Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bwXuc9d1_4a5Pigbhhay6tiJRDc.roa
File: bwXuc9d1_4a5Pigbhhay6tiJRDc.roa (raw, json)
Hash identifier: RE68mEXfD8zKyzeQfFBjA99cr9ohqI01R0FHDu0pHP4=
Subject key identifier: 6F:05:EE:73:D7:75:FF:86:B9:3E:28:1B:86:16:B2:EA:D8:89:44:37
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184DC9822E35CE4F9798A3CA142A4C40BB7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bwXuc9d1_4a5Pigbhhay6tiJRDc.roa
Signing time: Sun 04 Dec 2022 10:04:28 +0000
ROA not before: Sun 04 Dec 2022 10:04:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:dc97:f6f1/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:dc:98:22:e3:5c:e4:f9:79:8a:3c:a1:42:a4:c4:0b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 4 10:04:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6f05ee73d775ff86b93e281b8616b2ead8894437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d5:97:c6:f8:23:5a:6e:2a:2a:46:b0:05:07:
02:27:70:a5:13:81:99:25:47:44:e0:37:25:db:c8:
b0:24:32:04:a9:7a:96:4c:11:d9:81:73:af:cb:17:
c6:e9:d5:b9:87:5a:73:0e:f0:53:6a:b0:f1:4b:56:
a9:ea:90:b0:20:4b:fb:6a:19:a6:1c:9f:75:d8:10:
0d:56:52:7a:c7:ea:db:94:8c:11:be:6e:38:aa:33:
7c:26:a4:48:a0:f1:fa:d9:cb:37:be:38:62:01:82:
11:15:0e:e8:25:ae:58:78:1a:d7:55:4a:03:ea:3e:
c1:9d:2d:ff:98:18:94:5c:bc:2f:08:6c:ac:16:ef:
2c:23:27:8c:7c:a5:0c:59:cd:a9:10:13:77:ce:d1:
07:7e:7c:67:d9:7e:f4:a8:f8:93:7d:c8:96:33:ec:
9f:0a:cc:26:c4:d7:55:bb:68:57:88:72:63:f8:11:
32:c3:44:80:bb:44:0d:7f:a1:7e:0f:6a:fc:75:64:
ad:17:10:d7:3a:ad:ce:28:f5:cf:97:b9:7a:f6:1b:
e6:6b:c6:a4:89:40:bb:fc:63:bb:9d:b6:ca:e2:4d:
79:cb:72:56:61:e3:a9:c6:1d:94:0a:64:97:7d:8d:
47:57:57:cb:74:18:43:48:35:e5:89:ff:e4:2d:6f:
5f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:05:EE:73:D7:75:FF:86:B9:3E:28:1B:86:16:B2:EA:D8:89:44:37
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bwXuc9d1_4a5Pigbhhay6tiJRDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
73:43:e7:3f:8d:1c:ce:f8:36:f4:b1:99:03:03:61:aa:aa:17:
d4:ad:0d:19:2d:ed:37:ea:ac:c8:76:63:ad:7a:bf:16:b3:d8:
04:d8:b8:32:3b:f5:91:cf:5f:85:64:0a:bd:f1:c6:b5:cb:49:
21:ed:39:f3:04:66:21:2e:f7:59:f4:2a:30:c4:35:08:93:b3:
71:6c:99:a3:26:6d:74:3a:03:75:1b:ce:0f:3c:f2:e9:78:b3:
9f:ae:5b:e5:15:01:0c:96:4a:18:cf:e8:d2:eb:aa:0f:5c:0f:
ce:bf:dd:83:4f:0d:3f:0a:ce:86:bc:77:28:4e:ef:2e:68:1e:
ae:dc:97:5d:aa:b7:3a:61:47:aa:b0:db:16:83:0c:95:2b:0f:
46:cf:0c:9d:d0:d5:2a:ee:2e:2e:b5:0d:c8:75:0b:24:0a:cf:
55:1a:6a:2f:27:56:8e:ad:6c:65:05:5f:33:cd:95:a3:d6:f0:
2c:a3:48:ac:f1:fe:ef:63:26:e3:58:23:81:c7:35:d7:de:5c:
b0:6a:f0:10:78:ff:fa:5d:42:df:ec:b3:01:73:e7:1d:79:a3:
cd:76:32:1d:4d:09:50:9a:13:48:44:aa:f9:5e:51:1c:d4:32:
21:75:b0:d1:47:fb:15:68:4c:09:0b:53:be:30:48:ee:40:86:
50:83:35:a2
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYTcmCLjXOT5eYo8oUKkxAu3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjA0MTAwNDI4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZjA1ZWU3M2Q3NzVmZjg2YjkzZTI4MWI4NjE2YjJlYWQ4ODk0NDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNWXxvgjWm4qKkawBQcCJ3ClE4GZ
JUdE4Dcl28iwJDIEqXqWTBHZgXOvyxfG6dW5h1pzDvBTarDxS1ap6pCwIEv7ahmm
HJ912BANVlJ6x+rblIwRvm44qjN8JqRIoPH62cs3vjhiAYIRFQ7oJa5YeBrXVUoD
6j7BnS3/mBiUXLwvCGysFu8sIyeMfKUMWc2pEBN3ztEHfnxn2X70qPiTfciWM+yf
CswmxNdVu2hXiHJj+BEyw0SAu0QNf6F+D2r8dWStFxDXOq3OKPXPl7l69hvma8ak
iUC7/GO7nbbK4k15y3JWYeOpxh2UCmSXfY1HV1fLdBhDSDXlif/kLW9fBQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFG8F7nPXdf+GuT4oG4YWsurYiUQ3MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvYndYdWM5ZDFfNGE1UGlnYmhoYXk2dGlKUkRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHND5z+NHM74NvSxmQMD
YaqqF9StDRkt7TfqrMh2Y616vxaz2ATYuDI79ZHPX4VkCr3xxrXLSSHtOfMEZiEu
91n0KjDENQiTs3FsmaMmbXQ6A3Ubzg888ul4s5+uW+UVAQyWShjP6NLrqg9cD86/
3YNPDT8Kzoa8dyhO7y5oHq7cl12qtzphR6qw2xaDDJUrD0bPDJ3Q1SruLi61Dch1
CyQKz1Uaai8nVo6tbGUFXzPNlaPW8CyjSKzx/u9jJuNYI4HHNdfeXLBq8BB4//pd
Qt/sswFz5x15o812Mh1NCVCaE0hEqvleURzUMiF1sNFH+xVoTAkLU74wSO5AhlCD
NaI=
-----END CERTIFICATE-----
Generated at Mon Jun 9 04:22:20 2025 by rpki-client