Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Bf4W6mvnIDytE-Lu4q71lnWsvS4.roa
File: Bf4W6mvnIDytE-Lu4q71lnWsvS4.roa (raw, json)
Hash identifier: 51QdOWjRrZj4aV796qUPdXHPyGQ6rfFiR/HaRDdayDI=
Subject key identifier: 05:FE:16:EA:6B:E7:20:3C:AD:13:E2:EE:E2:AE:F5:96:75:AC:BD:2E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 81CE9EAD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Bf4W6mvnIDytE-Lu4q71lnWsvS4.roa
Signing time: Sat 07 May 2022 01:09:34 +0000
ROA not before: Sat 07 May 2022 01:09:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2177801901 (0x81ce9ead)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 7 01:09:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=05fe16ea6be7203cad13e2eee2aef59675acbd2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b7:7e:57:22:61:2a:7e:69:ed:24:7e:77:0a:
8d:20:b9:12:51:22:17:ab:2c:02:97:e7:64:f7:19:
a6:4f:16:8e:95:4a:c3:88:9d:81:6e:7d:54:00:c4:
6a:48:af:31:cf:c4:79:5a:bc:20:84:b9:04:ae:f9:
fe:ec:8a:27:31:81:f4:53:0e:7a:de:5c:f7:72:1e:
d7:13:21:b3:87:c1:99:ad:ec:62:8c:bf:a2:4d:84:
3c:95:5d:c8:da:c5:8f:c4:59:b7:4d:63:0f:94:d9:
85:1d:37:88:44:5a:2f:ec:a1:03:83:86:47:79:84:
d3:c0:f6:17:08:c9:1a:42:bf:c7:ec:a9:6f:77:8a:
e9:87:ab:c9:c4:e3:dc:d4:77:35:28:fe:07:c7:0d:
bb:2c:57:49:5f:0e:4f:3b:e7:15:0f:26:2f:e4:fc:
26:1d:0d:63:8c:c7:90:f5:ca:30:37:db:60:42:b3:
97:d2:dc:ee:38:f5:65:0d:fd:be:57:3e:ed:a7:f1:
59:ad:69:78:82:07:1f:1f:03:86:0d:30:ff:2d:23:
b7:95:33:2d:de:27:61:3c:12:0c:b8:bb:85:d2:25:
c9:02:6f:57:e0:0c:ba:2a:14:37:c1:00:fd:b0:be:
85:4b:bc:ee:75:91:28:9c:50:6b:61:e4:e8:f1:33:
db:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:FE:16:EA:6B:E7:20:3C:AD:13:E2:EE:E2:AE:F5:96:75:AC:BD:2E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Bf4W6mvnIDytE-Lu4q71lnWsvS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
45:f9:31:4e:22:fa:a8:93:c6:07:17:4a:e6:b9:7b:f2:d3:d9:
51:a8:bc:6e:1b:5b:55:d7:ec:7f:01:97:d8:d6:19:ac:ff:4b:
aa:9b:9c:bc:79:a3:ee:7f:c6:44:2e:6f:fd:38:27:29:f8:07:
b8:c6:2d:06:90:3e:17:66:47:32:42:0a:84:77:a3:d9:42:5d:
6e:56:3c:e3:da:e1:fa:64:1c:44:b7:45:25:2b:af:9b:86:3e:
52:5b:c1:9e:ad:99:fd:4e:2e:9c:fd:5a:37:ff:f4:b4:36:76:
68:08:23:08:15:ea:4a:00:82:a0:ca:4b:cc:06:5f:d4:bb:ca:
bc:fd:9b:9b:7b:28:95:79:52:3e:f3:2e:4d:f2:c7:d2:66:f4:
51:d6:c9:a6:29:1e:c5:b0:29:a2:47:c0:44:d9:2e:90:f6:0f:
67:b2:cf:22:c1:24:f2:3a:7c:e1:14:1f:71:c2:b5:c5:af:20:
98:36:a6:8b:20:66:62:55:d9:07:73:6c:bc:5a:0f:db:5d:7e:
0d:4b:91:25:f9:4a:d4:bb:53:70:24:b3:16:1b:61:48:33:d4:
bd:96:98:78:5a:fc:4f:e2:f2:4c:6b:cf:6f:4d:57:83:d3:08:
64:ab:7e:4c:79:7d:c4:f2:93:81:7c:b1:c2:4f:0f:54:11:e0:
c1:ca:32:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 15:26:14 2025 by rpki-client