Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Bq7jwO4NJt9iTiB_N1WaqXk-ZxY.roa
File: Bq7jwO4NJt9iTiB_N1WaqXk-ZxY.roa (raw, json)
Hash identifier: NS6ICoTFvI2eVq6jtBzXp+1WZE8JoFElzOR0Hg02YxM=
Subject key identifier: 06:AE:E3:C0:EE:0D:26:DF:62:4E:20:7F:37:55:9A:A9:79:3E:67:16
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187846543158FA0D307183EC0847E475D8A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Bq7jwO4NJt9iTiB_N1WaqXk-ZxY.roa
Signing time: Sat 15 Apr 2023 10:10:41 +0000
ROA not before: Sat 15 Apr 2023 10:10:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:84:65:43:15:8f:a0:d3:07:18:3e:c0:84:7e:47:5d:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 15 10:10:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06aee3c0ee0d26df624e207f37559aa9793e6716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:bb:7a:27:18:19:fc:ec:6a:3f:45:53:d1:bb:
e4:58:60:e4:c7:46:3a:af:6c:a3:fb:e3:be:ac:ea:
ee:17:ee:66:38:4e:2c:35:3e:9d:c8:94:5b:3f:0e:
4a:cc:ed:93:b9:10:ff:40:d5:7b:cf:fa:90:86:54:
58:0f:54:31:11:12:f2:92:ef:0d:8f:5e:56:71:16:
a2:cf:75:fc:cb:4b:3e:9b:c7:e1:ca:af:1b:2f:6e:
db:4a:0b:e0:88:ce:de:cd:c0:72:ee:94:e3:d5:7e:
7f:55:10:40:de:71:8f:ba:6f:e1:41:6b:51:27:4e:
df:ee:9a:ff:0f:5e:18:d6:38:67:b7:88:d8:1a:3c:
24:df:e8:22:bc:b7:7d:b6:ab:8b:1a:60:3d:3e:8c:
3b:d2:bc:f0:0d:f0:ef:13:ab:a7:d8:31:b9:52:97:
fb:05:d8:b6:7f:56:4d:e4:2c:a3:21:f4:bd:9d:1d:
b6:11:e3:0a:c7:67:45:17:dd:a2:50:d9:97:ac:1c:
7d:92:f2:86:53:04:66:52:6b:35:d6:cc:e0:bd:83:
5f:ad:d8:60:30:3f:1f:45:7d:fe:2a:7a:90:8a:1d:
c4:55:bc:9a:e4:17:d2:e0:a1:88:18:c9:c9:8f:b2:
5d:52:48:8e:34:82:47:16:2a:69:e6:19:ca:33:24:
54:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:AE:E3:C0:EE:0D:26:DF:62:4E:20:7F:37:55:9A:A9:79:3E:67:16
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Bq7jwO4NJt9iTiB_N1WaqXk-ZxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1e:cc:9b:2a:95:6b:ca:a3:f4:6c:cc:04:1e:7c:74:20:b9:29:
7a:15:1e:ca:51:87:32:02:4f:a4:ab:70:55:20:50:e8:c1:24:
2d:f9:0d:fb:ef:8c:e0:de:1b:9d:37:73:a1:fa:8e:5c:0b:c6:
dc:fb:6e:d0:23:ae:da:2b:54:e5:e5:eb:e9:42:9a:5f:06:d1:
10:53:31:73:46:eb:49:98:ba:90:7f:24:27:d5:a1:f1:f6:c0:
04:c9:12:e4:92:fa:ab:fa:ae:66:6c:d0:02:bd:1c:67:a5:f5:
4c:f1:96:03:2c:65:fc:b2:78:5d:41:f2:5d:85:c3:04:03:62:
f8:77:e3:58:d6:8e:3d:8c:60:bd:9b:30:15:25:ed:09:04:36:
d7:f5:39:bb:1b:1c:23:3d:91:58:2d:f3:26:27:19:83:02:d2:
c5:9e:41:28:0e:f8:64:08:fa:8d:05:e2:62:03:0d:69:54:65:
02:93:7c:38:1d:d3:c7:55:ed:da:2a:c1:6d:94:8e:24:af:94:
c4:11:67:ee:39:93:7b:73:8c:f2:1a:cb:8e:16:32:f5:a3:f2:
4e:a2:ec:18:ca:9d:d7:07:59:48:be:4b:d6:c8:0b:c6:ee:d7:
0b:36:1e:99:2a:1a:d6:6b:52:ae:a5:4e:a6:3f:95:9b:2b:83:
5c:79:3f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:54:22 2025 by rpki-client