Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BZ_BiERvQORejrVmpJ7HuSSsf3A.roa
File: BZ_BiERvQORejrVmpJ7HuSSsf3A.roa (raw, json)
Hash identifier: Qmmj/rCXja3mIk4Hm7uv9cA3s75NFNylZK0ZXK2DM40=
Subject key identifier: 05:9F:C1:88:44:6F:40:E4:5E:8E:B5:66:A4:9E:C7:B9:24:AC:7F:70
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185B0621D59C2A91AF54F2363EEC35569E4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BZ_BiERvQORejrVmpJ7HuSSsf3A.roa
Signing time: Sat 14 Jan 2023 13:04:58 +0000
ROA not before: Sat 14 Jan 2023 13:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:b061:5864/128 maxlen: 128
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:b0:62:1d:59:c2:a9:1a:f5:4f:23:63:ee:c3:55:69:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 14 13:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=059fc188446f40e45e8eb566a49ec7b924ac7f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4a:e6:0d:02:67:30:ba:da:75:92:17:63:5f:
5f:a5:1d:32:31:e5:7a:2b:4f:dd:67:d6:c6:f8:48:
96:52:e8:33:e6:96:f2:e7:8e:96:4e:bd:98:8d:5f:
fb:31:f7:7d:45:5d:b2:11:db:42:45:0b:85:f2:ea:
1d:b5:e8:57:6e:25:d1:77:55:75:d9:1d:6b:3e:8f:
8f:36:28:e5:02:9b:74:6c:cb:42:24:e2:90:9c:fb:
d2:ad:90:d4:58:7d:80:84:04:df:a1:ac:29:94:9a:
ea:90:9e:7c:a7:11:34:78:cc:d2:13:8c:80:54:29:
e3:5e:c4:c0:57:d3:ed:a3:c1:fe:ee:a6:8a:6a:06:
32:57:c5:fb:66:89:6f:dd:21:cc:c2:bc:30:d7:97:
c9:66:47:7a:dd:9a:ab:9e:52:68:df:bf:a2:bf:7c:
ee:4f:78:fe:02:74:d8:08:4a:32:fd:ba:d8:48:ac:
f6:e1:66:b7:4e:ae:44:b8:34:79:dc:4d:6c:d7:f4:
f4:7c:ae:b6:3f:e7:09:30:2b:c0:f7:95:9f:c0:94:
97:9b:ac:eb:8a:ae:10:c7:3c:16:fa:28:15:fd:6f:
b4:48:27:7d:02:41:30:77:57:3d:b6:01:dc:f3:65:
50:55:2b:b2:92:e6:70:56:23:60:81:98:d3:79:0f:
6b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:9F:C1:88:44:6F:40:E4:5E:8E:B5:66:A4:9E:C7:B9:24:AC:7F:70
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BZ_BiERvQORejrVmpJ7HuSSsf3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5c:6a:3f:6e:6c:9f:cf:d3:39:20:01:bc:02:3e:9f:c6:03:bd:
e5:60:5b:10:d8:3f:b0:70:c9:a8:16:b9:2d:7c:92:e7:6e:42:
05:ef:a8:af:ed:ab:11:5b:08:61:0b:d0:ce:93:70:a3:18:97:
bc:60:8a:5a:62:17:df:3f:7a:8f:36:f7:4f:59:da:a7:23:cb:
d8:98:82:33:96:0d:fe:03:e2:88:38:df:7c:04:93:54:d6:63:
b4:39:31:0c:f2:eb:07:7e:76:ec:3e:63:67:74:27:e1:a4:00:
5e:a0:8a:7b:dd:f3:cb:a6:86:57:13:14:f2:2f:a8:3a:46:3d:
36:2b:3a:e9:38:84:a4:9c:c6:10:90:cb:27:b4:d4:e5:f2:bb:
93:d1:f5:69:fe:a5:de:d9:da:f9:c6:8b:53:80:b7:c5:3a:14:
35:dc:31:11:34:c1:3b:73:8d:1d:d5:35:3a:f2:b1:1c:59:23:
98:7b:67:08:96:12:29:3b:9b:d1:99:c3:6c:18:60:5e:f5:bc:
6c:95:f8:29:a6:ce:30:03:ac:07:08:e4:93:3f:03:6b:ec:b2:
f7:4e:39:0b:23:0c:a6:16:85:aa:bc:af:6c:c4:2c:62:15:e7:
77:6d:9d:90:0e:75:25:f0:c1:8b:25:79:9f:f6:27:99:9a:de:
36:f7:8e:b8
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYWwYh1Zwqka9U8jY+7DVWnkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTE0MTMwNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTlmYzE4ODQ0NmY0MGU0NWU4ZWI1NjZhNDllYzdiOTI0YWM3ZjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkrmDQJnMLradZIXY19fpR0yMeV6
K0/dZ9bG+EiWUugz5pby546WTr2YjV/7Mfd9RV2yEdtCRQuF8uodtehXbiXRd1V1
2R1rPo+PNijlApt0bMtCJOKQnPvSrZDUWH2AhATfoawplJrqkJ58pxE0eMzSE4yA
VCnjXsTAV9Pto8H+7qaKagYyV8X7Zolv3SHMwrww15fJZkd63ZqrnlJo37+iv3zu
T3j+AnTYCEoy/brYSKz24Wa3Tq5EuDR53E1s1/T0fK62P+cJMCvA95WfwJSXm6zr
iq4QxzwW+igV/W+0SCd9AkEwd1c9tgHc82VQVSuykuZwViNggZjTeQ9ryQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAWfwYhEb0DkXo61ZqSex7kkrH9wMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvQlpfQmlFUnZRT1JlanJWbXBKN0h1U1NzZjNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFxqP25sn8/TOSABvAI+
n8YDveVgWxDYP7BwyagWuS18kuduQgXvqK/tqxFbCGEL0M6TcKMYl7xgilpiF98/
eo82909Z2qcjy9iYgjOWDf4D4og433wEk1TWY7Q5MQzy6wd+duw+Y2d0J+GkAF6g
invd88umhlcTFPIvqDpGPTYrOuk4hKScxhCQyye01OXyu5PR9Wn+pd7Z2vnGi1OA
t8U6FDXcMRE0wTtzjR3VNTrysRxZI5h7ZwiWEik7m9GZw2wYYF71vGyV+CmmzjAD
rAcI5JM/A2vssvdOOQsjDKYWhaq8r2zELGIV53dtnZAOdSXwwYsleZ/2J5ma3jb3
jrg=
-----END CERTIFICATE-----
Generated at Thu May 1 05:38:45 2025 by rpki-client