Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BkOJQoMAsC7Px7xt3rqGd8WFaDc.roa
File: BkOJQoMAsC7Px7xt3rqGd8WFaDc.roa (raw, json)
Hash identifier: Cw9AeHodZyvHzYGTHlXn/SuVz9W5qiZEMKd0UwzcM0c=
Subject key identifier: 06:43:89:42:83:00:B0:2E:CF:C7:BC:6D:DE:BA:86:77:C5:85:68:37
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185C04B9EE8E72E904625368FDBFB579998
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BkOJQoMAsC7Px7xt3rqGd8WFaDc.roa
Signing time: Tue 17 Jan 2023 15:14:19 +0000
ROA not before: Tue 17 Jan 2023 15:14:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c0:4b:9e:e8:e7:2e:90:46:25:36:8f:db:fb:57:99:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 17 15:14:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=064389428300b02ecfc7bc6ddeba8677c5856837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:28:b0:3d:6b:c6:64:20:1e:7f:39:c4:5a:8e:
c8:9c:9f:9c:8a:1c:cd:9d:98:63:70:d7:a5:a7:1c:
84:f8:47:cc:76:ac:74:ad:6b:f9:ac:ab:ad:c7:18:
9c:07:b0:fc:8c:7a:cd:ed:bb:6d:a6:98:a5:25:9d:
c2:b6:74:d6:b4:20:de:50:ec:58:5c:8d:03:45:c3:
35:67:fa:35:ad:d6:5a:67:de:9a:64:21:ed:1e:a1:
22:50:ee:d9:fd:c2:4b:d5:1a:af:47:3f:ed:55:67:
2e:88:1d:10:ca:de:b7:02:6d:49:fb:64:ba:16:8c:
f8:f9:1e:72:f1:7e:2e:d3:9f:20:dd:af:8e:cc:58:
3e:5a:ba:d8:59:36:d1:84:82:ca:4f:61:d5:0c:69:
05:b5:86:ad:cb:48:77:17:77:fe:cd:c3:c6:49:86:
d5:87:5e:6a:b1:8c:81:66:87:8a:cd:15:33:83:be:
f9:e8:fd:b4:d0:42:bc:8a:f9:b2:d5:e6:ad:a5:77:
70:4a:1a:27:9c:1b:fd:f8:d7:f1:c4:98:43:b6:c2:
80:bd:c8:d3:5a:c8:ed:d6:cd:23:f0:d6:4a:7f:01:
f8:e8:60:e3:ba:1e:f2:8c:b6:a2:0c:17:a3:b3:2a:
11:5b:d0:02:f9:71:da:47:b3:e4:d6:02:c3:c9:28:
be:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:43:89:42:83:00:B0:2E:CF:C7:BC:6D:DE:BA:86:77:C5:85:68:37
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BkOJQoMAsC7Px7xt3rqGd8WFaDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7a:d5:a0:de:de:97:29:71:54:9f:86:1e:bf:b0:f1:1d:ce:03:
28:e9:af:7e:43:b4:e5:ed:0c:13:45:7e:8e:8a:be:6a:bc:49:
ba:72:de:87:d6:2c:b1:17:69:35:be:d4:a4:7f:7c:2e:ea:1e:
e4:5a:ee:ae:94:2b:08:be:69:95:ff:c0:38:60:25:17:28:df:
42:bf:01:97:a5:b4:c6:eb:77:ca:e0:5f:80:fb:03:5d:61:b3:
ea:b9:e9:d7:3e:d1:01:8d:8d:76:df:21:97:3c:40:d8:d1:40:
94:dc:ca:24:ee:17:91:9f:f8:d5:17:18:32:92:1a:22:f0:87:
c8:81:df:72:d1:05:1c:ef:fa:e5:c5:ee:a8:0f:7e:9e:68:24:
87:8f:35:bf:ec:14:1e:47:d1:21:27:36:a3:8d:43:e2:6d:f9:
9b:77:8d:8e:f1:79:75:40:67:95:ee:59:83:11:56:9b:eb:21:
32:13:94:02:be:9d:9b:83:b8:9c:2b:68:ea:c9:6a:f6:91:c9:
45:11:85:35:13:99:ad:6e:a8:d3:f2:4e:ee:a5:b3:e3:68:58:
73:2a:d8:2e:28:70:d3:f6:5d:f7:b0:9c:2b:85:49:26:64:80:
c8:fb:f7:70:e4:0b:df:d6:39:6c:b6:8f:ca:e5:d6:5a:ab:5d:
23:c4:57:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:10:24 2025 by rpki-client