Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BLBU15B4fCJhNf1_OPZK4INjmdE.roa
File: BLBU15B4fCJhNf1_OPZK4INjmdE.roa (raw, json)
Hash identifier: mY0UMAj1o/yiWixVTe3OsEo1iwlBnaS9KXIajyzur1A=
Subject key identifier: 04:B0:54:D7:90:78:7C:22:61:35:FD:7F:38:F6:4A:E0:83:63:99:D1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182764F9530BF6B645EDCCB90BB3315D7BF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BLBU15B4fCJhNf1_OPZK4INjmdE.roa
Signing time: Sun 07 Aug 2022 03:18:23 +0000
ROA not before: Sun 07 Aug 2022 03:18:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:76:4f:95:30:bf:6b:64:5e:dc:cb:90:bb:33:15:d7:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 7 03:18:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=04b054d790787c226135fd7f38f64ae0836399d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f0:0d:47:98:34:9e:c6:80:e5:f4:7f:73:60:
d2:07:24:96:8d:a0:fd:b2:d3:7c:74:53:72:88:c4:
2b:ae:57:81:a7:ff:c3:8e:04:ae:d9:df:ec:ff:bd:
ed:81:e7:97:6c:91:79:04:c5:86:93:41:1f:da:5c:
bc:f7:59:9d:32:3f:f3:23:77:e5:08:5c:22:21:37:
c1:4a:70:4c:c1:7c:24:fb:59:03:e4:d3:eb:a0:b5:
18:3d:a5:a0:91:cd:21:7d:8b:1f:2f:eb:c7:8a:09:
89:e6:ab:98:4f:ef:9f:71:1c:c8:75:f8:db:15:21:
47:f9:ca:59:1f:fd:f4:39:05:34:5b:a7:b2:b7:91:
bd:a8:9d:57:57:71:08:25:ce:9f:46:24:c8:26:4c:
f1:58:3f:36:c4:7c:44:c3:75:d0:c3:aa:74:22:ca:
2e:da:46:a0:f4:20:d8:35:e8:ab:02:fb:24:3f:a8:
6e:4a:fd:07:f4:f3:45:1d:1f:a9:26:80:6d:56:89:
4a:a6:f3:36:87:ee:32:f4:c7:1c:f9:41:00:ae:0b:
2c:39:b4:7f:a3:63:7e:81:f7:05:44:c6:82:67:6a:
7e:ed:77:da:ef:72:40:47:55:9c:7e:f4:06:da:d9:
19:9a:bb:1a:d3:7b:87:a3:c8:ee:96:88:9c:da:7a:
4b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B0:54:D7:90:78:7C:22:61:35:FD:7F:38:F6:4A:E0:83:63:99:D1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BLBU15B4fCJhNf1_OPZK4INjmdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
38:3f:42:02:c5:6c:04:04:bf:9e:fe:bd:6f:42:d1:f6:91:cc:
03:37:16:17:c8:44:f5:61:82:52:d8:a7:b5:21:e8:bf:27:ac:
ba:bf:02:f0:0e:9a:4f:ba:30:48:b7:de:2c:35:d9:69:b9:e6:
e8:5e:75:3f:09:eb:04:ae:a0:8e:a4:0a:2a:2e:4a:93:22:ad:
a5:22:eb:72:aa:f8:bf:93:10:ff:53:39:6d:ef:d6:fc:46:94:
02:cd:71:cb:67:c6:d4:78:1e:d1:fd:42:fa:2d:34:50:92:57:
05:c4:a8:b5:33:e6:47:3c:d9:92:10:30:1b:cf:93:1e:d2:72:
e8:03:ad:96:7c:34:32:0d:c8:ac:a1:17:35:c0:fa:56:f3:38:
a8:24:d5:cb:c7:e0:7e:37:fd:99:ef:df:47:18:c8:d6:f4:a4:
a5:fe:22:e8:d7:9a:f4:d8:f4:4a:4b:e5:74:16:cf:1a:38:f0:
2c:22:26:f8:94:67:99:b1:12:62:c2:51:02:71:72:41:60:a9:
39:5e:74:e9:04:76:c1:06:fa:ba:84:dd:1d:2b:86:22:b9:cd:
4f:8f:ac:d8:46:0f:8a:7f:70:fc:21:20:77:fc:1d:57:b9:02:
7a:a2:40:dc:0a:cf:0c:6e:0a:1d:95:7e:80:7e:f1:05:8f:5b:
bf:13:8e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:37:31 2025 by rpki-client