3a:24:a5:44:b9:5a:74:
c6:a1:3e:c4:d7:56:0b:31:e0:76:9a:a5:12:6c:14:84:26:9b:
f9:5f:30:b0:76:97:f1:48:dd:71:e6:91:52:93:b9:16:6a:49:
96:42:8f:c7:87:6f:6c:78:88:65:af:36:93:44:ba:84:1b:6d:
c4:41:95:55:c9:ab:be:e5:7b:69:8e:55:d8:dc:58:30:68:ee:
d9:b5:9e:1b:64:8a:2a:eb:73:ad:24:23:44:ea:6d:30:68:7b:
75:26:07:1c:b2:8e:09:21:26:6e:1a:30:14:cc:d9:39:05:f7:
3b:68:89:bf:e9:ad:fd:32:e6:37:fe:64:84:18:87:c3:0d:b3:
09:6c:d7:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 22:33:48 2025 by rpki-client