Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BcPFwrUQZcOqFa1KBu55sSD_W4I.roa
File: BcPFwrUQZcOqFa1KBu55sSD_W4I.roa (raw, json)
Hash identifier: vk8vGeguWvTY5JBV/nOXctugB++zchNb/bb9pVPJeMs=
Subject key identifier: 05:C3:C5:C2:B5:10:65:C3:AA:15:AD:4A:06:EE:79:B1:20:FF:5B:82
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184116A5797A279AA2ED37F2FB07980E364
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BcPFwrUQZcOqFa1KBu55sSD_W4I.roa
Signing time: Tue 25 Oct 2022 23:11:32 +0000
ROA not before: Tue 25 Oct 2022 23:11:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:11:6a:57:97:a2:79:aa:2e:d3:7f:2f:b0:79:80:e3:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 25 23:11:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=05c3c5c2b51065c3aa15ad4a06ee79b120ff5b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:3c:9a:08:99:48:3e:13:72:e9:4f:58:24:b3:
ce:da:14:41:6c:af:3f:f4:b4:4e:f2:58:8a:67:2a:
fa:23:d1:f2:f7:be:31:79:66:04:59:17:29:f5:ae:
c4:d3:95:95:89:9e:92:51:67:9d:50:cd:2e:5a:50:
d3:0a:bd:aa:27:e5:d1:a9:90:d7:d1:fa:8d:2b:bb:
2d:6a:f3:05:ca:04:e5:97:0d:35:a2:4a:db:70:02:
ab:30:26:1b:cb:fc:46:0d:e3:dc:47:28:7a:6b:eb:
8a:1a:3a:40:30:5f:e6:f7:2a:3e:47:e4:c3:3f:21:
e6:2a:e9:d7:e3:02:9d:a3:a7:2a:b6:a2:53:37:b5:
8f:97:7b:37:1f:f7:5b:9a:d1:b8:ba:bf:4b:24:f2:
4b:55:19:57:c1:25:20:21:79:00:50:cf:76:57:3c:
2d:30:25:18:7c:c1:5a:96:17:b6:d5:f1:6f:37:df:
7a:ac:ea:ca:68:33:9a:74:47:c7:93:56:6f:c3:95:
bc:76:ff:74:88:77:8f:cd:5d:e1:30:fa:9f:0b:2f:
3c:6c:d0:a5:f6:d5:c3:bb:23:8c:cb:ef:d9:1a:90:
44:dc:39:2f:25:d3:9d:a5:a0:f9:78:00:99:68:f9:
10:13:39:fd:a4:e0:70:96:01:8e:e7:67:c1:d1:83:
6f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C3:C5:C2:B5:10:65:C3:AA:15:AD:4A:06:EE:79:B1:20:FF:5B:82
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BcPFwrUQZcOqFa1KBu55sSD_W4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
51:09:dd:7c:82:de:ad:d4:86:ce:2c:ac:cf:f5:de:28:60:2f:
05:5d:20:c7:1c:d9:af:5a:f9:f5:cc:a3:fa:ff:4d:97:02:e9:
83:8f:91:11:74:ae:96:18:1a:69:db:a5:2a:c7:32:e4:d3:60:
87:ae:8b:a5:94:87:5c:72:a9:da:21:6a:4b:27:c4:ca:a0:12:
d9:dc:93:93:79:31:b4:95:34:c7:ef:00:b5:67:e5:09:1c:8c:
b9:d3:82:ce:2b:4d:b4:a3:ae:ab:f1:94:2a:b1:9c:3a:66:df:
7d:87:42:27:93:8a:50:a5:7e:8b:8e:6d:1c:75:cc:de:a5:04:
14:45:88:65:6a:5a:c9:59:25:54:51:bd:e4:54:e1:da:aa:d0:
b8:1f:2b:d9:f3:e8:04:df:c7:15:f5:5e:e2:fb:db:0b:c1:78:
c1:2a:93:bb:fc:dd:c7:5b:cd:33:c5:7c:e6:d5:fb:32:12:c8:
02:fa:c6:9c:2c:52:84:ea:dd:f7:3c:28:01:86:43:cc:f4:62:
b6:ff:b3:1b:ce:5d:c7:9e:ea:7e:5d:6a:a9:0d:81:15:ab:f7:
80:68:46:3a:cc:09:74:c8:d4:aa:33:25:7f:aa:73:02:9f:34:
e9:fa:b4:f8:58:29:de:42:79:48:c1:b1:5d:39:d4:47:c0:78:
9a:1e:b7:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:05:45 2025 by rpki-client