Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BcHlOGQwGA4rRxklZAii2SBQR7w.roa
File: BcHlOGQwGA4rRxklZAii2SBQR7w.roa (raw, json)
Hash identifier: Zz8LGSgY2VlrNbseIjQkzWx2VWIYoBwu34HlxeLIdGc=
Subject key identifier: 05:C1:E5:38:64:30:18:0E:2B:47:19:25:64:08:A2:D9:20:50:47:BC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189BE1BC5903CCB8D2F9E3353C5BDC0A61F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BcHlOGQwGA4rRxklZAii2SBQR7w.roa
Signing time: Fri 04 Aug 2023 01:13:58 +0000
ROA not before: Fri 04 Aug 2023 01:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:be:1b:c5:90:3c:cb:8d:2f:9e:33:53:c5:bd:c0:a6:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 4 01:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=05c1e5386430180e2b4719256408a2d9205047bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6d:82:fa:dd:fb:a6:bb:6a:3d:23:0f:ce:38:
6f:ab:f7:e3:c3:03:8f:dd:90:fd:e6:9b:73:8a:b2:
01:dd:6c:bc:57:44:55:cf:f0:94:d3:2d:f3:5d:ac:
4c:c8:a6:96:be:82:75:ee:61:5e:6d:49:e2:ba:9f:
28:28:48:44:0c:5b:88:44:c6:f5:d5:f8:f1:cb:66:
3a:5e:ff:b2:75:a0:75:84:c1:c2:ea:23:af:67:16:
5c:7d:d2:b0:7b:be:c2:8d:fb:a8:e9:70:84:51:28:
21:69:5c:e4:b0:17:9e:9f:2c:b3:98:98:12:97:e3:
8d:8a:f5:a5:db:2b:56:44:fd:45:9f:92:87:69:9c:
11:b2:19:f9:bf:6a:c1:c3:1c:f6:2a:78:39:24:19:
1f:ac:93:68:0d:c8:4a:28:ae:b4:5a:5b:f7:e8:41:
3c:58:c7:2d:eb:e6:be:e4:b9:1e:ae:22:79:66:c0:
d3:fa:ae:af:95:91:61:82:3f:01:39:79:64:35:82:
39:e5:71:47:04:9d:12:bb:9f:2a:a2:95:ab:a9:e7:
85:f1:84:b0:70:dd:96:58:60:32:c1:01:cc:23:c2:
ff:b8:43:51:4d:72:f7:84:b1:52:d7:ac:a3:c0:69:
47:f1:b1:71:d4:4a:23:cc:d2:13:35:97:25:de:f3:
99:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C1:E5:38:64:30:18:0E:2B:47:19:25:64:08:A2:D9:20:50:47:BC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BcHlOGQwGA4rRxklZAii2SBQR7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1a:56:91:cd:3a:16:c3:0a:21:66:1a:53:a9:3c:60:28:fd:b6:
be:2f:20:b9:9c:7a:ec:8a:87:bb:3b:45:11:df:7f:bb:c3:ae:
9b:8d:2c:d1:85:d8:1a:70:73:34:36:74:de:09:b4:49:b0:a0:
83:1e:aa:0b:ee:31:79:d5:8b:71:0d:a2:20:b9:cf:06:a1:7a:
17:05:4c:f2:84:0c:c0:9e:3f:e1:5b:25:a3:40:94:63:5c:e2:
0e:55:6c:bb:64:e5:38:e7:93:b9:b8:0b:0f:2a:ed:7a:7c:df:
3f:8b:ec:d6:3c:e3:8c:ba:79:91:cf:fb:f9:5c:df:54:0f:98:
b7:6e:f9:98:7f:e1:c5:b7:3c:d6:eb:43:58:6e:d3:d7:ae:48:
6d:57:75:b9:66:13:5f:a8:9e:f6:61:31:ec:86:4f:05:14:96:
91:84:35:23:15:8a:3c:87:c3:b7:ca:9a:a3:bd:5a:b9:96:d7:
36:26:9f:1c:2b:1f:38:d7:4e:86:ae:08:36:5b:1d:eb:67:5a:
8f:f6:c9:e6:d4:df:0e:13:fe:f5:e9:c0:09:07:5a:6e:66:77:
36:18:1e:d3:aa:4d:b3:79:25:90:3d:58:b6:ae:e8:18:ed:0e:
a9:e5:c3:9f:65:e6:32:00:b0:83:fe:c7:ed:76:b8:9c:2a:21:
81:61:79:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:16:21 2025 by rpki-client