Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BVfmHYG0_X_8BcskYXoXcLv-el8.roa
File: BVfmHYG0_X_8BcskYXoXcLv-el8.roa (raw, json)
Hash identifier: iOxghiCmXdTwg12i9YiJmYiF43wZmyT77XOe33nQI9M=
Subject key identifier: 05:57:E6:1D:81:B4:FD:7F:FC:05:CB:24:61:7A:17:70:BB:FE:7A:5F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A4471A115FBC0748AE0D1F7AA9F0AF466
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BVfmHYG0_X_8BcskYXoXcLv-el8.roa
Signing time: Wed 30 Aug 2023 03:16:52 +0000
ROA not before: Wed 30 Aug 2023 03:16:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:44:71:a1:15:fb:c0:74:8a:e0:d1:f7:aa:9f:0a:f4:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 30 03:16:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0557e61d81b4fd7ffc05cb24617a1770bbfe7a5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e7:a2:1d:f1:50:cd:b7:31:aa:c8:0c:e5:29:
09:ee:ec:1d:ea:46:5c:8f:a8:da:dc:70:78:ed:e3:
f1:f6:57:e4:ed:7a:b4:c1:f2:3e:76:0c:05:dd:8a:
9b:59:f8:92:50:a5:0a:a8:6f:d3:81:75:16:2c:b8:
98:4c:0f:f7:75:76:57:3e:ca:7d:2a:ac:fd:d0:8d:
40:df:01:cc:20:95:fd:63:4e:bc:05:3d:a4:6f:b5:
ec:ca:b0:2f:20:6d:11:df:0e:8f:b5:1c:91:bb:ee:
bd:8c:cc:fd:58:ed:e6:6f:da:26:ed:38:f5:b1:7c:
61:2b:97:4f:cf:b6:4b:a1:bc:c9:3f:57:8a:61:06:
2e:38:93:8d:be:fd:e7:46:cc:c3:c4:88:55:ae:15:
c3:43:b7:1d:3d:0b:76:18:36:8d:3a:30:b9:bf:d2:
9a:98:d9:bc:42:d8:c8:9a:0b:4f:52:ed:13:1c:6b:
b5:0b:8f:6e:3f:e0:7c:a7:0b:f1:2e:e3:93:53:41:
92:d1:bb:18:88:6c:40:1f:e1:29:e2:e2:f5:58:a9:
dc:14:5f:3e:2b:31:0c:8a:49:6a:8c:03:b4:78:32:
12:3d:a2:99:13:f9:3c:86:d0:8b:73:5e:2d:63:e9:
e0:da:c7:13:4b:10:6b:ac:28:e6:13:ef:f9:f7:37:
6f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:57:E6:1D:81:B4:FD:7F:FC:05:CB:24:61:7A:17:70:BB:FE:7A:5F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BVfmHYG0_X_8BcskYXoXcLv-el8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
78:6a:dd:d2:ea:d1:ae:b3:78:fc:64:b6:76:69:8d:88:50:86:
41:a7:69:98:4a:72:94:9e:10:00:23:9c:1c:90:a3:59:f5:5c:
5b:14:ee:9b:0f:15:62:b0:12:20:59:ce:4c:fb:a8:1b:a0:48:
7c:97:e6:c8:c5:b2:09:af:22:33:6a:f6:8a:51:60:34:7d:a5:
c2:8b:46:5c:03:87:e4:f9:a8:67:44:29:d8:48:14:da:d9:b4:
31:39:e8:d4:ba:ce:ae:50:83:ce:14:b8:7a:ba:7e:cf:64:cb:
64:e5:19:8b:b0:8b:a6:49:06:1a:03:c8:f9:ec:f0:56:bd:7c:
fa:53:b2:91:30:34:57:25:7c:2f:64:37:5d:26:96:bb:d1:62:
d9:fa:1a:de:9e:79:2f:57:d0:cf:a6:f3:4a:6f:09:45:e4:82:
ee:a3:f3:38:33:0b:75:7f:5f:31:cf:45:4f:c7:83:70:6d:e6:
02:e7:fa:83:3e:b6:22:c9:00:a2:b8:87:68:b4:fd:d1:f8:4f:
b9:9b:69:b7:99:71:ac:42:92:2f:89:ae:58:2e:ca:c1:ca:a6:
ed:b9:38:d8:60:9a:bd:6b:6c:19:e8:16:43:91:25:f7:bb:21:
e0:91:f8:b6:42:58:b6:b9:ab:92:84:a5:ba:59:e2:17:91:f4:
01:a6:24:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 07:44:34 2025 by rpki-client