Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Bhyg__Za5aUcF40-Ar4w24X5Uic.roa
File: Bhyg__Za5aUcF40-Ar4w24X5Uic.roa (raw, json)
Hash identifier: pxc4pRS+ab9uQUKbuZGc0jq2BYu1gQOBFYrss63FQp8=
Subject key identifier: 06:1C:A0:FF:F6:5A:E5:A5:1C:17:8D:3E:02:BE:30:DB:85:F9:52:27
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018233207C87941D8B2292DB120DC2CD9D9C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Bhyg__Za5aUcF40-Ar4w24X5Uic.roa
Signing time: Mon 25 Jul 2022 02:12:23 +0000
ROA not before: Mon 25 Jul 2022 02:12:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:33:20:7c:87:94:1d:8b:22:92:db:12:0d:c2:cd:9d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 25 02:12:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=061ca0fff65ae5a51c178d3e02be30db85f95227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d4:61:68:44:f1:c6:e9:cc:e2:64:e2:2c:f1:
36:c1:1b:9f:a2:c6:7c:25:72:19:dd:f0:0d:92:15:
f0:a3:0d:d0:28:ba:57:00:c4:e9:10:11:7b:95:21:
ab:e7:c4:6f:cf:b0:47:76:e9:8d:0d:26:71:3e:3e:
fc:5e:ad:37:6f:3b:ec:8e:cf:02:b7:3c:14:9d:02:
bb:74:80:2e:18:e4:6c:f2:7a:da:90:59:55:b0:d5:
c4:81:d6:57:4b:ce:6a:6a:f2:ec:b2:62:f9:69:ec:
e6:dc:47:16:ec:ba:fd:83:93:73:4c:06:0a:fe:42:
27:e8:07:21:a8:e9:9c:8f:e4:59:a5:7f:de:28:4d:
09:d2:ec:74:49:e5:30:80:c3:ba:76:d4:aa:b6:3e:
a3:80:4d:9c:d1:8c:dd:7d:4c:aa:34:c1:bf:e3:5b:
c6:5a:7a:e1:24:b5:a0:b0:4e:ca:e0:35:f6:24:9c:
bb:3c:cd:d8:8b:bf:70:43:3b:80:97:54:7b:a8:d2:
62:b9:10:8b:f0:df:f5:ac:b9:57:57:25:8c:69:25:
c8:c9:ef:37:e8:72:b6:42:34:d9:b5:a8:00:e9:5b:
a1:c0:21:9c:01:34:4e:71:26:a3:41:54:73:ac:66:
90:5b:eb:fb:95:fe:42:c0:9c:8c:73:01:c2:2b:fd:
fd:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:1C:A0:FF:F6:5A:E5:A5:1C:17:8D:3E:02:BE:30:DB:85:F9:52:27
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Bhyg__Za5aUcF40-Ar4w24X5Uic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
20:b1:0c:03:28:b3:c9:7c:f6:b8:97:08:bf:94:0c:b2:bb:0b:
83:d9:fa:33:5b:a3:78:56:98:f4:e1:4d:02:74:d2:73:63:72:
7a:bc:6a:ae:0e:09:cc:d6:ef:e2:80:16:1d:62:94:83:1f:77:
d8:6e:a3:93:44:0b:c9:4a:c1:45:2a:05:af:21:16:e9:c4:a3:
9f:7b:41:ec:a0:f1:42:2f:c6:f4:df:90:46:03:67:f3:0f:26:
76:e3:e2:a1:f3:da:1c:bd:00:98:1b:6d:b0:f7:6b:1d:08:5d:
96:c9:fa:65:b1:bd:ad:31:1b:06:5d:e6:ce:09:49:31:39:c4:
34:c8:c3:4b:9c:68:b9:9c:04:27:65:3a:31:c4:18:2d:2e:51:
28:0f:d6:57:01:b7:89:f8:a3:72:93:95:87:7f:50:a2:e0:76:
f2:d1:17:79:2e:51:75:b1:df:d5:05:e4:e4:a9:db:24:47:de:
10:29:77:26:2e:59:0a:3b:a2:7b:5a:06:de:36:40:ad:74:14:
47:78:01:47:e1:cd:f2:0c:c0:4c:36:cb:7f:3e:69:21:ef:76:
29:bf:db:66:33:da:1a:3b:30:ba:2a:97:48:4e:d5:33:0a:70:
c9:11:06:57:24:6a:c1:ed:0f:32:2e:09:cd:a2:70:30:8c:32:
18:ee:d9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:05:03 2025 by rpki-client