Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bsvnhxOtBZydXdvqYGmGb-P_nek.roa
File: bsvnhxOtBZydXdvqYGmGb-P_nek.roa (raw, json)
Hash identifier: SgWhZ1y+Xgf+1vkOuID4T2PuiI5e33WDkN885U0T5oo=
Subject key identifier: 6E:CB:E7:87:13:AD:05:9C:9D:5D:DB:EA:60:69:86:6F:E3:FF:9D:E9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187C7919CADAA9B9B03607E1B45D329FFBA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bsvnhxOtBZydXdvqYGmGb-P_nek.roa
Signing time: Fri 28 Apr 2023 11:13:41 +0000
ROA not before: Fri 28 Apr 2023 11:13:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c7:91:9c:ad:aa:9b:9b:03:60:7e:1b:45:d3:29:ff:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 28 11:13:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ecbe78713ad059c9d5ddbea6069866fe3ff9de9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:5a:c9:35:5e:59:0f:d0:e5:c0:4b:b5:5e:ca:
d9:ed:f3:e4:fc:ac:13:31:14:bd:22:d2:6e:37:4a:
15:31:3b:1e:21:d6:f1:a8:d8:6a:f4:29:63:35:9f:
0b:89:8f:5a:b3:2b:57:ac:31:09:6a:0d:b8:59:6e:
da:ba:49:59:e1:ce:04:31:4d:5d:a7:b4:26:d1:b7:
dd:c4:25:3a:0e:67:d8:6d:5a:2a:ef:5f:4c:0a:d2:
8a:9f:13:a1:ad:c6:25:64:86:ad:e7:f1:5a:90:80:
74:47:f9:02:35:fb:c0:5b:e3:24:71:72:0b:ac:f7:
33:f9:47:fa:2e:73:7b:44:a6:b1:ae:8b:0f:c6:0e:
41:27:ca:2d:3f:99:1e:33:48:63:da:ab:db:eb:38:
db:d6:ef:cc:80:0c:9a:a4:34:24:fe:db:fb:0a:10:
01:42:63:5a:6e:34:4e:e7:42:e6:52:52:a7:a8:93:
69:99:55:c0:02:e8:74:7b:f5:66:d3:14:38:42:69:
69:a5:f3:9d:a8:49:96:6e:c8:a4:26:9f:51:34:c8:
2d:fd:25:62:51:f4:bd:68:73:17:22:96:ef:aa:fc:
19:ed:66:85:83:a9:2b:19:76:28:bf:64:2b:93:66:
fb:78:2a:6e:54:bd:94:3b:08:47:af:4c:2b:b1:67:
44:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:CB:E7:87:13:AD:05:9C:9D:5D:DB:EA:60:69:86:6F:E3:FF:9D:E9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bsvnhxOtBZydXdvqYGmGb-P_nek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7e:90:d8:18:d7:b6:d9:35:ed:fc:c3:ae:89:f4:e1:1e:ac:59:
26:ac:76:2c:a3:47:c1:fd:ab:25:39:4c:57:02:b9:bc:cc:5f:
70:04:4a:89:1d:b8:69:cf:35:fb:a8:9e:d8:6f:3d:33:af:75:
95:a1:a2:90:9e:06:7a:85:8b:15:82:ea:5c:a0:21:1d:f2:f6:
21:f6:9a:b8:bc:86:1b:9f:e2:68:76:ac:d2:c3:eb:57:35:93:
8e:cd:3c:74:3c:5d:73:28:06:67:a3:3b:2f:b0:e5:88:8f:66:
aa:b7:53:5a:c6:9c:52:9c:c5:7f:e4:1d:d2:72:69:c2:36:65:
13:94:7a:52:c0:f3:28:e1:b7:a7:54:be:eb:73:dd:b7:19:3d:
f4:11:ad:cb:fe:38:7c:c0:4a:f9:8c:81:a7:50:7f:47:5d:e8:
0e:0a:a4:51:2d:d9:01:72:d2:d1:74:05:fb:2f:f2:f9:d6:fe:
52:4c:17:34:13:19:a0:06:4d:3d:dc:ba:77:4d:f5:4b:e5:0f:
38:2b:14:d9:67:37:40:a0:3d:1f:d0:0b:e4:dd:84:bc:67:cf:
9a:76:41:74:5c:b9:09:66:bf:85:49:41:aa:e7:af:6d:32:0d:
a9:65:c8:04:7e:4a:1e:6e:25:12:f8:50:04:20:23:18:7a:e1:
6d:4f:83:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 10:47:51 2025 by rpki-client