Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BTsYenlYEArUeKa9AF8DytTLvbc.roa
File: BTsYenlYEArUeKa9AF8DytTLvbc.roa (raw, json)
Hash identifier: J0FFUN3AEZwDfClZdnKA8SQU9GlS9xOff+pVY5qnxW4=
Subject key identifier: 05:3B:18:7A:79:58:10:0A:D4:78:A6:BD:00:5F:03:CA:D4:CB:BD:B7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01887C71CB7F4C0462008A76B6B9B8B34BFB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BTsYenlYEArUeKa9AF8DytTLvbc.roa
Signing time: Fri 02 Jun 2023 14:10:12 +0000
ROA not before: Fri 02 Jun 2023 14:10:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7c:71:cb:7f:4c:04:62:00:8a:76:b6:b9:b8:b3:4b:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 2 14:10:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=053b187a7958100ad478a6bd005f03cad4cbbdb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c3:ee:e4:f7:dc:89:97:86:81:14:7f:d4:84:
b1:9c:ce:77:4b:d2:3a:d5:2c:bd:d0:0f:ae:cd:fc:
de:15:25:f2:c4:dc:a0:c1:7a:02:cc:5c:f2:cc:94:
69:79:13:21:62:b9:3e:9d:b3:c4:0d:e4:58:09:31:
38:80:5f:3b:ac:44:a0:71:a9:f9:86:b9:9d:f5:ce:
48:e0:9b:a4:15:42:c0:e8:5f:3c:a0:75:13:94:65:
9f:ee:c0:41:92:c3:fc:ba:7e:e4:43:68:6d:77:1a:
7d:f4:42:a5:51:a1:f7:4e:9e:90:a8:70:0c:93:88:
ca:94:bd:d3:6f:fc:6a:92:e2:2b:5a:ef:03:28:1c:
96:12:c8:b2:02:54:4c:c9:bd:f8:c9:5b:2d:f1:8b:
2d:1d:e1:c1:53:99:de:77:80:3c:09:c0:3b:2a:6c:
e5:d1:72:c7:6e:f7:38:56:27:0a:9d:d8:94:0f:8e:
65:5f:ff:ec:1a:84:6e:07:cd:c3:89:04:f8:ac:45:
4e:c2:44:7a:4e:82:0e:fc:8a:7b:dc:17:0b:04:2d:
89:a4:78:3c:62:ca:84:27:f5:14:f1:02:27:bc:0b:
fa:d8:9f:df:92:ce:1d:f2:c3:b9:04:0c:9e:bf:51:
83:cb:98:44:2f:ed:24:20:0a:95:b6:24:6e:80:3a:
d2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:3B:18:7A:79:58:10:0A:D4:78:A6:BD:00:5F:03:CA:D4:CB:BD:B7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BTsYenlYEArUeKa9AF8DytTLvbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
64:79:8d:29:7f:40:2d:10:b7:2a:b4:e6:56:4d:87:de:31:6a:
d1:2f:81:47:21:ff:23:fc:95:bc:4d:7c:b0:33:a1:b5:bb:73:
b8:f0:54:3e:b2:7c:ac:3d:cd:f7:82:c5:50:6d:66:1a:7f:4e:
39:40:54:1b:18:88:a7:34:6d:6c:37:51:b2:91:8e:89:cc:79:
2c:bb:45:10:9e:35:a7:57:a8:ae:75:a8:14:ba:8e:28:5e:50:
08:82:34:f4:76:8f:76:fd:14:2c:e6:c4:a6:13:be:28:3d:33:
f1:90:36:16:1e:aa:07:b7:aa:0f:e3:c8:77:d6:b3:b6:09:7b:
26:89:d5:4f:dd:a6:b0:14:df:ca:84:e0:f6:6e:19:8d:b7:0a:
ca:81:a3:06:f2:24:c8:1c:a5:8c:60:46:03:7a:07:8d:7e:97:
63:05:76:16:b8:e9:b5:bc:79:27:9e:bf:6f:65:3b:09:39:c1:
db:2b:a3:63:78:cb:c4:ce:60:ec:48:56:32:bf:cc:ec:5e:20:
f1:26:ff:2e:c0:49:9b:3e:83:37:ca:0c:a5:42:94:2c:6f:43:
4f:3f:c9:a8:0d:03:da:b3:7e:44:b4:cb:c3:91:bf:e5:55:fd:
54:22:72:e6:4c:45:fd:d0:72:c7:97:76:5d:c0:b8:55:a0:6e:
6e:90:82:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 19:30:31 2025 by rpki-client