Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BEODVr_OQ6JoWpJ0qOz_jC-25f8.roa
File: BEODVr_OQ6JoWpJ0qOz_jC-25f8.roa (raw, json)
Hash identifier: a6sApr4mKwkSs/Eb2/2di9BBt5VMClyw0SuDJwg/oRQ=
Subject key identifier: 04:43:83:56:BF:CE:43:A2:68:5A:92:74:A8:EC:FF:8C:2F:B6:E5:FF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 70723850
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BEODVr_OQ6JoWpJ0qOz_jC-25f8.roa
Signing time: Mon 07 Mar 2022 09:10:55 +0000
ROA not before: Mon 07 Mar 2022 09:10:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1886533712 (0x70723850)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 7 09:10:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=04438356bfce43a2685a9274a8ecff8c2fb6e5ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:75:4b:63:b4:91:51:2b:e4:7c:fa:af:d0:e1:
a2:2e:80:4e:bc:a7:ad:04:22:82:53:09:ed:95:b7:
a5:5b:ea:13:c9:68:c1:fd:42:89:fb:99:ae:e0:67:
6f:35:cf:51:b0:32:6f:f5:b6:af:a2:df:9b:f3:79:
74:1a:e2:42:1e:93:6f:b7:4f:85:16:24:bb:0e:6f:
26:56:c3:16:41:7b:b7:ae:8f:3c:96:41:25:30:f3:
11:27:52:60:97:91:56:e5:16:ad:1c:08:8c:1e:bd:
ba:ff:6a:ae:37:80:db:f7:a6:1d:de:4d:ae:08:9b:
d7:81:bb:c8:3a:d3:f3:e1:a2:5c:2d:22:1e:8e:65:
36:b8:f7:d3:46:a1:26:74:7a:5c:66:36:5a:58:34:
1a:84:fb:c1:89:65:fd:3a:4b:c7:31:9d:fa:a1:58:
f1:8f:32:6e:9d:0f:09:db:76:6a:3c:ed:af:30:aa:
dc:09:91:6d:ca:a3:51:41:5a:18:99:e9:e4:01:a8:
b7:b6:b8:47:2e:21:aa:a4:62:77:68:fc:41:cd:32:
25:a4:c4:29:65:b0:d3:3d:db:f5:f7:da:bb:46:f9:
b2:4c:ca:13:5f:52:a8:c7:22:29:3c:bd:85:da:85:
5e:fa:e5:04:95:6f:f7:dc:d5:b4:7d:c1:5b:96:e5:
77:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:43:83:56:BF:CE:43:A2:68:5A:92:74:A8:EC:FF:8C:2F:B6:E5:FF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BEODVr_OQ6JoWpJ0qOz_jC-25f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1a:55:ca:b4:f8:f7:11:5a:52:57:2c:6d:bb:88:1f:38:b5:03:
fd:51:99:d6:e2:ba:15:7b:84:6f:5c:3f:9d:a8:c2:14:4a:dc:
d4:a6:ef:f7:d4:37:08:1d:ef:4b:55:25:45:6b:09:d7:52:6e:
53:e4:b2:f6:c3:2b:df:c6:30:84:be:9f:95:ac:43:da:a5:26:
bf:b7:2a:55:70:90:74:f4:a9:2c:d1:d2:8e:fd:c5:e5:df:3a:
0d:5f:80:a3:82:04:db:59:8c:19:27:58:49:a4:80:15:24:ce:
32:f1:9a:2a:5c:93:01:70:77:ac:e3:f2:1e:fc:cd:0c:3e:d6:
e7:e6:07:7c:ed:bf:2f:08:22:4c:d3:98:03:f7:34:08:54:b2:
66:92:38:75:d3:87:04:58:05:df:39:a0:8d:ff:52:35:83:46:
e7:76:ca:ad:24:13:a0:35:c1:11:94:4f:ad:d4:8d:06:ed:01:
9b:20:43:8c:a9:c0:9e:6b:cd:69:51:e2:5a:d7:41:91:53:5c:
49:c9:c3:91:37:eb:bc:b0:1f:d2:b2:ef:21:94:90:2b:d9:48:
30:f6:c0:22:ec:11:a3:9f:db:d8:58:24:b5:2f:7a:05:ec:6e:
45:c8:6b:7d:d3:ec:10:a1:a9:0c:17:d8:7f:68:92:2b:2b:f0:
4f:24:67:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:49:00 2025 by rpki-client