Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BSGPJXL42VwgHKXWhUDi7Yk7DJk.roa
File: BSGPJXL42VwgHKXWhUDi7Yk7DJk.roa (raw, json)
Hash identifier: U43LQ7+Kwz9uOI+/ejhj6zghLUKbyRs91NG3eQUHdVo=
Subject key identifier: 05:21:8F:25:72:F8:D9:5C:20:1C:A5:D6:85:40:E2:ED:89:3B:0C:99
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7CD08460
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BSGPJXL42VwgHKXWhUDi7Yk7DJk.roa
Signing time: Wed 20 Apr 2022 00:08:26 +0000
ROA not before: Wed 20 Apr 2022 00:08:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2094040160 (0x7cd08460)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 20 00:08:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=05218f2572f8d95c201ca5d68540e2ed893b0c99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c1:a4:15:7d:0c:0c:17:df:71:0d:e2:c8:fa:
3c:8c:44:e7:d8:01:a6:08:71:d2:b2:58:30:85:17:
32:5b:c2:12:a2:a8:66:08:40:58:1b:a3:79:30:b1:
3c:bd:2f:b1:69:05:e8:e8:58:45:f5:14:99:cb:80:
15:8d:8c:1c:b7:73:15:75:a3:bb:a4:aa:bc:26:66:
b3:cf:b3:8b:d0:e0:a6:40:80:ed:7e:97:d1:fd:82:
dc:cf:0e:23:12:d4:7c:b0:56:a2:87:5a:a1:df:c0:
41:79:30:71:16:e0:64:fa:13:e6:a7:b4:9e:5d:70:
73:af:32:fd:43:f8:0b:f4:11:a3:66:2f:56:45:36:
85:e2:a4:2f:f3:38:e9:18:0b:19:57:4b:8f:96:c2:
cd:56:62:cf:9a:0d:bf:bd:7b:cb:bb:7a:86:2c:2b:
33:3c:66:5d:42:77:09:5b:1a:30:ed:d9:99:80:0d:
c8:01:1f:16:6d:6e:c9:1f:54:03:82:b6:d5:fa:55:
9e:1c:39:03:64:f0:26:ec:b0:c9:45:73:1d:e5:c7:
58:93:7f:6a:af:2b:cd:f2:f1:34:7d:83:bf:c9:a1:
95:a2:e5:21:f6:21:0c:0d:55:2d:6f:ce:f3:57:a9:
ed:94:dc:e2:97:35:aa:cd:14:74:65:90:da:73:94:
91:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:21:8F:25:72:F8:D9:5C:20:1C:A5:D6:85:40:E2:ED:89:3B:0C:99
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BSGPJXL42VwgHKXWhUDi7Yk7DJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
86:0f:e7:60:de:d9:0f:2f:b5:b3:bf:d1:e9:e7:89:e5:cb:31:
f5:27:70:8f:da:c5:48:f5:fc:8b:82:b0:48:cf:bb:7a:d5:9c:
f9:56:d8:67:46:06:fd:e5:40:8a:03:ce:c9:8c:b6:95:f9:0a:
b9:54:a0:bc:ee:dc:08:70:65:9b:d3:16:cd:8a:02:42:1a:1c:
83:ac:0a:a2:f8:32:63:5b:27:33:35:ea:d1:1a:f7:34:e8:44:
ff:6b:f9:62:0d:4b:39:71:c6:a9:e1:6f:36:09:ae:9b:60:74:
56:70:0a:d4:e3:10:10:dd:11:4a:9a:df:4a:ec:75:1e:52:5f:
a5:ec:ec:3e:d8:f2:e3:e4:68:02:50:91:c2:8f:0f:aa:5c:fe:
c4:73:9e:74:a3:c7:bb:92:4b:63:20:29:d2:4c:e0:dd:1a:1c:
63:70:e3:31:6d:73:4b:96:08:de:7a:4e:e4:63:9d:d8:f2:4f:
4c:33:20:10:7e:fb:4a:b4:52:58:4b:bb:11:34:50:fb:d4:ff:
66:1d:72:4f:4a:e9:62:4a:7a:6f:45:31:af:57:d5:e1:e9:8c:
0b:db:79:c7:50:de:47:55:73:5e:9f:32:df:b4:ed:56:75:6f:
6c:58:27:7b:5c:3d:16:5e:88:ff:b7:16:6b:88:6c:97:ba:3e:
03:7d:fd:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 19:58:00 2025 by rpki-client