Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BeDIz1I6BgmMz76d0SJet27i0z0.roa
File: BeDIz1I6BgmMz76d0SJet27i0z0.roa (raw, json)
Hash identifier: Hjyflh+ERsXUfymPHPYl25URf/GEG/XYk+PtxOBfkXg=
Subject key identifier: 05:E0:C8:CF:52:3A:06:09:8C:CF:BE:9D:D1:22:5E:B7:6E:E2:D3:3D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184E04722F925509B8AA9675391C2180018
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BeDIz1I6BgmMz76d0SJet27i0z0.roa
Signing time: Mon 05 Dec 2022 03:14:29 +0000
ROA not before: Mon 05 Dec 2022 03:14:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e0:47:22:f9:25:50:9b:8a:a9:67:53:91:c2:18:00:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 5 03:14:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=05e0c8cf523a06098ccfbe9dd1225eb76ee2d33d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:43:e6:f0:3a:4e:f2:ba:1a:7c:61:92:72:11:
7b:9f:0b:58:3b:b4:ec:47:60:26:52:1c:8d:83:11:
2c:ed:70:9d:9d:7d:e1:7f:7a:7c:4b:a5:2b:e8:fd:
ca:73:b8:68:bd:05:68:9e:62:58:90:7f:d6:82:02:
91:56:c5:fc:53:cd:59:db:d9:a3:0a:09:d1:c8:7a:
df:ec:4f:ff:f3:49:1e:91:3e:02:c2:a6:b1:c5:ff:
06:e4:91:21:3d:16:67:6b:5f:2f:33:24:dd:57:60:
10:a3:77:ef:0b:c8:ae:fe:42:c7:f8:8e:2c:c8:7f:
1b:77:6e:34:da:c8:b1:43:94:7c:6c:fa:89:8a:7f:
f1:83:8e:22:1d:e4:f0:72:80:53:06:a6:ec:9b:c4:
26:64:79:55:e1:40:32:34:85:29:24:58:c2:ea:8c:
73:48:78:32:75:66:1a:49:12:c1:8c:ef:90:e0:45:
d4:95:a7:34:56:e9:fa:6f:88:44:bc:96:ff:d2:03:
dd:ff:16:25:22:54:41:70:b6:e6:c0:03:43:91:0e:
8d:46:cd:4f:0b:5f:5e:31:60:6a:6d:2a:8a:8a:68:
33:ec:4b:53:54:c8:5e:30:7e:16:e1:93:1d:c5:8d:
5f:f1:a5:30:e0:42:bf:bb:4b:98:7d:a6:1c:74:66:
23:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E0:C8:CF:52:3A:06:09:8C:CF:BE:9D:D1:22:5E:B7:6E:E2:D3:3D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BeDIz1I6BgmMz76d0SJet27i0z0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
21:d1:7f:85:3c:66:92:9c:8b:72:36:da:2b:6f:36:9a:82:cc:
73:4e:2b:4c:17:ff:95:ae:ab:06:ea:46:4e:a5:14:6f:66:2b:
76:f2:1e:41:c4:97:35:d9:fd:df:0f:cf:35:c0:58:3a:b7:55:
18:c3:ea:fe:6d:d9:f8:bb:54:d0:23:f5:0e:d4:57:ea:88:9e:
62:fd:dc:67:f0:9e:4e:d8:9b:cc:52:eb:95:73:45:1f:0b:89:
21:3f:aa:e5:8e:71:aa:55:b8:40:fb:4d:59:a7:c2:8c:c2:94:
e1:8e:3a:32:46:96:7c:a0:89:99:e8:72:36:96:f3:81:58:5a:
70:5c:ef:52:80:64:17:81:c9:a2:98:b1:23:8c:4a:10:de:51:
61:35:16:8a:ce:57:e1:c0:99:20:4e:a3:df:eb:c9:75:f6:20:
5b:d1:3a:5a:f2:5b:21:a2:4a:f0:a6:a3:95:d0:39:df:8f:1c:
7d:e7:89:bc:cf:4f:b0:06:f4:99:64:76:a5:c7:cc:43:da:ff:
47:b5:93:9d:a9:d9:f9:e0:59:c9:9d:43:81:3d:6f:e2:26:c1:
d0:37:61:df:c8:b0:ae:db:f3:b7:60:1a:a8:9d:c1:20:78:47:
46:e2:06:93:f9:4f:f7:43:c6:ef:46:8d:5b:3f:56:68:48:ba:
1e:b3:85:c8
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYTgRyL5JVCbiqlnU5HCGAAYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjA1MDMxNDI5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNWUwYzhjZjUyM2EwNjA5OGNjZmJlOWRkMTIyNWViNzZlZTJkMzNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0Pm8DpO8roafGGSchF7nwtYO7Ts
R2AmUhyNgxEs7XCdnX3hf3p8S6Ur6P3Kc7hovQVonmJYkH/WggKRVsX8U81Z29mj
CgnRyHrf7E//80kekT4Cwqaxxf8G5JEhPRZna18vMyTdV2AQo3fvC8iu/kLH+I4s
yH8bd2402sixQ5R8bPqJin/xg44iHeTwcoBTBqbsm8QmZHlV4UAyNIUpJFjC6oxz
SHgydWYaSRLBjO+Q4EXUlac0Vun6b4hEvJb/0gPd/xYlIlRBcLbmwANDkQ6NRs1P
C19eMWBqbSqKimgz7EtTVMheMH4W4ZMdxY1f8aUw4EK/u0uYfaYcdGYjcwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAXgyM9SOgYJjM++ndEiXrdu4tM9MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvQmVESXoxSTZCZ21Nejc2ZDBTSmV0MjdpMHowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACHRf4U8ZpKci3I22itv
NpqCzHNOK0wX/5WuqwbqRk6lFG9mK3byHkHElzXZ/d8PzzXAWDq3VRjD6v5t2fi7
VNAj9Q7UV+qInmL93Gfwnk7Ym8xS65VzRR8LiSE/quWOcapVuED7TVmnwozClOGO
OjJGlnygiZnocjaW84FYWnBc71KAZBeByaKYsSOMShDeUWE1ForOV+HAmSBOo9/r
yXX2IFvROlryWyGiSvCmo5XQOd+PHH3nibzPT7AG9JlkdqXHzEPa/0e1k52p2fng
WcmdQ4E9b+ImwdA3Yd/IsK7b87dgGqidwSB4R0biBpP5T/dDxu9GjVs/VmhIuh6z
hcg=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:50:55 2025 by rpki-client