Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BQbHmlNbkpwssZvrAiIRQrYL3nQ.roa
File: BQbHmlNbkpwssZvrAiIRQrYL3nQ.roa (raw, json)
Hash identifier: DOqFCrMdOr1X7OTg+Z1SyKQaGEopaC+ZVf0OKBDQ480=
Subject key identifier: 05:06:C7:9A:53:5B:92:9C:2C:B1:9B:EB:02:22:11:42:B6:0B:DE:74
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183E12846FD8E165F0B53009744F82BACE0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BQbHmlNbkpwssZvrAiIRQrYL3nQ.roa
Signing time: Sun 16 Oct 2022 14:17:36 +0000
ROA not before: Sun 16 Oct 2022 14:17:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e1:28:46:fd:8e:16:5f:0b:53:00:97:44:f8:2b:ac:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 16 14:17:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0506c79a535b929c2cb19beb02221142b60bde74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e7:9f:2d:44:d1:a7:06:7a:1f:b4:6a:62:c7:
e1:0d:12:fe:4f:0d:dc:5f:32:45:02:81:39:71:5c:
10:01:2b:6a:7d:50:b3:6e:1c:dd:0e:f8:0b:a4:3e:
b7:0f:49:2c:49:51:ee:6b:c8:2d:88:a7:38:62:8d:
f8:d5:0f:93:a1:de:2e:b0:26:fd:ba:01:24:90:b2:
9d:f7:15:15:fd:15:53:dc:46:97:a9:17:9e:e7:32:
b1:04:82:0e:e1:4a:fa:f8:1e:08:f9:fd:f6:c6:95:
3f:26:fb:e9:5e:2a:23:0f:18:ca:49:52:29:2e:7c:
84:17:0b:9e:54:21:cb:f3:b9:62:f0:07:45:8b:3d:
49:8c:ff:32:c1:55:51:2f:1c:44:e2:8f:1f:44:1f:
9e:6b:fa:bc:76:ee:e3:05:8c:e0:cf:17:03:9b:90:
51:0d:21:9d:bc:22:39:0e:63:10:2e:94:4f:06:61:
89:39:c2:c6:7a:bf:fe:bd:9f:4b:5f:62:48:d2:b7:
6c:d3:01:07:c6:16:3c:59:99:65:63:5b:ad:53:d8:
0a:c5:82:48:bf:67:fd:0e:c7:f0:a1:39:a8:d7:70:
f3:5d:c0:06:5f:e7:17:03:fb:f9:e6:30:ed:0e:fa:
4f:61:3f:d1:e8:54:56:ae:50:d2:4a:96:8a:86:c2:
49:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:06:C7:9A:53:5B:92:9C:2C:B1:9B:EB:02:22:11:42:B6:0B:DE:74
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BQbHmlNbkpwssZvrAiIRQrYL3nQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
97:ed:52:45:b2:00:55:52:5b:3f:f5:72:af:96:ef:c2:2d:c8:
73:b7:7b:a2:dd:2c:bb:22:9b:c4:8d:dd:27:2d:e4:e6:49:a1:
47:fb:12:fe:69:02:13:39:fb:58:5e:77:cf:5a:d5:e4:6b:97:
9d:e5:45:26:b1:f0:19:f1:3e:3b:3c:52:62:6b:d7:c7:f1:a5:
5d:fa:e2:fb:88:7a:7d:f1:d4:4a:6b:ef:cb:28:87:f8:0c:2d:
d0:00:88:fe:48:e2:a7:95:88:42:7b:9d:80:59:bb:00:ba:20:
6e:7e:46:5f:de:63:8a:9a:45:1a:67:ca:bf:2a:38:45:50:b9:
5c:99:fe:d9:2f:79:b2:fc:6f:d8:f5:7c:52:71:95:6a:bc:7f:
95:07:d9:ef:15:9f:da:a9:68:6b:80:27:b2:ba:30:29:d4:80:
48:c4:21:2a:4b:7a:55:af:87:3e:cb:31:61:b9:c8:69:85:0a:
1c:c1:6b:8b:9a:82:15:f6:c0:01:d0:34:18:19:5f:a1:e1:a7:
14:bd:32:b4:24:2f:6e:46:4d:b7:fb:49:5b:b1:93:07:25:85:
d1:c4:f9:a9:51:3d:35:01:c6:b7:d1:c1:27:35:2c:c8:6f:d8:
c7:41:c5:2e:31:a5:80:c7:2c:bd:89:3c:b7:bd:f2:4e:9c:4a:
2c:31:b2:5a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYPhKEb9jhZfC1MAl0T4K6zgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMDE2MTQxNzM2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTA2Yzc5YTUzNWI5MjljMmNiMTliZWIwMjIyMTE0MmI2MGJkZTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieefLUTRpwZ6H7RqYsfhDRL+Tw3c
XzJFAoE5cVwQAStqfVCzbhzdDvgLpD63D0ksSVHua8gtiKc4Yo341Q+Tod4usCb9
ugEkkLKd9xUV/RVT3EaXqRee5zKxBIIO4Ur6+B4I+f32xpU/JvvpXiojDxjKSVIp
LnyEFwueVCHL87li8AdFiz1JjP8ywVVRLxxE4o8fRB+ea/q8du7jBYzgzxcDm5BR
DSGdvCI5DmMQLpRPBmGJOcLGer/+vZ9LX2JI0rds0wEHxhY8WZllY1utU9gKxYJI
v2f9DsfwoTmo13DzXcAGX+cXA/v55jDtDvpPYT/R6FRWrlDSSpaKhsJJ+QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAUGx5pTW5KcLLGb6wIiEUK2C950MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvQlFiSG1sTmJrcHdzc1p2ckFpSVJRcllMM25RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJftUkWyAFVSWz/1cq+W
78ItyHO3e6LdLLsim8SN3Sct5OZJoUf7Ev5pAhM5+1hed89a1eRrl53lRSax8Bnx
Pjs8UmJr18fxpV364vuIen3x1Epr78soh/gMLdAAiP5I4qeViEJ7nYBZuwC6IG5+
Rl/eY4qaRRpnyr8qOEVQuVyZ/tkvebL8b9j1fFJxlWq8f5UH2e8Vn9qpaGuAJ7K6
MCnUgEjEISpLelWvhz7LMWG5yGmFChzBa4uaghX2wAHQNBgZX6HhpxS9MrQkL25G
Tbf7SVuxkwclhdHE+alRPTUBxrfRwSc1LMhv2MdBxS4xpYDHLL2JPLe98k6cSiwx
slo=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:51:07 2025 by rpki-client