Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BG3YeDAponolJIWEwmgXB0D4ku8.roa
File: BG3YeDAponolJIWEwmgXB0D4ku8.roa (raw, json)
Hash identifier: 8zRW0Rx0p8nIAZto9QYq86jc7Ermc2X1yCR0H3P8ysI=
Subject key identifier: 04:6D:D8:78:30:29:A2:7A:25:24:85:84:C2:68:17:07:40:F8:92:EF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018242947A9A0FF4B4AA0B354B6C78C7DB2A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BG3YeDAponolJIWEwmgXB0D4ku8.roa
Signing time: Thu 28 Jul 2022 02:13:23 +0000
ROA not before: Thu 28 Jul 2022 02:13:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:42:94:7a:9a:0f:f4:b4:aa:0b:35:4b:6c:78:c7:db:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 28 02:13:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=046dd8783029a27a25248584c268170740f892ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d9:3b:4c:7f:45:f9:9c:2b:c7:5d:bd:7f:cc:
00:b3:9b:e4:38:68:a5:37:02:36:d2:79:a6:d1:80:
01:15:7b:c5:d4:62:21:6e:2f:c0:18:d7:ae:42:49:
f0:4a:75:01:89:5e:1f:bd:fa:08:56:fd:98:b4:c6:
0a:14:be:7e:a7:06:01:0e:74:4c:39:6a:21:dc:47:
56:77:2d:a1:71:31:7e:e8:2e:32:a7:65:ba:20:89:
7f:a6:be:e9:d3:7e:d0:10:e2:68:29:32:73:b6:09:
e5:64:f3:04:89:ab:4d:ca:2c:73:22:dc:a7:a6:78:
95:ff:94:7e:df:99:f9:fa:e2:83:ba:13:93:5d:5d:
43:47:ae:e0:8e:d5:26:6c:22:3f:1e:a1:ef:05:ca:
96:44:1c:49:fc:80:70:31:ff:8a:19:cd:64:c3:a6:
c6:bb:bf:69:30:db:ff:88:c2:82:0c:2d:83:99:19:
40:66:9d:be:3c:b9:9b:c2:27:51:26:14:a7:9b:7f:
fc:7d:5b:84:a9:6b:df:89:ed:03:59:28:1f:c3:71:
37:ec:32:b9:57:39:90:68:89:02:a9:6b:54:47:0c:
bb:a1:7c:80:e1:81:aa:2a:41:59:50:f7:0c:c8:d6:
12:6a:0e:04:a2:c9:be:1c:bc:f3:96:3a:8b:d5:2f:
df:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:6D:D8:78:30:29:A2:7A:25:24:85:84:C2:68:17:07:40:F8:92:EF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BG3YeDAponolJIWEwmgXB0D4ku8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
01:e9:63:dd:38:eb:c4:e6:53:9b:5f:bb:1e:33:05:01:1f:c0:
3a:ef:42:6f:7e:8d:52:e8:f6:e4:a3:ba:ce:db:21:65:75:8d:
31:8c:42:9d:c9:53:be:73:c7:e0:db:66:1b:9d:66:35:1d:e8:
24:e5:d6:48:2d:7c:99:18:2e:2d:75:5d:65:fe:0e:7a:34:6c:
77:82:82:97:f1:1a:b2:90:10:7a:96:6c:65:30:b9:2c:2b:a4:
14:58:d2:62:41:09:47:d3:6b:bf:3a:d4:bd:d6:8e:9e:bd:a5:
23:fa:88:55:9b:2c:09:7c:68:57:46:b5:bb:41:45:ef:bc:f4:
8d:ad:51:68:7a:c4:4e:6c:fe:23:cc:5f:49:51:e5:ed:53:f6:
b8:47:27:30:4a:cb:eb:eb:9b:ec:5a:7a:f1:01:ba:b2:e5:77:
ea:a3:23:59:b2:3d:77:68:3b:bb:5c:07:49:21:43:4c:c5:ed:
68:c0:8b:71:07:fe:5d:b1:fb:46:db:34:fb:e0:34:a4:20:b6:
0e:e1:6f:df:05:8b:60:9e:c1:05:db:c2:5f:18:77:8b:e8:92:
5a:4a:41:61:16:ff:d8:bf:a8:e7:bc:2f:06:e9:5a:fb:98:db:
d9:8f:10:2d:fe:e4:90:d5:3a:f8:06:84:55:44:9b:07:12:97:
19:f0:61:53
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYJClHqaD/S0qgs1S2x4x9sqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwNzI4MDIxMzIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNDZkZDg3ODMwMjlhMjdhMjUyNDg1ODRjMjY4MTcwNzQwZjg5MmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtk7TH9F+Zwrx129f8wAs5vkOGil
NwI20nmm0YABFXvF1GIhbi/AGNeuQknwSnUBiV4fvfoIVv2YtMYKFL5+pwYBDnRM
OWoh3EdWdy2hcTF+6C4yp2W6IIl/pr7p037QEOJoKTJztgnlZPMEiatNyixzItyn
pniV/5R+35n5+uKDuhOTXV1DR67gjtUmbCI/HqHvBcqWRBxJ/IBwMf+KGc1kw6bG
u79pMNv/iMKCDC2DmRlAZp2+PLmbwidRJhSnm3/8fVuEqWvfie0DWSgfw3E37DK5
VzmQaIkCqWtURwy7oXyA4YGqKkFZUPcMyNYSag4Eosm+HLzzljqL1S/feQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFARt2HgwKaJ6JSSFhMJoFwdA+JLvMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvQkczWWVEQXBvbm9sSklXRXdtZ1hCMEQ0a3U4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAHpY90468TmU5tfux4z
BQEfwDrvQm9+jVLo9uSjus7bIWV1jTGMQp3JU75zx+DbZhudZjUd6CTl1kgtfJkY
Li11XWX+Dno0bHeCgpfxGrKQEHqWbGUwuSwrpBRY0mJBCUfTa7861L3Wjp69pSP6
iFWbLAl8aFdGtbtBRe+89I2tUWh6xE5s/iPMX0lR5e1T9rhHJzBKy+vrm+xaevEB
urLld+qjI1myPXdoO7tcB0khQ0zF7WjAi3EH/l2x+0bbNPvgNKQgtg7hb98Fi2Ce
wQXbwl8Yd4voklpKQWEW/9i/qOe8LwbpWvuY29mPEC3+5JDVOvgGhFVEmwcSlxnw
YVM=
-----END CERTIFICATE-----
Generated at Sat May 3 05:24:08 2025 by rpki-client