Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/bwrhi855V6CGL8C8JSRNQ_a98nM.roa
File: bwrhi855V6CGL8C8JSRNQ_a98nM.roa (raw, json)
Hash identifier: M8qn+PLgH0Zo01ADwSTTEMRFbyvn9EYUswDQXCmfB7A=
Subject key identifier: 6F:0A:E1:8B:CE:79:57:A0:86:2F:C0:BC:25:24:4D:43:F6:BD:F2:73
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D3C41F3A66DD26B7055AA01DC994EAD4D
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/bwrhi855V6CGL8C8JSRNQ_a98nM.roa
Signing time: Wed 24 Jan 2024 16:16:11 +0000
ROA not before: Wed 24 Jan 2024 16:16:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3c:41:f3:a6:6d:d2:6b:70:55:aa:01:dc:99:4e:ad:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 24 16:16:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f0ae18bce7957a0862fc0bc25244d43f6bdf273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:77:eb:ba:70:b3:91:b3:a0:9f:99:c5:2f:f2:
87:02:59:51:c5:29:6d:f8:52:47:28:af:0f:97:5b:
2d:9b:53:22:14:89:8f:27:c6:5b:32:c8:90:a5:fe:
9d:26:45:b1:84:5e:f4:fe:75:c9:d4:1d:38:76:1e:
1b:b6:ee:a1:e7:01:b8:e0:92:50:08:ce:35:77:00:
22:e4:26:62:cc:eb:be:53:66:97:72:dc:5a:dc:9f:
71:f8:1b:7e:f0:5d:80:f8:a0:a3:04:dd:4a:2c:45:
01:88:32:d9:77:8a:21:9a:9a:79:37:90:7c:45:7a:
22:99:9b:80:b8:d5:dd:cd:fb:46:4a:ec:fc:95:c8:
be:a5:8e:8f:62:85:34:5a:c1:7a:50:3c:00:d2:3a:
cd:82:5f:b9:df:43:3c:97:a0:1b:cb:e6:9f:e0:41:
7f:bf:55:97:6b:f5:36:4e:06:3d:41:97:e8:58:3a:
2f:83:7f:ed:d1:47:a4:6c:70:d3:e6:c3:f1:44:cb:
d5:06:85:2e:f5:78:97:3b:7d:4e:e3:55:e6:5f:88:
40:ae:1e:df:31:87:7f:0c:11:ed:43:d3:f0:82:8b:
35:9a:38:3a:eb:09:b4:c0:74:02:2a:c5:17:d5:a6:
70:c2:4b:6f:ab:06:8e:66:ec:64:00:6d:43:34:ca:
e5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:0A:E1:8B:CE:79:57:A0:86:2F:C0:BC:25:24:4D:43:F6:BD:F2:73
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/bwrhi855V6CGL8C8JSRNQ_a98nM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5b:a3:5b:09:e6:56:3a:96:22:8c:23:9f:2e:04:7c:c5:6d:9f:
47:70:fc:2b:1d:65:3d:64:18:a1:18:43:1b:c4:0a:2f:b3:cd:
0a:45:5e:6b:11:23:2f:2d:16:be:eb:12:24:f8:fd:6e:77:6a:
1e:e4:0f:a3:f7:92:f9:4d:1b:8d:04:9b:56:63:13:6b:54:03:
56:0f:14:77:5f:3b:7a:90:95:ec:64:a5:2b:be:7d:ac:23:4a:
49:16:e1:8c:88:25:0e:b0:8d:8a:2d:27:22:26:2e:ee:cb:f4:
bc:03:5b:f0:17:d6:ae:e7:86:01:91:93:70:19:3f:bf:e0:e3:
e7:85:eb:88:ea:63:f8:b6:d3:6f:53:ef:5d:35:0d:4c:b8:37:
0b:e2:45:24:7e:ca:44:56:5b:5a:1d:81:6e:a1:bd:70:d4:a0:
45:bb:5d:c3:1e:84:fe:95:59:53:03:b3:a2:2a:f2:48:57:13:
0d:1e:20:af:86:47:59:58:20:dd:a9:9a:35:b8:dc:c6:e6:09:
c6:2a:63:9a:a5:26:ab:5f:ab:0e:68:4c:74:5e:dc:76:9f:82:
eb:e8:1d:f3:e4:fe:22:1e:61:d4:a9:8e:5b:b7:94:36:d2:12:
f8:20:bf:27:30:37:49:a6:5a:fa:7c:e5:99:6c:c5:11:5d:09:
be:3a:b1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:59:36 2025 by rpki-client