Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BRNCLr97_XXz2GGJb0fmBXbLM30.roa
File: BRNCLr97_XXz2GGJb0fmBXbLM30.roa (raw, json)
Hash identifier: jIToLhJZ3EcPqf+LUi85ZN/SrBjoYQsCyqZSfiWChpM=
Subject key identifier: 05:13:42:2E:BF:7B:FD:75:F3:D8:61:89:6F:47:E6:05:76:CB:33:7D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8CCC0A2A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BRNCLr97_XXz2GGJb0fmBXbLM30.roa
Signing time: Wed 15 Jun 2022 01:17:45 +0000
ROA not before: Wed 15 Jun 2022 01:17:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:56ba:5b78/128 maxlen: 128
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2362182186 (0x8ccc0a2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 15 01:17:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0513422ebf7bfd75f3d861896f47e60576cb337d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:76:a4:33:2c:76:ff:dd:de:b7:29:6c:af:de:
b5:31:64:0a:d7:77:73:dd:e6:a5:17:5d:9e:15:c1:
b2:2a:6a:47:e1:3b:73:67:5d:b0:01:3d:18:75:ab:
7a:aa:7e:4c:45:6e:a2:f0:eb:8d:74:0e:5f:1c:bd:
c4:dc:05:18:ab:82:25:cb:74:f5:9e:66:82:ae:c8:
5f:24:d8:cb:a5:98:45:69:ad:51:3d:af:50:9d:42:
ec:ad:85:76:01:b8:34:90:62:bd:3a:a5:a2:7b:cd:
a1:ba:94:f9:a8:ea:4d:5e:62:7d:9e:e5:4d:58:ad:
9d:7f:53:69:ec:cb:21:01:6b:7a:07:40:f7:31:78:
dc:51:aa:7b:60:b6:b1:30:ba:a8:fc:0f:8c:fb:43:
9f:2d:07:87:67:e7:25:39:42:da:a0:8f:67:21:20:
d2:fe:a0:a9:ee:69:10:c2:4a:03:82:5f:5b:69:a0:
c7:9b:e5:50:0e:f4:73:c2:da:3d:7b:0e:02:e6:52:
df:0a:a9:68:d4:61:1d:3a:d1:48:55:e8:cc:0c:a7:
77:29:cf:ec:86:31:13:78:31:9b:2d:08:53:96:14:
a4:7a:09:c5:b0:c5:95:dd:6b:3c:18:8b:57:04:5f:
8b:cb:80:eb:b6:b1:73:c2:32:07:64:d4:83:c2:94:
50:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:13:42:2E:BF:7B:FD:75:F3:D8:61:89:6F:47:E6:05:76:CB:33:7D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BRNCLr97_XXz2GGJb0fmBXbLM30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
70:41:0c:e5:f3:8b:b3:cd:a8:38:ab:f9:9d:5d:37:d3:c2:17:
c5:c1:83:d9:e6:a0:54:a9:42:b5:e3:b8:19:57:a7:85:57:77:
7e:86:4c:3b:8e:85:14:24:02:8d:6a:28:66:e8:8b:3c:3f:45:
59:07:62:1a:f8:b8:f5:7b:32:4e:79:bc:5a:78:74:6a:43:9b:
5c:cc:68:5a:30:a1:9f:72:80:df:8a:f0:61:28:d8:b8:1c:c2:
d3:c6:d1:e7:73:c4:75:a6:14:d0:74:1b:2c:2f:8f:05:08:9c:
89:d9:8c:98:e4:b7:22:4f:6b:3f:78:8c:92:1b:22:d4:81:f1:
28:f9:e5:b6:14:2f:5c:24:b9:01:3c:4e:8a:b2:cc:4f:61:8e:
57:c2:a3:6f:01:b2:2e:26:23:2b:96:f0:9b:e0:80:47:ec:ae:
cf:5d:0a:2a:1b:37:85:85:00:07:a9:52:4a:10:b2:36:4d:de:
01:5a:21:0f:92:f5:35:58:de:f2:62:ce:89:b4:8f:13:7c:05:
e2:82:ad:2e:0f:3f:bb:a1:81:aa:99:89:a3:2c:9e:24:85:18:
d2:2f:eb:5a:11:59:9b:e4:b4:2a:68:14:6c:6a:20:15:f2:af:
ef:4e:bf:0c:23:b8:14:5e:98:f5:23:46:09:98:e3:d3:86:98:
48:7a:ad:bf
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAIzMCiowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA2
MTUwMTE3NDVaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDA1MTM0MjJlYmY3
YmZkNzVmM2Q4NjE4OTZmNDdlNjA1NzZjYjMzN2QwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCydqQzLHb/3d63KWyv3rUxZArXd3Pd5qUXXZ4VwbIqakfh
O3NnXbABPRh1q3qqfkxFbqLw6410Dl8cvcTcBRirgiXLdPWeZoKuyF8k2MulmEVp
rVE9r1CdQuythXYBuDSQYr06paJ7zaG6lPmo6k1eYn2e5U1YrZ1/U2nsyyEBa3oH
QPcxeNxRqntgtrEwuqj8D4z7Q58tB4dn5yU5Qtqgj2chINL+oKnuaRDCSgOCX1tp
oMeb5VAO9HPC2j17DgLmUt8KqWjUYR060UhV6MwMp3cpz+yGMRN4MZstCFOWFKR6
CcWwxZXdazwYi1cEX4vLgOu2sXPCMgdk1IPClFBnAgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQUBRNCLr97/XXz2GGJb0fmBXbLM30wHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS9CUk5DTHI5N19YWHoyR0dKYjBmbUJYYkxNMzAucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEAcEEM5fOLs82oOKv5nV0308IXxcGD2eagVKlC
teO4GVenhVd3foZMO46FFCQCjWooZuiLPD9FWQdiGvi49XsyTnm8Wnh0akObXMxo
WjChn3KA34rwYSjYuBzC08bR53PEdaYU0HQbLC+PBQicidmMmOS3Ik9rP3iMkhsi
1IHxKPnlthQvXCS5ATxOirLMT2GOV8KjbwGyLiYjK5bwm+CAR+yuz10KKhs3hYUA
B6lSShCyNk3eAVohD5L1NVje8mLOibSPE3wF4oKtLg8/u6GBqpmJoyyeJIUY0i/r
WhFZm+S0KmgUbGogFfKv706/DCO4FF6Y9SNGCZjj04aYSHqtvw==
-----END CERTIFICATE-----
Generated at Fri May 2 17:17:47 2025 by rpki-client