Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BuP_0LrPAl0tJczF4D1la0cZSjc.roa
File: BuP_0LrPAl0tJczF4D1la0cZSjc.roa (raw, json)
Hash identifier: z4YP2czWZiiOwGHdkJaKkqU083Up+yWwSn8yrx+k2sE=
Subject key identifier: 06:E3:FF:D0:BA:CF:02:5D:2D:25:CC:C5:E0:3D:65:6B:47:19:4A:37
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185F3241BCC2D5145DA525639CB18F91A91
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BuP_0LrPAl0tJczF4D1la0cZSjc.roa
Signing time: Fri 27 Jan 2023 12:11:47 +0000
ROA not before: Fri 27 Jan 2023 12:11:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f3:24:1b:cc:2d:51:45:da:52:56:39:cb:18:f9:1a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 27 12:11:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06e3ffd0bacf025d2d25ccc5e03d656b47194a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:20:ce:a5:3d:45:c5:8b:9a:c6:ec:14:cc:cf:
3b:4a:7d:ff:bf:cc:68:c0:90:fe:2c:73:ff:8d:99:
80:d9:40:aa:1e:f2:4a:16:0f:a0:15:db:39:bf:73:
fd:3a:1a:f1:b5:64:74:80:53:97:84:ef:e0:a2:44:
68:ae:e0:7c:24:6e:34:de:fe:7c:1d:67:8b:38:1a:
59:9e:8c:0c:43:7b:cb:2d:95:05:62:1e:5a:08:18:
cd:9c:b0:c5:ae:3d:38:cc:2d:aa:0a:b2:fe:c3:1e:
01:70:79:5f:16:8f:bc:b0:e4:88:4c:7d:39:e1:97:
dc:a8:1f:7e:fa:dd:88:1e:d4:8e:7c:0f:68:42:71:
1a:d3:fb:e7:9b:69:8d:90:9d:66:5a:1a:6e:ea:30:
aa:ee:24:e9:8d:19:73:c4:cb:ab:d6:8a:ad:b6:16:
dc:ef:a3:1e:72:14:a2:e1:82:79:07:5b:20:2a:d1:
56:4d:73:51:b2:ab:1e:0b:3a:69:01:c6:1f:89:eb:
7b:22:25:61:ae:3c:1e:50:86:ab:3e:35:8a:de:a6:
28:89:6a:1d:56:af:f2:d7:03:f5:72:ec:fa:8e:81:
96:aa:8a:f7:e6:71:99:19:39:25:b4:69:ef:a3:22:
9c:14:ba:b5:87:04:94:6a:45:50:a8:fd:4c:c0:e2:
c7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E3:FF:D0:BA:CF:02:5D:2D:25:CC:C5:E0:3D:65:6B:47:19:4A:37
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BuP_0LrPAl0tJczF4D1la0cZSjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a0:df:d2:16:48:09:38:96:3e:fb:93:a3:73:6f:a8:67:1f:45:
67:6e:ab:8d:ce:fc:a2:9b:18:42:61:28:5b:73:e6:93:5e:32:
95:1c:38:a8:86:5e:23:da:5e:8b:58:a8:53:1c:e3:96:88:b7:
47:3d:20:50:ee:35:bc:a1:40:ca:7a:1d:19:b6:e6:8c:79:6e:
e4:12:9d:2b:96:16:19:0f:92:7a:48:9a:9f:51:63:2c:6c:26:
56:20:75:9d:13:a5:a0:df:1c:c5:9f:07:b4:9e:10:ea:64:ad:
12:09:75:b5:6d:46:d0:2e:1c:23:1d:21:59:67:61:12:d7:84:
19:4e:e2:a1:3f:1a:61:db:2c:e4:91:03:74:da:4c:d0:e2:1f:
5e:0e:68:d1:7c:c1:fe:87:9a:18:b9:ac:f5:5b:a1:7f:ac:e6:
87:4d:90:23:10:6b:81:8d:18:da:07:9c:6b:78:f7:f3:e4:88:
e5:ef:ec:60:d4:93:45:91:b5:80:60:67:8f:ba:1e:ee:f3:8c:
94:e0:3f:1d:f1:c6:f4:45:cd:f3:19:b7:13:03:eb:06:c0:66:
11:69:01:61:ab:06:1f:0b:56:31:de:5a:4a:dd:18:07:3c:b9:
08:48:64:5d:95:8e:20:83:e7:05:61:c9:8f:c1:53:11:c4:fb:
71:0e:f8:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:20:32 2025 by rpki-client