Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BpF7eIResmpHEhBH079aW-GLLxA.roa
File: BpF7eIResmpHEhBH079aW-GLLxA.roa (raw, json)
Hash identifier: vARg4lo3jINzDnijA7laGGeJ0WBPzFRHigc1dX/w7+8=
Subject key identifier: 06:91:7B:78:84:5E:B2:6A:47:12:10:47:D3:BF:5A:5B:E1:8B:2F:10
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183BE2334A891E7C03CE4E7359B70ACCFE7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BpF7eIResmpHEhBH079aW-GLLxA.roa
Signing time: Sun 09 Oct 2022 19:05:21 +0000
ROA not before: Sun 09 Oct 2022 19:05:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:183:be22:558b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:be:23:34:a8:91:e7:c0:3c:e4:e7:35:9b:70:ac:cf:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 9 19:05:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=06917b78845eb26a47121047d3bf5a5be18b2f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:69:dc:5c:b8:82:ec:88:eb:17:91:1a:ab:85:
7e:68:d0:97:a7:5a:2c:df:91:72:b2:e1:6a:20:2f:
ae:2c:79:e0:75:55:7d:f8:2c:74:80:c8:f8:ef:e9:
30:c0:fb:73:f0:1d:af:68:ab:d7:69:ed:a5:1a:9d:
40:ce:1d:65:89:2a:c7:c8:29:db:cc:1b:65:20:d7:
6e:d5:5b:fb:89:6a:fc:32:ab:63:cc:28:2e:39:a8:
9f:60:4f:97:0e:36:0d:fa:2b:a2:c4:ae:e2:ae:e4:
e2:d7:e3:3d:b8:f1:0d:27:43:df:2d:a8:7c:3d:22:
46:a4:86:6d:fd:b4:41:e5:16:26:e5:a9:f2:d7:9d:
6a:93:d8:6f:d6:3a:3a:de:17:ad:0e:49:67:e0:19:
bc:fd:e9:1b:9d:76:c9:ac:ba:03:03:5b:75:cb:34:
e5:f5:e2:35:5f:28:5f:cc:ee:78:51:cd:1e:b4:3f:
30:94:46:ee:1f:9f:5f:6b:8d:ed:aa:c3:02:c3:20:
73:17:a7:66:e5:6f:41:b5:d9:e0:91:a8:bf:df:62:
80:d8:67:aa:78:fb:6c:d3:ce:e9:8e:d7:3b:aa:b6:
9d:bf:cc:8f:79:61:8e:b8:e2:f0:9a:d1:49:3d:fa:
58:39:98:3e:16:38:08:12:a3:02:4e:16:bc:64:f8:
9b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:91:7B:78:84:5E:B2:6A:47:12:10:47:D3:BF:5A:5B:E1:8B:2F:10
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BpF7eIResmpHEhBH079aW-GLLxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
89:7f:ff:7a:cb:41:4e:e8:ec:f4:5d:33:92:b5:58:6a:e7:71:
86:87:62:b6:17:05:1e:e3:72:ae:d5:37:b1:de:3d:e6:9e:a9:
75:27:75:3b:3f:68:61:32:38:14:af:61:96:f8:b8:3f:2a:6a:
94:7b:aa:5f:83:0b:d0:b1:9d:80:a2:2e:a0:ee:57:0b:03:00:
52:59:ae:93:58:d8:df:b1:a6:5e:e8:a0:4c:f5:8a:e1:92:b9:
cc:c9:70:89:eb:22:29:ba:6e:38:0c:a1:dd:96:9f:9f:74:19:
88:c3:8a:63:c8:5b:59:70:6c:76:0a:37:6e:9b:b3:fa:2c:87:
0f:69:36:16:2b:7d:50:cf:46:84:0e:0b:dd:58:af:39:8a:05:
88:7f:34:85:fe:d6:5d:88:74:32:8f:ce:2e:02:22:c6:45:7f:
7c:80:23:df:a7:61:a1:8d:7a:cf:d8:5c:9f:d4:15:ef:dd:85:
7d:56:55:90:96:a9:59:ae:ff:71:8d:f8:91:ed:1f:37:9e:30:
f4:c8:ab:64:45:f4:74:3c:da:4c:e0:c8:7c:08:bc:3a:62:02:
7c:12:93:46:06:d7:3f:09:58:ab:7c:d1:e3:91:c8:02:da:1c:
e3:ab:41:6d:52:b0:fe:5f:35:01:df:98:6a:c4:1d:df:94:32:
bc:08:e2:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 05:16:44 2025 by rpki-client