Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BUV8dX6QycAE6iC3E8vgI3KNlzE.roa
File: BUV8dX6QycAE6iC3E8vgI3KNlzE.roa (raw, json)
Hash identifier: ObimT/2PGb0726kUh2y1jA/1INof4cT2lDTyM6UnDiI=
Subject key identifier: 05:45:7C:75:7E:90:C9:C0:04:EA:20:B7:13:CB:E0:23:72:8D:97:31
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187E184663039E5A1E2B4C891A036480FC4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BUV8dX6QycAE6iC3E8vgI3KNlzE.roa
Signing time: Wed 03 May 2023 12:09:23 +0000
ROA not before: Wed 03 May 2023 12:09:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e1:84:66:30:39:e5:a1:e2:b4:c8:91:a0:36:48:0f:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 3 12:09:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=05457c757e90c9c004ea20b713cbe023728d9731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e1:22:7b:04:20:60:4d:3e:88:8c:ef:c3:a5:
71:f0:92:b4:8c:12:12:bd:b6:fa:6c:71:62:84:81:
35:c2:76:1d:1d:04:10:50:9a:e2:c8:55:4d:d5:78:
11:80:85:01:10:4d:a2:c5:09:4d:fa:6f:dc:36:c4:
b1:8f:0a:7b:6d:c9:5b:94:c1:31:c8:b7:fa:eb:4c:
14:f1:58:43:29:b2:2b:fa:08:05:0f:17:46:2c:fc:
ec:c9:7e:5a:1f:0e:a1:20:10:7a:5b:b8:33:75:68:
69:6a:4e:ad:a2:a1:38:d4:c8:2b:da:8c:88:b0:31:
26:dd:e7:0c:65:5a:43:37:0e:c6:4e:b1:ae:8b:f8:
ed:2f:1d:3c:2d:32:41:75:5d:72:5b:c7:44:0c:81:
80:7e:32:6e:ff:71:77:a1:41:15:b0:97:ce:4f:08:
bc:e9:b4:e3:21:a2:42:6f:35:94:d9:14:67:e8:44:
09:bf:0f:73:27:69:7d:5c:02:58:88:b0:32:a3:35:
b6:c2:89:e4:c4:9a:79:f6:11:15:2d:b3:c0:a3:99:
67:00:51:57:b5:82:3e:d8:8b:f4:c1:09:0a:2d:16:
c1:e0:f2:41:78:4f:4d:de:c5:62:c4:3a:8c:4b:17:
73:7f:2a:1e:f4:16:24:50:4d:83:40:d4:0e:9f:92:
ff:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:45:7C:75:7E:90:C9:C0:04:EA:20:B7:13:CB:E0:23:72:8D:97:31
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BUV8dX6QycAE6iC3E8vgI3KNlzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b4:ca:d5:62:6f:9a:8f:8c:32:ca:60:c6:55:19:32:36:71:36:
b7:80:56:e9:e5:e5:12:a8:b6:32:d7:47:5a:6d:6b:56:a2:5c:
1b:d7:3e:65:7f:49:eb:5a:11:53:9a:c5:14:f1:ee:dc:2b:4f:
18:2f:04:11:bd:ae:9c:55:74:d7:28:a2:1a:34:a4:15:75:da:
c0:45:46:2c:f8:c9:c5:13:9e:94:34:03:3d:c2:90:d1:7d:ed:
7d:f0:d9:e6:23:3f:5e:dc:45:30:2c:b3:88:ed:79:9a:6d:f3:
65:89:f8:09:e8:25:99:cb:f7:f1:90:99:6c:7c:cd:8c:d7:e2:
a6:8b:3b:ef:9d:09:5f:f9:16:f8:30:d0:83:4c:31:e2:2a:69:
00:50:38:96:0f:90:eb:b6:48:a4:00:8f:a0:20:6b:6e:17:2b:
76:14:20:9b:12:d4:94:d4:58:45:75:6a:ef:4c:0f:28:28:22:
d9:2c:9b:05:f6:2b:5b:29:d1:e4:62:f2:35:e3:cf:89:8c:d6:
2f:41:48:c4:76:40:3a:80:b3:5e:d3:dc:8a:47:4c:80:12:02:
57:12:41:7a:e8:ea:1d:33:df:c2:49:49:ff:f8:6c:eb:52:2b:
11:00:1b:b8:c6:be:0e:8a:62:ae:2a:78:9d:e2:e2:34:35:5b:
e1:a7:8f:10
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYfhhGYwOeWh4rTIkaA2SA/EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTAzMTIwOTIzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTQ1N2M3NTdlOTBjOWMwMDRlYTIwYjcxM2NiZTAyMzcyOGQ5NzMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+EiewQgYE0+iIzvw6Vx8JK0jBIS
vbb6bHFihIE1wnYdHQQQUJriyFVN1XgRgIUBEE2ixQlN+m/cNsSxjwp7bclblMEx
yLf660wU8VhDKbIr+ggFDxdGLPzsyX5aHw6hIBB6W7gzdWhpak6toqE41Mgr2oyI
sDEm3ecMZVpDNw7GTrGui/jtLx08LTJBdV1yW8dEDIGAfjJu/3F3oUEVsJfOTwi8
6bTjIaJCbzWU2RRn6EQJvw9zJ2l9XAJYiLAyozW2wonkxJp59hEVLbPAo5lnAFFX
tYI+2Iv0wQkKLRbB4PJBeE9N3sVixDqMSxdzfyoe9BYkUE2DQNQOn5L/HQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAVFfHV+kMnABOogtxPL4CNyjZcxMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvQlVWOGRYNlF5Y0FFNmlDM0U4dmdJM0tObHpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBALTK1WJvmo+MMspgxlUZ
MjZxNreAVunl5RKotjLXR1pta1aiXBvXPmV/SetaEVOaxRTx7twrTxgvBBG9rpxV
dNcooho0pBV12sBFRiz4ycUTnpQ0Az3CkNF97X3w2eYjP17cRTAss4jteZpt82WJ
+AnoJZnL9/GQmWx8zYzX4qaLO++dCV/5Fvgw0INMMeIqaQBQOJYPkOu2SKQAj6Ag
a24XK3YUIJsS1JTUWEV1au9MDygoItksmwX2K1sp0eRi8jXjz4mM1i9BSMR2QDqA
s17T3IpHTIASAlcSQXro6h0z38JJSf/4bOtSKxEAG7jGvg6KYq4qeJ3i4jQ1W+Gn
jxA=
-----END CERTIFICATE-----
Generated at Thu May 1 12:52:32 2025 by rpki-client