Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bwIXPAycRJNBsX93g-VtuwDmDD4.roa
File: bwIXPAycRJNBsX93g-VtuwDmDD4.roa (raw, json)
Hash identifier: leRgBiN7Hh1bBDDxkqfaE53CCiEfSjU43iY/3WoQTOk=
Subject key identifier: 6F:02:17:3C:0C:9C:44:93:41:B1:7F:77:83:E5:6D:BB:00:E6:0C:3E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018931F9A235A1EF5DAA6411A16CDD3EA7B3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bwIXPAycRJNBsX93g-VtuwDmDD4.roa
Signing time: Fri 07 Jul 2023 20:09:50 +0000
ROA not before: Fri 07 Jul 2023 20:09:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:31:f9:a2:35:a1:ef:5d:aa:64:11:a1:6c:dd:3e:a7:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 7 20:09:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f02173c0c9c449341b17f7783e56dbb00e60c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:62:b1:46:bb:81:ca:84:02:de:85:48:03:68:
d3:cc:b2:5f:a1:61:28:6e:ed:38:27:82:fa:98:34:
81:f9:7e:7b:6a:31:c3:66:74:19:c9:2a:23:48:aa:
31:27:aa:ac:91:7a:38:ca:a7:4d:f8:b5:de:9f:0c:
1b:89:60:ff:b3:c4:ec:66:b5:f6:33:75:23:59:29:
46:e8:14:cb:1c:32:96:1b:55:e8:4d:ee:30:f9:e7:
e8:62:64:0a:3f:c3:d4:80:f6:76:f5:50:25:ae:6f:
cd:7b:86:39:a7:bf:1f:ff:0c:59:e6:43:69:88:22:
17:59:27:99:6c:40:e1:03:23:fa:22:c0:d5:dc:37:
9e:37:e0:ef:12:28:10:5c:2d:31:14:b7:b1:4e:6d:
33:48:a1:63:0f:2d:61:a7:b5:66:0d:f3:c7:c2:09:
79:c1:86:3f:97:fe:86:53:c6:d7:f8:9c:58:2f:95:
c9:22:23:bb:47:5a:10:3d:7f:16:6f:04:f1:24:d6:
b1:39:72:4a:4d:a0:9e:0d:ee:6b:09:90:b0:73:4a:
62:a9:8d:fd:47:92:bc:a6:fa:b1:0b:05:fe:c1:69:
2b:99:9a:7f:fd:f3:b7:bf:e9:22:ed:57:ed:6a:19:
b3:8e:7d:9a:94:33:e6:bf:1c:dc:09:cf:68:01:b4:
0b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:02:17:3C:0C:9C:44:93:41:B1:7F:77:83:E5:6D:BB:00:E6:0C:3E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bwIXPAycRJNBsX93g-VtuwDmDD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
93:b3:0b:02:74:81:35:64:1b:78:f5:e1:0a:1b:a7:e8:8f:c7:
b8:53:d7:ec:46:d0:17:96:46:df:60:1b:df:ce:d0:61:3a:2f:
40:63:ed:f5:c0:8c:dd:dd:72:f9:f1:34:95:ec:ce:ed:68:d4:
1e:a8:24:27:9a:6c:e4:8a:cd:2e:95:0a:4a:cf:54:ea:f8:d8:
fd:cb:48:69:dd:a7:a6:27:2b:3c:53:de:18:3c:43:2a:26:75:
c9:a5:70:72:57:9a:44:a3:c2:80:70:28:6f:30:12:3e:5a:f6:
70:5b:ae:11:87:a2:2e:b6:09:5b:19:9f:66:7c:27:25:cf:8c:
78:96:af:2f:5c:89:18:14:56:5c:27:7b:44:3b:ec:d0:68:d2:
d4:11:4f:f5:b5:c1:ef:95:9d:7e:15:a3:9f:95:34:b2:85:34:
0b:45:cb:4a:6a:0f:ac:ea:e4:51:a2:7c:53:b8:20:a0:e8:99:
47:95:81:6c:5f:16:fc:0c:22:7a:6a:93:5a:23:5f:75:5a:89:
e0:90:78:87:2a:3f:58:12:40:b6:a6:67:c3:c8:07:7a:7f:5b:
bd:43:8e:b5:e6:7e:4a:47:0c:7d:5b:45:e5:b1:92:91:39:67:
0c:40:f0:77:ff:e2:aa:46:3d:66:2e:e4:9e:02:d2:43:0f:50:
84:c7:d1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 14:53:14 2025 by rpki-client