Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BF6lY9a5zC5MYOFdMuBjAHRRQEo.roa
File: BF6lY9a5zC5MYOFdMuBjAHRRQEo.roa (raw, json)
Hash identifier: D1NBbRQM6JRVXHQdTV1ToZDlJWoIlEi102w8wcmhY+s=
Subject key identifier: 04:5E:A5:63:D6:B9:CC:2E:4C:60:E1:5D:32:E0:63:00:74:51:40:4A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01876B0DD8B99E26FAD94FEB10958E640B42
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BF6lY9a5zC5MYOFdMuBjAHRRQEo.roa
Signing time: Mon 10 Apr 2023 12:04:42 +0000
ROA not before: Mon 10 Apr 2023 12:04:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:187:6b0d:61ae/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6b:0d:d8:b9:9e:26:fa:d9:4f:eb:10:95:8e:64:0b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 10 12:04:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=045ea563d6b9cc2e4c60e15d32e063007451404a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:82:71:a9:43:ec:8c:8a:63:2f:26:c8:e1:cb:
cd:1c:8e:c5:f6:b2:82:05:7d:83:87:f5:79:9e:88:
1e:63:be:7e:09:20:64:84:23:76:36:d9:b8:be:5a:
d3:6d:f8:5c:41:ab:00:38:0f:c8:22:34:5f:a0:61:
5e:4b:cb:9c:40:6c:a8:2a:9e:b9:be:5e:6f:3a:fe:
f9:41:ab:ae:ee:58:c4:c2:22:dd:76:35:58:ef:d4:
ce:e5:c7:7b:ad:cd:de:b0:13:68:b6:37:75:2e:d8:
1f:5a:b2:b8:80:c0:b6:e6:81:dc:42:98:16:ac:f5:
ec:4a:d5:7a:55:6c:eb:36:f3:9f:7a:af:25:e7:ae:
d0:c9:af:89:52:ee:73:14:0b:0e:b8:65:81:cc:02:
68:68:b5:f3:a2:46:54:a1:3a:72:98:bf:f6:b6:c7:
59:99:61:b2:23:08:59:7b:54:5f:6c:c2:79:9e:6f:
35:dc:f3:1d:3e:8d:d7:e3:9b:c4:b6:bf:dd:fb:cb:
72:16:64:4e:1c:73:a2:49:c4:4a:47:6e:93:f4:91:
b0:6f:d3:8e:f5:33:a8:a7:6c:2f:43:ef:af:df:65:
89:bc:66:a8:82:61:b2:8b:30:d3:80:27:c2:92:b4:
34:03:cc:ad:7c:30:25:7b:0e:40:8b:80:43:8c:96:
1a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:5E:A5:63:D6:B9:CC:2E:4C:60:E1:5D:32:E0:63:00:74:51:40:4A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BF6lY9a5zC5MYOFdMuBjAHRRQEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
25:10:59:4f:f6:1e:4d:d7:54:0b:b7:61:77:59:a0:5c:1d:1c:
c0:93:e2:56:29:fb:f9:39:ab:b4:41:a2:0b:f8:8c:cf:35:72:
86:82:c4:54:cb:e2:69:74:e2:75:87:24:89:b6:09:8f:c6:73:
8f:01:23:f5:1c:31:d5:7f:3e:10:7a:ab:14:8e:fd:bf:12:4d:
25:39:05:90:68:93:fd:38:ef:1f:c6:e0:d3:33:12:67:e6:1c:
30:bf:90:2f:48:4d:52:f2:14:c0:aa:09:0e:da:6a:f1:2a:98:
45:b1:45:87:0b:1c:76:60:e2:89:64:44:80:ef:37:73:58:ad:
39:52:e9:8c:71:e7:c1:a0:d1:69:5f:a7:0f:91:d5:98:7c:9d:
3d:3f:bf:8e:0e:88:b2:9b:95:af:7a:22:65:6c:a2:e1:e6:e2:
2b:4a:d9:4e:84:b5:6e:0d:33:90:ad:c1:64:06:b9:00:69:1f:
67:d8:22:c7:a8:49:3d:dc:0c:b1:ca:aa:9b:bc:ce:30:c7:8d:
5f:7c:a5:eb:5a:c4:f4:14:81:51:9c:94:a7:45:cc:ce:9d:a8:
fe:cd:4f:c1:f8:90:82:00:54:59:d1:ba:39:0f:80:9d:69:8a:
40:61:9a:15:4e:9c:3a:dc:34:9a:25:63:9a:54:0c:6c:2f:69:
c0:e0:48:08
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYdrDdi5nib62U/rEJWOZAtCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDEwMTIwNDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNDVlYTU2M2Q2YjljYzJlNGM2MGUxNWQzMmUwNjMwMDc0NTE0MDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4JxqUPsjIpjLybI4cvNHI7F9rKC
BX2Dh/V5nogeY75+CSBkhCN2Ntm4vlrTbfhcQasAOA/IIjRfoGFeS8ucQGyoKp65
vl5vOv75Qauu7ljEwiLddjVY79TO5cd7rc3esBNotjd1LtgfWrK4gMC25oHcQpgW
rPXsStV6VWzrNvOfeq8l567Qya+JUu5zFAsOuGWBzAJoaLXzokZUoTpymL/2tsdZ
mWGyIwhZe1RfbMJ5nm813PMdPo3X45vEtr/d+8tyFmROHHOiScRKR26T9JGwb9OO
9TOop2wvQ++v32WJvGaogmGyizDTgCfCkrQ0A8ytfDAlew5Ai4BDjJYaEQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFARepWPWucwuTGDhXTLgYwB0UUBKMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvQkY2bFk5YTV6QzVNWU9GZE11QmpBSFJSUUVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACUQWU/2Hk3XVAu3YXdZ
oFwdHMCT4lYp+/k5q7RBogv4jM81coaCxFTL4ml04nWHJIm2CY/Gc48BI/UcMdV/
PhB6qxSO/b8STSU5BZBok/047x/G4NMzEmfmHDC/kC9ITVLyFMCqCQ7aavEqmEWx
RYcLHHZg4olkRIDvN3NYrTlS6Yxx58Gg0Wlfpw+R1Zh8nT0/v44OiLKbla96ImVs
ouHm4itK2U6EtW4NM5CtwWQGuQBpH2fYIseoST3cDLHKqpu8zjDHjV98petaxPQU
gVGclKdFzM6dqP7NT8H4kIIAVFnRujkPgJ1pikBhmhVOnDrcNJolY5pUDGwvacDg
SAg=
-----END CERTIFICATE-----
Generated at Thu May 1 00:08:16 2025 by rpki-client