Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BtvSFPo1R0EAuxD1pr0fkrdwKXg.roa
File: BtvSFPo1R0EAuxD1pr0fkrdwKXg.roa (raw, json)
Hash identifier: AscUbhUktNO776e6VLVlbT10zP9A+xdU/BoVJBy3GVs=
Subject key identifier: 06:DB:D2:14:FA:35:47:41:00:BB:10:F5:A6:BD:1F:92:B7:70:29:78
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8CAE4C40
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BtvSFPo1R0EAuxD1pr0fkrdwKXg.roa
Signing time: Tue 14 Jun 2022 15:08:44 +0000
ROA not before: Tue 14 Jun 2022 15:08:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:56ba:5b78/128 maxlen: 128
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2360233024 (0x8cae4c40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 14 15:08:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=06dbd214fa35474100bb10f5a6bd1f92b7702978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:44:ad:df:04:db:ac:9f:cd:b7:06:bc:3e:7e:
92:d3:1f:fc:1e:b5:27:71:a4:9d:b3:9b:b5:dc:4e:
cf:5d:6c:50:c5:12:bb:b9:ed:99:2d:de:a6:13:76:
1f:7f:84:de:b5:60:f0:7f:ee:39:cb:0d:71:4d:67:
e4:e1:9e:ac:92:1e:0a:34:62:31:cd:ec:29:f6:93:
5f:a8:f5:62:26:a3:4b:90:b6:e9:64:e1:bc:85:06:
76:f0:88:ae:16:0c:0c:3c:f3:30:de:66:0e:3c:23:
cb:27:56:5a:96:d1:58:69:d7:5d:89:e4:6c:9b:d8:
b6:aa:f5:2c:7f:31:0a:05:92:04:cd:cd:45:d4:c5:
be:15:1d:e5:48:69:5d:ab:44:71:19:36:49:eb:32:
85:65:22:d8:7d:91:27:33:ec:db:41:9f:4e:9e:7a:
47:eb:95:cc:4a:1b:e2:90:a5:27:56:62:e5:d6:e9:
99:e6:22:02:61:6d:56:61:04:d5:8e:46:88:46:82:
1c:a5:87:20:db:b2:56:28:c6:96:a9:c2:f8:4f:f1:
90:d2:b3:e4:16:c6:95:d1:bc:6d:67:d7:db:c9:c6:
8c:53:24:b4:4b:0e:8b:86:8b:2f:61:13:7b:c7:2e:
a0:19:0d:ff:dc:f5:a4:72:59:6c:03:1a:2c:ea:4d:
77:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:DB:D2:14:FA:35:47:41:00:BB:10:F5:A6:BD:1F:92:B7:70:29:78
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BtvSFPo1R0EAuxD1pr0fkrdwKXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
07:ca:3b:8f:b5:9f:d2:ba:3f:97:92:b5:5b:ba:b6:5a:be:51:
31:57:43:85:1f:cd:60:a7:d6:7d:5f:57:14:b0:00:f7:0e:2a:
b6:d2:09:39:f1:0a:7c:49:0e:0d:6a:f5:a7:e0:7e:ed:fd:d1:
38:65:80:56:10:1e:05:c1:20:20:f6:8f:aa:59:ea:8a:00:52:
b9:b8:5a:fc:21:c9:06:88:7f:33:5a:ec:a0:29:f7:4d:c2:28:
74:7c:5e:a1:cc:58:50:7b:53:88:13:06:61:b4:fe:f7:e4:ce:
f9:f2:24:f8:ba:19:a8:64:9d:e8:5e:58:12:f0:c1:17:f2:9a:
f3:d8:46:9a:b5:b5:f3:f3:26:8c:33:cd:9a:97:ec:ed:1e:37:
96:34:ae:44:36:8b:d5:13:b5:3c:0b:e7:c5:5c:ec:64:66:5d:
71:28:08:d6:5a:e1:2a:de:86:ca:f8:df:c3:96:22:16:3c:69:
9a:e3:1a:bf:7c:a0:fd:6d:fb:7e:e5:e8:b4:1b:1c:c7:c8:62:
16:8c:bb:79:8d:e7:78:f1:52:05:0c:88:dd:5d:ac:ec:b8:6a:
90:55:db:93:9b:9f:a0:c1:68:7a:2f:fd:78:e7:fd:05:89:86:
9f:7d:f5:5a:13:45:02:9e:10:24:52:92:85:7a:8e:f8:f0:cb:
08:c4:41:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 08:54:09 2025 by rpki-client