Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/beckKHqShuAn_ZJOcoJEiIPoI8g.roa
File: beckKHqShuAn_ZJOcoJEiIPoI8g.roa (raw, json)
Hash identifier: I8FpAnEoSJeFKP1dPPaA4N8r1RMqSKt1p6XKsCPqmSY=
Subject key identifier: 6D:E7:24:28:7A:92:86:E0:27:FD:92:4E:72:82:44:88:83:E8:23:C8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182A73A586B3FE2690B20E6EB79BE011167
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/beckKHqShuAn_ZJOcoJEiIPoI8g.roa
Signing time: Tue 16 Aug 2022 15:16:35 +0000
ROA not before: Tue 16 Aug 2022 15:16:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a7:3a:58:6b:3f:e2:69:0b:20:e6:eb:79:be:01:11:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 16 15:16:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6de724287a9286e027fd924e7282448883e823c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ba:9b:73:07:43:14:70:5d:a6:c1:38:a9:63:
7f:20:7a:56:1a:f3:b8:5f:5e:e5:1a:95:a6:7a:17:
ed:6a:62:fa:2b:26:57:c1:7a:f5:0e:4a:a8:48:2a:
f2:67:3a:b3:cb:9e:03:c3:57:ff:a5:5c:c0:cc:3b:
c7:ff:88:99:72:c7:fc:bc:32:2f:47:fd:2d:a5:64:
ce:67:d3:91:d9:55:09:a4:1e:81:54:4a:f6:87:e0:
2c:26:2f:00:c4:d5:19:66:70:9c:fe:02:5f:fc:09:
37:9a:f8:b6:f7:d7:fc:ad:6e:af:00:4b:17:86:b1:
ee:e8:b0:a8:ce:f6:be:0d:29:3c:7f:3d:85:8c:60:
80:21:80:90:cc:d1:8c:aa:86:79:07:c4:63:f9:0f:
0a:9c:60:5b:54:a2:ac:60:c1:50:95:5f:ad:1e:7c:
f2:a1:c0:2a:fb:ce:7b:bc:04:9e:be:b8:d6:f5:84:
0e:a1:7b:ad:36:03:77:e6:75:be:67:80:60:d2:87:
86:b1:e8:82:f9:47:87:83:27:91:74:cf:85:42:fe:
a9:1d:20:d3:5c:08:ef:89:c7:5e:4d:19:f1:b4:98:
b7:9f:ad:c1:51:21:80:db:2a:4f:14:fb:a3:c5:14:
e3:da:43:98:57:11:ba:48:d3:ab:43:e2:00:a7:6d:
18:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E7:24:28:7A:92:86:E0:27:FD:92:4E:72:82:44:88:83:E8:23:C8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/beckKHqShuAn_ZJOcoJEiIPoI8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2f:08:12:22:a1:1e:0f:6d:d2:ac:67:fe:28:29:ce:1d:00:1e:
4c:7c:aa:10:0a:8e:a0:d2:4b:fb:59:70:8f:66:db:42:fe:88:
18:85:bf:96:b0:6b:c9:80:a9:76:7b:18:b1:28:45:90:a7:6e:
51:70:07:7d:fc:22:3d:b8:dc:7f:42:00:e2:db:82:3f:32:64:
2c:9f:b9:62:dd:e4:fb:fc:b4:af:f8:6e:29:81:f8:2e:c1:46:
52:9c:fc:41:05:5d:5c:90:3d:43:03:41:ac:ce:06:2e:2b:45:
0f:ce:4b:c6:bd:a1:db:4e:ff:30:a4:2c:2a:66:41:61:81:26:
c2:6c:7b:c7:c6:e0:20:0e:f6:29:5c:c2:de:98:cf:7f:91:f1:
56:6e:bf:ff:fc:69:17:1c:2d:cf:ff:cc:18:b4:02:8d:2f:3a:
40:22:46:78:cf:5b:c9:b3:bd:2d:9f:b8:99:27:7c:f3:d1:ac:
dc:e7:aa:0c:7c:aa:7b:d9:af:70:93:c7:4a:fc:97:ed:75:7b:
69:ec:b8:7f:6f:cb:9e:5b:81:29:f1:45:d8:30:60:45:62:cf:
d1:2d:0c:fe:98:3f:77:84:ed:19:85:d0:64:70:ab:ad:a5:49:
ac:53:58:1a:82:6b:c3:6d:0c:ca:0a:27:42:cd:5d:75:20:10:
75:62:61:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 07:58:18 2025 by rpki-client