Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BfU-dl3ImNhERib75M7_OGwmIxw.roa
File: BfU-dl3ImNhERib75M7_OGwmIxw.roa (raw, json)
Hash identifier: uMQTfXPxT7AEIRA7qVycHvHXNRtcv3MeS1qNZkW3BXA=
Subject key identifier: 05:F5:3E:76:5D:C8:98:D8:44:46:26:FB:E4:CE:FF:38:6C:26:23:1C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184D13E6ED1285FAE31DE702193B087FC03
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BfU-dl3ImNhERib75M7_OGwmIxw.roa
Signing time: Fri 02 Dec 2022 05:10:40 +0000
ROA not before: Fri 02 Dec 2022 05:10:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d1:3e:6e:d1:28:5f:ae:31:de:70:21:93:b0:87:fc:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 2 05:10:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=05f53e765dc898d8444626fbe4ceff386c26231c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ae:40:0c:1f:d1:91:5d:07:1a:00:1f:16:10:
20:52:82:88:5f:b7:c7:19:2a:fd:91:33:eb:9b:f9:
40:79:b0:71:b4:ea:b9:bd:26:09:00:cf:c9:94:27:
df:0e:96:aa:66:a5:16:59:f1:e3:5e:26:a3:a0:9a:
d5:21:13:95:35:51:22:e1:e3:61:29:b6:a9:6d:11:
98:bc:ce:4c:a2:0e:6f:c6:d8:53:68:22:56:11:d0:
e1:5b:3f:12:d1:94:c8:80:ae:aa:a7:4f:6f:ed:8e:
23:57:2a:21:74:32:81:82:88:4a:25:6d:3f:d0:3a:
6b:5b:91:6e:15:b9:b3:65:39:e1:34:b3:7f:b9:42:
76:b3:2a:e3:eb:e0:b8:0f:85:88:f4:37:e9:b8:e9:
d7:15:0d:e1:11:6c:7c:ab:3c:04:e1:8a:53:56:28:
81:4a:2a:e1:b7:35:5a:18:6d:14:68:c5:d3:ac:a3:
c4:a8:b1:90:36:6d:3f:e3:98:41:7b:fa:48:e7:5c:
a4:ce:6f:b8:41:0b:bc:50:28:f3:6c:67:7c:0a:17:
8a:1b:d0:39:5c:05:e7:1c:58:4c:8c:b0:82:36:a5:
16:19:51:7f:b9:38:13:2b:7e:ae:85:23:87:7c:de:
08:96:27:a8:41:45:d4:30:89:ad:4e:49:7f:96:2d:
12:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:F5:3E:76:5D:C8:98:D8:44:46:26:FB:E4:CE:FF:38:6C:26:23:1C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BfU-dl3ImNhERib75M7_OGwmIxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
23:06:c9:28:4d:ca:4b:01:55:f3:9e:6d:97:66:2a:26:8d:2b:
37:4f:d3:4c:4b:22:8d:d9:c0:37:7a:40:f2:09:af:a0:77:74:
f3:fc:89:0d:84:9f:cb:d8:e6:3c:c2:9f:d3:23:df:78:7c:8a:
3c:7b:bd:dc:d9:d2:d6:96:f0:47:37:43:86:a6:38:90:9e:e9:
0b:1e:3f:bb:c3:d9:48:1c:d5:ef:89:d3:5a:6a:ea:b7:d1:e9:
7a:db:0a:31:b4:0e:e4:43:ef:a6:c6:44:d3:31:9a:7e:ff:2f:
42:e1:79:57:07:e2:c7:ea:30:0b:78:75:6b:db:f1:6c:dc:6c:
66:33:c3:3d:98:28:67:17:34:6f:0c:6e:75:1a:c9:2a:2d:a6:
c6:15:9d:34:fa:ab:87:91:f0:c7:5a:19:02:48:84:84:4f:6a:
bc:b9:47:00:4c:eb:77:af:ed:32:42:25:69:9c:ae:70:91:00:
8e:ac:af:90:31:5c:06:4c:e5:dd:0d:ba:b4:08:b3:78:ef:35:
0d:84:8b:77:4b:1b:99:c3:8f:d4:2e:d4:ee:54:99:f0:c8:10:
12:51:0d:56:fa:b9:e2:98:b7:33:d6:ef:e6:48:4e:77:20:0a:
10:09:a9:6e:ef:b0:aa:71:2e:22:f0:16:7c:4b:fc:b2:32:a0:
db:66:dc:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:05 2025 by rpki-client