Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BDzU55keZpBV1i4OsPHdJY4u0wA.roa
File: BDzU55keZpBV1i4OsPHdJY4u0wA.roa (raw, json)
Hash identifier: XYZQ6myHUcpMdaYSvgGe3dVGXEvSAE3QoWZvU01h+iQ=
Subject key identifier: 04:3C:D4:E7:99:1E:66:90:55:D6:2E:0E:B0:F1:DD:25:8E:2E:D3:00
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01831024DD5C61833143883C0D6C2DBA6767
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BDzU55keZpBV1i4OsPHdJY4u0wA.roa
Signing time: Tue 06 Sep 2022 00:13:14 +0000
ROA not before: Tue 06 Sep 2022 00:13:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:10:24:dd:5c:61:83:31:43:88:3c:0d:6c:2d:ba:67:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 6 00:13:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=043cd4e7991e669055d62e0eb0f1dd258e2ed300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:20:44:a4:37:b0:1a:f7:5a:ee:0e:8a:69:9c:
06:e7:7f:41:06:1e:74:d2:a1:19:20:a7:19:a7:2f:
1d:e8:2e:b4:74:33:7c:07:f5:85:72:46:9a:a7:e7:
aa:d5:34:82:54:f8:a7:f5:9b:0c:1b:a4:3e:9a:e2:
de:12:dc:7f:46:e6:b6:55:69:eb:29:72:dd:21:d1:
d6:86:08:df:fe:3d:ff:fd:04:4d:bb:7a:19:b7:b7:
bc:42:04:78:2c:07:3e:5a:73:69:fb:2e:52:13:95:
d5:4e:33:64:46:c6:99:7c:ea:a9:bc:78:02:93:48:
4c:cf:2e:0f:0f:01:9f:d7:0d:5f:34:85:0a:6a:b9:
1d:f6:f1:b5:b6:08:ed:62:51:b5:b2:64:19:c4:7f:
e5:e0:e8:dc:11:71:bc:0d:85:84:94:c3:b3:88:50:
96:9b:4a:b2:5c:57:4a:e5:3f:46:e3:e2:61:0f:52:
a6:54:86:8e:7a:a3:d8:88:1a:72:3b:66:43:20:f1:
d5:53:08:54:ab:02:de:33:cf:c5:3b:01:23:fe:ed:
76:e8:45:df:8c:76:f1:aa:97:e2:ff:ea:54:dc:b7:
e7:b3:25:b8:9c:61:10:48:51:5c:f4:d6:8a:ea:37:
fb:07:3c:bf:4b:44:d2:3a:e2:df:2e:90:c6:1d:3f:
7e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:3C:D4:E7:99:1E:66:90:55:D6:2E:0E:B0:F1:DD:25:8E:2E:D3:00
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BDzU55keZpBV1i4OsPHdJY4u0wA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
43:1b:8c:be:9b:4a:69:f4:27:03:a0:72:59:f4:e0:6f:7d:26:
67:ef:ea:cf:60:52:4f:b9:15:41:bc:53:24:77:38:ad:c6:bd:
7a:d6:01:89:85:51:8b:09:d1:eb:03:e4:03:83:9c:e5:d4:05:
9d:66:9c:c9:cb:1d:cc:a1:5b:fd:75:2b:dd:77:0b:23:59:0e:
81:01:46:ef:7e:1f:8f:90:b1:23:9d:6c:40:c3:c9:a2:68:df:
6a:e1:a3:77:17:e9:b2:19:d6:20:79:57:e6:41:41:1c:eb:dd:
2c:a5:f7:d7:a0:0d:68:72:1d:39:5f:dd:45:7d:bd:a4:b5:7e:
52:f1:52:fe:10:7c:db:7d:bc:a8:54:c0:ea:17:51:58:01:6f:
54:a7:62:43:8e:05:14:e4:f7:a3:8b:21:b6:d3:73:fa:d7:eb:
99:43:31:e0:3a:61:44:45:8f:f7:3b:b2:e9:aa:65:c7:3e:28:
bb:5c:b6:9e:1c:68:f8:b8:fb:a8:d3:46:e1:2e:b1:0f:c5:b0:
3b:ce:d9:d0:5f:2f:a3:95:ac:6c:ae:d1:7c:5a:ab:42:76:cf:
51:46:a6:aa:60:f3:b9:d9:c7:85:04:63:d1:d2:84:a4:a2:ed:
51:11:67:59:24:9f:95:6c:6d:3f:5f:9e:38:97:6e:98:52:60:
40:f7:c1:5c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYMQJN1cYYMxQ4g8DWwtumdnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwOTA2MDAxMzE0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNDNjZDRlNzk5MWU2NjkwNTVkNjJlMGViMGYxZGQyNThlMmVkMzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSBEpDewGvda7g6KaZwG539BBh50
0qEZIKcZpy8d6C60dDN8B/WFckaap+eq1TSCVPin9ZsMG6Q+muLeEtx/Rua2VWnr
KXLdIdHWhgjf/j3//QRNu3oZt7e8QgR4LAc+WnNp+y5SE5XVTjNkRsaZfOqpvHgC
k0hMzy4PDwGf1w1fNIUKarkd9vG1tgjtYlG1smQZxH/l4OjcEXG8DYWElMOziFCW
m0qyXFdK5T9G4+JhD1KmVIaOeqPYiBpyO2ZDIPHVUwhUqwLeM8/FOwEj/u126EXf
jHbxqpfi/+pU3LfnsyW4nGEQSFFc9NaK6jf7Bzy/S0TSOuLfLpDGHT9+twIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAQ81OeZHmaQVdYuDrDx3SWOLtMAMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvQkR6VTU1a2VacEJWMWk0T3NQSGRKWTR1MHdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEMbjL6bSmn0JwOgcln0
4G99Jmfv6s9gUk+5FUG8UyR3OK3GvXrWAYmFUYsJ0esD5AODnOXUBZ1mnMnLHcyh
W/11K913CyNZDoEBRu9+H4+QsSOdbEDDyaJo32rho3cX6bIZ1iB5V+ZBQRzr3Syl
99egDWhyHTlf3UV9vaS1flLxUv4QfNt9vKhUwOoXUVgBb1SnYkOOBRTk96OLIbbT
c/rX65lDMeA6YURFj/c7sumqZcc+KLtctp4caPi4+6jTRuEusQ/FsDvO2dBfL6OV
rGyu0Xxaq0J2z1FGpqpg87nZx4UEY9HShKSi7VERZ1kkn5VsbT9fnjiXbphSYED3
wVw=
-----END CERTIFICATE-----
Generated at Sat May 3 19:40:00 2025 by rpki-client