Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BVlXVDaBDJuGlbmeFH9zZSNMm0k.roa
File: BVlXVDaBDJuGlbmeFH9zZSNMm0k.roa (raw, json)
Hash identifier: yD2ERHWBcYh/iJYJEe41AW23a3+blHjeveSqrMTVCJI=
Subject key identifier: 05:59:57:54:36:81:0C:9B:86:95:B9:9E:14:7F:73:65:23:4C:9B:49
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018410FAA3D7FEB9587C42FDBB341D541624
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BVlXVDaBDJuGlbmeFH9zZSNMm0k.roa
Signing time: Tue 25 Oct 2022 21:09:32 +0000
ROA not before: Tue 25 Oct 2022 21:09:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:10:fa:a3:d7:fe:b9:58:7c:42:fd:bb:34:1d:54:16:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 25 21:09:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0559575436810c9b8695b99e147f7365234c9b49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c1:55:e5:71:04:15:0b:73:74:7f:c7:97:46:
75:d9:29:51:ef:14:65:5a:79:f0:06:df:f3:47:c9:
30:f5:de:08:99:b3:d3:88:71:08:31:dc:58:58:24:
09:97:19:43:61:8c:20:63:74:77:1a:2b:30:29:04:
20:c8:00:fd:aa:d4:2f:83:e7:59:e5:a0:4e:b8:f6:
fc:63:3a:72:e6:59:b9:e5:c2:5d:21:22:cd:5c:fe:
cf:95:e7:65:c6:d5:8c:3f:2c:16:12:05:f2:69:f0:
52:fa:76:ba:97:d6:6e:e3:f4:87:37:d5:ff:5b:c3:
9e:fb:6e:94:36:ab:f3:55:9a:72:a3:ee:a6:67:40:
7d:12:5a:87:b7:96:7b:9a:19:46:55:b7:c2:b8:89:
38:c9:32:35:1b:17:54:77:72:49:92:b1:9a:77:30:
2c:b0:00:7e:cd:87:e8:c5:e0:92:58:c2:6b:68:f5:
c0:73:3d:a5:ec:ba:7d:0b:1c:c6:98:33:b7:e9:e8:
4b:53:b3:95:f8:08:86:6b:2a:cb:c5:e9:72:62:8b:
9c:03:9b:31:0c:11:d2:0c:f8:49:67:05:7b:4a:67:
f9:62:35:3b:59:cb:33:a2:5b:72:f9:dc:ef:0b:5a:
8c:3b:3c:dd:f5:31:41:e3:c2:d7:df:97:f8:ad:f6:
5a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:59:57:54:36:81:0C:9B:86:95:B9:9E:14:7F:73:65:23:4C:9B:49
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BVlXVDaBDJuGlbmeFH9zZSNMm0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6d:4b:2e:32:f0:1b:ed:1e:3f:68:a2:7f:7e:5d:30:08:c8:83:
b3:1c:0f:01:cb:7f:fc:b6:ca:92:59:8c:88:df:f3:1d:cb:c6:
3a:4b:da:37:92:f3:f1:f9:65:48:30:72:d8:64:a2:3d:0a:46:
28:66:5b:4f:f7:72:2e:a4:41:2e:fe:60:7c:be:ab:03:1f:54:
2a:e0:c2:06:f2:f3:23:7e:a9:27:a8:35:ae:ed:ac:dc:5b:b6:
02:7d:1d:0a:27:16:48:15:2b:c8:2d:57:c9:3b:06:81:4b:65:
37:a6:33:e2:e0:73:4b:d7:cc:71:d5:5b:79:75:78:20:0f:ea:
d1:e9:c7:24:1f:7f:84:8b:11:e3:36:84:13:29:e0:91:48:14:
f0:08:b2:aa:f1:66:d4:26:8e:c6:99:40:f6:d8:9c:91:ce:52:
5f:8f:65:ae:b2:15:17:4a:05:0b:27:fb:37:25:5e:f1:92:b3:
f1:ff:e8:01:e3:6b:45:b9:6c:76:ef:fd:8a:e4:24:26:03:59:
7b:05:2d:cb:10:2a:34:ba:ae:12:c2:f9:35:45:bb:d6:e2:85:
d9:56:d7:a7:83:8f:6c:78:76:fb:01:a8:19:3f:f6:0f:f5:e5:
cd:05:ab:9d:85:d0:56:02:53:8c:20:7a:8e:44:1d:2f:1d:a6:
c4:5e:56:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:15:05 2025 by rpki-client