Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BUNOPwKmir3m7AJjTjRS6nGSOEk.roa
File: BUNOPwKmir3m7AJjTjRS6nGSOEk.roa (raw, json)
Hash identifier: ZExJFuGCNypxarYTbhUZ4Hi++PymJ3xJ5K/G8Sgp6gA=
Subject key identifier: 05:43:4E:3F:02:A6:8A:BD:E6:EC:02:63:4E:34:52:EA:71:92:38:49
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 69D79675
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BUNOPwKmir3m7AJjTjRS6nGSOEk.roa
Signing time: Sat 12 Feb 2022 00:07:44 +0000
ROA not before: Sat 12 Feb 2022 00:07:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1775736437 (0x69d79675)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 12 00:07:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=05434e3f02a68abde6ec02634e3452ea71923849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:19:b6:d1:2f:ea:3c:fe:2c:16:d5:bd:56:6d:
ee:70:8f:08:2b:c9:c7:73:bb:e9:f7:0a:51:2d:19:
e2:45:67:1f:93:c4:8d:c8:73:6e:12:e8:41:f0:f8:
90:fb:bc:03:50:f3:6e:cd:81:7d:2c:58:5a:dd:1a:
7a:0e:0b:ec:89:ad:00:a3:ff:2e:32:bc:ce:70:54:
38:04:fe:ee:70:90:f5:7b:64:03:02:74:f2:5e:74:
ef:88:67:e3:ad:d0:bd:95:df:40:ab:c4:ee:26:45:
b8:b6:13:17:b0:7d:ea:ee:7c:63:f8:16:4a:b2:a0:
0e:c3:6c:71:88:2b:fe:c2:dd:32:6a:ac:b4:6d:d4:
91:cb:4c:c0:48:2f:0b:b6:46:35:65:7f:8a:f2:be:
f3:02:51:21:29:1c:94:a8:70:7c:68:19:d0:76:38:
ed:aa:d6:a6:e7:34:fb:03:cb:28:0b:1a:bd:83:c8:
cf:1b:8e:f5:b1:06:02:37:4e:dc:d6:03:fc:b6:15:
3f:6a:3e:f3:bf:64:e9:1f:8e:2d:d6:a1:02:15:3b:
f2:42:20:27:7e:3a:4d:f2:a0:21:35:bb:18:69:f4:
54:9f:96:f0:02:74:62:2f:ea:66:00:1a:44:e0:77:
a3:fa:fb:73:91:81:18:45:ce:b8:f4:cb:d0:ea:2d:
27:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:43:4E:3F:02:A6:8A:BD:E6:EC:02:63:4E:34:52:EA:71:92:38:49
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BUNOPwKmir3m7AJjTjRS6nGSOEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3e:51:5d:65:5a:25:96:f7:43:01:f6:83:3b:6f:71:0d:61:f3:
00:17:bb:ab:59:79:76:1e:c7:8f:6f:1f:73:34:78:61:7f:5f:
df:15:b0:9a:a1:92:8c:9d:01:cf:73:44:8a:73:66:ab:97:d1:
89:e9:a7:bf:d1:6e:6f:86:72:35:5b:d3:13:77:c7:41:1a:9c:
4f:46:d5:b7:58:99:a3:48:69:1c:4e:7d:98:db:b5:46:b0:36:
ae:b8:f1:a1:03:98:92:d4:bf:89:66:81:33:c9:19:bd:84:26:
03:2a:bb:e1:41:ec:d1:0d:d7:69:df:f8:15:fe:27:c8:44:41:
c1:40:ed:39:83:7c:b8:a7:68:d4:c6:7b:82:36:07:61:6e:14:
65:03:3a:c2:f1:47:a3:35:a3:9c:de:65:83:84:6a:9e:67:02:
3c:74:70:8d:58:74:fc:21:4b:e7:d5:8a:41:fb:e7:98:b8:82:
74:f7:3d:66:e4:3d:bd:a7:75:ab:44:4e:60:29:b8:3e:f0:d9:
cf:8d:16:28:a4:8c:bb:c7:80:1f:67:4c:9e:ee:e5:c3:e9:3b:
81:3d:f3:47:15:ef:a5:78:4b:c1:18:09:86:c8:d4:e5:32:fd:
75:9f:2e:e5:39:96:72:9b:a6:f5:69:a4:dd:6f:e4:a6:2a:41:
91:c9:53:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:22 2025 by rpki-client