Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BbrWXVXwM4wBOTqRHh-1NASYNCU.roa
File: BbrWXVXwM4wBOTqRHh-1NASYNCU.roa (raw, json)
Hash identifier: dzMB5rPZ4tstwSwrGto27m4HmATBKj7xiY0J0o9L3b8=
Subject key identifier: 05:BA:D6:5D:55:F0:33:8C:01:39:3A:91:1E:1F:B5:34:04:98:34:25
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 89E0DDFE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BbrWXVXwM4wBOTqRHh-1NASYNCU.roa
Signing time: Sat 04 Jun 2022 15:11:20 +0000
ROA not before: Sat 04 Jun 2022 15:11:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2313215486 (0x89e0ddfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 4 15:11:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=05bad65d55f0338c01393a911e1fb53404983425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5b:a2:b0:59:31:ca:68:c8:9e:74:ba:b7:86:
54:45:31:b0:2f:d8:77:9d:49:9b:0e:6b:8d:08:db:
f2:c3:e6:14:83:ec:38:ba:3e:7b:2f:9b:d0:cb:43:
7a:7e:21:db:6e:dd:2b:37:c9:df:b1:87:0b:76:fa:
3f:49:aa:e7:50:c4:bd:0d:3f:21:43:57:91:e2:e6:
cd:7e:64:dc:41:74:1f:91:77:75:45:57:61:ce:43:
70:6d:30:74:33:a0:99:39:5d:70:88:b8:3a:4d:df:
66:a4:83:0d:d6:a2:b3:3a:29:66:81:28:9f:bc:a0:
a3:83:76:ac:e7:c0:9e:8c:39:b0:e3:2d:fb:50:29:
35:59:4b:8f:d2:69:67:1b:d0:2c:da:87:0b:fa:12:
03:5c:9b:32:b2:df:ae:a6:cd:96:de:14:3f:5b:99:
c0:de:ca:d0:4b:9b:e4:2c:a3:eb:f5:00:5f:2f:e6:
7e:0c:2e:9d:87:80:fb:f4:bf:42:62:32:bd:78:d4:
bc:86:df:11:1d:46:41:93:37:3a:6d:40:0d:50:ed:
3d:c5:39:4d:40:77:61:a5:8a:6b:53:4f:a5:77:5b:
6b:0e:ef:16:0f:78:b6:31:f1:5f:db:a3:5c:32:d9:
e7:a0:2d:b2:c2:c0:c8:fe:65:17:17:a1:31:cd:40:
24:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:BA:D6:5D:55:F0:33:8C:01:39:3A:91:1E:1F:B5:34:04:98:34:25
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BbrWXVXwM4wBOTqRHh-1NASYNCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7d:79:66:0f:82:1d:91:f3:93:f9:d9:dc:65:22:26:37:c5:50:
18:f0:8c:90:86:56:06:9c:20:a5:57:21:f1:ec:49:a4:23:d3:
91:20:0f:17:c9:74:58:14:ff:28:f5:bb:4a:48:e4:57:0d:84:
46:57:cc:10:da:88:cf:38:96:2f:ce:ce:3d:74:0e:aa:ac:66:
78:b6:90:15:5b:69:27:88:d5:6b:48:ea:f1:14:1f:d5:c2:05:
f3:b3:8a:2c:28:7d:3c:4a:61:77:07:95:73:1c:1e:d2:44:dd:
7d:40:4e:62:09:ea:db:fe:87:f7:42:6e:bc:07:61:9b:4d:8b:
ac:15:01:b1:1e:1f:f9:48:10:35:0d:1f:68:01:7d:5f:a2:35:
c8:5a:5e:d6:66:14:80:61:15:f1:43:3e:21:91:06:b2:71:4d:
6e:3f:db:8c:8b:29:e8:c0:90:fd:f8:38:95:91:e4:7f:9f:ee:
8c:21:4f:d1:78:9b:ed:05:b0:58:99:2b:1a:22:a8:09:a4:0f:
60:6a:f6:0c:90:fa:f5:7c:43:ee:0d:e9:00:b3:5a:5f:17:80:
b5:45:3e:6c:c2:e5:b8:8a:ff:28:b6:2a:68:b7:bc:c1:d2:98:
98:e6:3f:c5:77:db:6e:c9:7b:c7:b2:1d:1e:ce:33:1e:d5:44:
e7:06:3f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 15:04:37 2025 by rpki-client