Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BUdS76UoNDhUmS-EDhkQxeTKQA4.roa
File: BUdS76UoNDhUmS-EDhkQxeTKQA4.roa (raw, json)
Hash identifier: avZ6efldyRuPgPx8Dgjz6wIl79HZS0mOZZdf39A3iTQ=
Subject key identifier: 05:47:52:EF:A5:28:34:38:54:99:2F:84:0E:19:10:C5:E4:CA:40:0E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01831582973693240213253B0D8E83AA2481
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BUdS76UoNDhUmS-EDhkQxeTKQA4.roa
Signing time: Wed 07 Sep 2022 01:13:43 +0000
ROA not before: Wed 07 Sep 2022 01:13:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:15:82:97:36:93:24:02:13:25:3b:0d:8e:83:aa:24:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 7 01:13:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=054752efa528343854992f840e1910c5e4ca400e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e6:7a:7d:9d:27:88:f6:0f:c4:90:96:df:de:
89:2f:5b:b8:6d:82:bb:4b:bb:f2:29:a5:b8:96:67:
80:4f:03:c7:d5:f3:a6:58:fd:73:fa:75:c9:fe:8d:
23:08:44:c3:27:79:87:20:1b:02:e4:05:0b:af:f9:
08:0b:61:fa:37:bf:00:f1:3f:65:fc:49:bf:83:fa:
d2:8e:f9:48:10:c0:22:dd:a4:2c:52:07:7e:55:d4:
23:4c:b4:53:92:be:cf:a2:05:1e:11:10:a0:08:da:
3f:26:04:b8:07:f2:ad:a0:9a:d1:48:67:7a:bd:94:
38:07:da:28:9a:82:7e:48:d5:27:93:06:76:a6:bc:
e3:c1:9b:5a:3b:25:63:d4:60:62:a8:7f:10:7f:0e:
ef:ea:b5:1b:a6:37:b7:f8:3e:ae:54:df:98:77:0e:
f1:f9:8c:27:30:2a:d0:cd:f7:ad:4d:27:67:06:6b:
42:da:9c:05:8c:a2:99:e0:00:10:a3:49:90:30:85:
e8:ec:05:30:ab:90:26:a3:58:dc:8e:4d:2b:4f:41:
d2:8a:75:f9:99:41:ac:32:f5:06:24:5e:b9:d4:3c:
39:7f:49:a4:bd:44:50:d7:98:8e:d6:8a:bd:27:5c:
9c:f8:48:ff:7c:10:95:1a:61:7a:63:0c:53:a2:1d:
b2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:47:52:EF:A5:28:34:38:54:99:2F:84:0E:19:10:C5:E4:CA:40:0E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BUdS76UoNDhUmS-EDhkQxeTKQA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
00:77:76:6e:f5:c0:36:d0:ff:0c:e5:56:7f:22:4a:7d:e5:76:
7c:b4:08:a7:42:46:3c:ed:28:6d:d8:0f:4e:58:00:5d:87:b5:
8f:13:74:db:23:ce:ed:ed:a3:59:96:6e:9e:f0:6b:ea:39:c4:
dd:86:58:61:dd:4c:6e:84:1b:54:f5:d9:1a:4b:2b:03:b8:38:
07:88:12:61:2c:b2:a5:99:91:cf:97:04:16:e1:ec:fd:eb:12:
a1:e7:81:25:72:d9:18:05:df:74:2e:fd:03:22:25:6a:1d:82:
8c:30:c1:ee:94:bf:ad:5e:c4:9c:2a:ff:b1:01:06:f2:fa:18:
b5:e7:11:96:ab:0a:2b:bd:09:d1:0a:93:3f:a9:91:8b:88:87:
bb:5c:74:e2:f3:2d:51:36:d9:05:29:bb:cb:6b:f8:a4:75:cb:
c9:da:98:d9:65:8c:59:32:09:36:6c:57:38:eb:a6:f9:b9:e1:
43:28:18:ea:19:cd:ea:d6:ca:8a:42:65:16:19:40:eb:35:45:
2a:a3:dd:37:fe:d5:2e:cc:81:d9:aa:aa:50:a6:b4:3a:68:3f:
f1:92:1c:c3:68:fa:13:9f:93:41:c8:48:84:4f:39:3d:a3:55:
6b:b8:ab:f1:c9:a9:c2:d1:4c:77:48:64:1c:d0:34:58:7a:4a:
02:73:06:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:17:00 2025 by rpki-client