Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BXHbV30a8Byv6ZrMraspL_0K0_I.roa
File: BXHbV30a8Byv6ZrMraspL_0K0_I.roa (raw, json)
Hash identifier: j1zy3GqPlmcw7IPK82YCM/e1JGNQqdSVF0y4j79hqB8=
Subject key identifier: 05:71:DB:57:7D:1A:F0:1C:AF:E9:9A:CC:AD:AB:29:2F:FD:0A:D3:F2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A16F00BB87A4ED1BFBAD8F3E1C2E71C52
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BXHbV30a8Byv6ZrMraspL_0K0_I.roa
Signing time: Mon 21 Aug 2023 07:12:24 +0000
ROA not before: Mon 21 Aug 2023 07:12:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:16:f0:0b:b8:7a:4e:d1:bf:ba:d8:f3:e1:c2:e7:1c:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 21 07:12:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0571db577d1af01cafe99accadab292ffd0ad3f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1f:59:cc:49:83:71:bb:bd:59:0b:62:35:b2:
cf:2a:fc:d3:70:21:73:69:dd:aa:d8:38:93:b4:b4:
70:bd:d8:16:95:7e:db:58:19:99:ea:a9:16:44:e1:
1d:a8:7a:b2:3a:22:6b:75:e3:6b:9a:05:11:7f:73:
6e:ff:8d:d1:67:23:24:28:c1:08:56:8b:8d:b9:87:
40:04:b0:69:a3:60:15:82:43:4c:c3:92:d4:43:27:
4a:a9:04:0f:5d:c3:dd:c3:e5:46:f8:f8:56:37:dd:
11:c8:24:bc:93:23:69:46:ab:1a:4f:c9:93:c4:45:
ad:84:11:2d:f2:f6:8c:c7:3e:ba:0e:42:88:45:bf:
65:43:75:26:a2:27:4d:79:c2:0a:5c:33:2a:bb:75:
87:a1:69:b8:46:33:cd:51:c9:80:05:a2:4b:17:82:
e6:8a:51:e3:6c:22:6c:9d:ee:fc:11:9b:a4:27:2b:
5e:11:05:0a:ec:38:33:bc:f9:3e:27:e7:33:41:ed:
f5:ee:01:a5:39:73:bc:29:28:d1:8f:db:c4:a9:2e:
35:24:57:f0:93:0f:6e:ae:d4:79:10:d9:e8:58:b3:
c9:40:84:02:4b:88:d0:ab:06:61:a8:df:f2:cc:7f:
41:7c:71:0f:58:d5:ef:21:1d:6d:97:37:ef:70:59:
5e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:71:DB:57:7D:1A:F0:1C:AF:E9:9A:CC:AD:AB:29:2F:FD:0A:D3:F2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BXHbV30a8Byv6ZrMraspL_0K0_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0c:62:56:e1:06:5b:ff:ec:e3:d8:3b:ac:ac:9f:c8:c9:ea:7c:
ae:54:de:5d:c5:5f:bf:9d:17:89:c3:9e:eb:6b:e3:d6:1d:39:
79:ca:72:79:77:16:92:18:bd:de:30:1e:c5:7d:67:41:65:7c:
2c:df:b7:cc:d4:e5:46:84:f7:00:6d:af:ca:42:00:b0:9a:6e:
b4:3a:bf:f5:7c:f0:52:cd:03:8b:12:01:2f:35:84:ac:44:fe:
44:3e:d1:e7:c2:97:51:d8:a3:94:1b:b5:0a:e2:06:30:91:7f:
a6:4f:b7:19:00:dd:36:a9:eb:8c:c6:cf:e1:4e:5c:ee:cb:37:
7d:d9:a5:5f:b9:21:64:c5:03:52:45:b6:9d:77:c6:46:c1:25:
00:33:77:3f:79:71:2d:e2:96:2f:40:ba:85:4d:6f:59:f4:e7:
a8:99:ba:64:02:eb:76:11:e1:09:90:36:40:55:ea:8b:1c:b1:
8e:f6:52:47:a4:ef:49:39:19:ea:b0:79:b4:1f:81:10:17:36:
1a:64:ba:da:30:a6:1e:d5:51:a7:7c:ce:4d:77:e5:58:33:8c:
74:45:87:52:a7:30:52:c5:13:32:a9:21:bb:b5:fa:25:d5:3f:
59:84:02:0d:84:53:f6:e8:1c:f7:7d:e2:18:49:54:65:a0:17:
da:ce:42:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:22:32 2025 by rpki-client