Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Bct-pIeeYlUEZua2hKVVnkQUsVU.roa
File: Bct-pIeeYlUEZua2hKVVnkQUsVU.roa (raw, json)
Hash identifier: oHkzSMTFOv6ObPk2l1/4hgktwYJW2C1Y7CO4Viee8AQ=
Subject key identifier: 05:CB:7E:A4:87:9E:62:55:04:66:E6:B6:84:A5:55:9E:44:14:B1:55
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183DD4B81B0C306FBD32C7AF57A278B2F48
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Bct-pIeeYlUEZua2hKVVnkQUsVU.roa
Signing time: Sat 15 Oct 2022 20:17:36 +0000
ROA not before: Sat 15 Oct 2022 20:17:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:dd:4b:81:b0:c3:06:fb:d3:2c:7a:f5:7a:27:8b:2f:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 15 20:17:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=05cb7ea4879e62550466e6b684a5559e4414b155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0d:f3:53:2c:23:1c:67:68:7e:aa:20:5e:25:
bf:b9:7f:9c:8c:20:48:b1:99:56:85:8e:90:f1:ba:
bf:93:fe:2f:f2:7c:5b:34:f6:b6:14:b0:eb:57:5f:
35:74:1b:9f:eb:5c:ec:c1:6b:56:5f:91:da:de:7c:
c3:73:f4:0c:d8:dd:8d:3d:5a:32:0f:57:4c:d2:8c:
c7:ab:0d:fa:ba:69:ab:ba:9a:1c:3b:3e:10:0a:ce:
08:9f:01:24:53:c4:5b:56:e1:2a:8a:c0:a9:4f:10:
fb:8e:d4:87:ae:a2:68:ab:dc:bd:ea:13:6f:8c:6e:
9e:9d:76:35:60:dd:ff:80:45:7e:b3:54:0d:12:d8:
f8:ae:ab:6a:d3:f5:aa:31:da:85:91:83:a9:d8:1e:
a8:c4:8c:16:a8:8d:8c:52:14:83:da:b2:13:fd:5e:
43:53:31:48:88:2d:ad:dc:b6:47:3a:14:ba:26:97:
86:23:5a:58:bd:40:80:87:9b:f2:2f:58:eb:b5:d1:
df:ed:e0:15:b3:c6:b5:63:91:b9:6e:0b:7b:68:4b:
4d:42:8f:ee:79:f7:0b:56:bd:20:f7:06:3d:2d:c8:
00:d3:f0:32:5e:67:c5:a6:9f:70:af:bc:9d:89:b8:
7c:1f:54:eb:91:9a:66:02:79:22:58:f7:83:02:38:
46:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:CB:7E:A4:87:9E:62:55:04:66:E6:B6:84:A5:55:9E:44:14:B1:55
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Bct-pIeeYlUEZua2hKVVnkQUsVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8d:fa:21:35:c6:a8:fc:55:7e:8b:6b:63:a3:5e:fe:4e:95:07:
f3:b5:fa:09:af:bf:b5:2c:36:10:1b:64:60:2b:d0:70:e6:3a:
6d:60:32:d0:f7:60:41:21:cd:5e:3d:81:d2:f0:f3:be:d9:fe:
ad:9f:2a:8a:65:75:1e:c7:87:24:e1:c6:d0:db:c1:63:cf:a7:
2e:c5:a3:e2:3f:b8:b5:40:f0:1e:f2:9a:93:2d:e9:90:e2:a0:
40:cf:0b:78:d3:88:3d:f6:57:3e:e5:11:61:fb:f3:b7:ed:d0:
f5:96:ff:c0:68:24:6e:5c:4f:9d:ec:47:7d:c9:f2:21:ff:2e:
c3:a1:1d:b9:2f:da:2f:8c:e4:f9:90:59:69:ac:18:65:cf:e1:
f7:cc:98:98:9b:7f:8c:32:61:fb:4a:82:68:72:36:a8:ff:7b:
20:07:bd:0d:e6:59:66:56:16:dd:c3:e5:73:78:07:21:ce:15:
20:42:db:fb:1f:2a:1a:90:96:b8:b9:14:b7:ae:bf:a1:3c:03:
32:a5:20:82:e5:e2:f2:b0:f8:88:74:af:fe:22:24:37:3a:61:
88:f2:c7:e7:5b:0d:99:d2:0e:2d:b6:e8:8e:a1:c6:da:f6:d2:
7f:29:51:61:83:0f:be:b7:54:2f:a6:74:4b:ff:49:29:f3:a6:
96:ef:80:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 22:25:28 2025 by rpki-client