Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Bm8C_V7PFILeXcv4va6eQezoOeg.roa
File: Bm8C_V7PFILeXcv4va6eQezoOeg.roa (raw, json)
Hash identifier: EU5nkc1wQVKtdQ3tyzqPgr3zuN0Qc/sJ1bZ2buOdnPU=
Subject key identifier: 06:6F:02:FD:5E:CF:14:82:DE:5D:CB:F8:BD:AE:9E:41:EC:E8:39:E8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01851EB681C201DB217ECEB9A72163717073
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Bm8C_V7PFILeXcv4va6eQezoOeg.roa
Signing time: Sat 17 Dec 2022 06:12:35 +0000
ROA not before: Sat 17 Dec 2022 06:12:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1e:b6:81:c2:01:db:21:7e:ce:b9:a7:21:63:71:70:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 17 06:12:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=066f02fd5ecf1482de5dcbf8bdae9e41ece839e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ca:61:7e:89:12:92:bc:f2:8d:89:54:ec:30:
34:55:a1:b0:e6:01:5d:c9:51:b0:53:dc:ae:b0:b1:
a9:b1:9a:60:a8:1c:4e:f7:08:49:68:d5:93:2c:7f:
c4:61:4b:50:89:48:ee:e8:4c:10:57:b9:94:bf:99:
eb:3a:df:60:56:fa:52:f9:d6:2a:67:8b:70:99:cc:
dc:a4:79:d8:a4:ce:73:51:f5:05:d0:6d:79:b1:75:
71:90:fc:cf:df:5f:ab:85:e9:72:91:9d:7c:42:f7:
d3:37:0d:a1:1b:30:c0:86:64:65:1c:30:be:7a:46:
fc:f5:d0:a1:dd:2b:79:af:6e:fe:65:85:99:3b:22:
8e:e5:3b:61:62:40:44:ca:eb:ae:c4:66:26:a9:49:
d3:82:b6:0d:b2:a4:b0:4f:48:df:fa:79:03:3a:f9:
c3:d6:f5:54:de:ae:08:2a:73:68:58:b4:0c:d4:a3:
1e:8e:30:61:0e:25:a3:eb:bb:c6:91:a3:d7:d0:b2:
3b:7e:5d:e1:e8:f1:dd:c1:42:a1:e4:7b:f2:a3:77:
41:40:63:2a:35:b2:1d:26:67:6a:fe:f6:71:ad:3f:
78:14:d0:3e:75:9d:19:32:d8:4b:83:c0:96:a9:b3:
e8:e0:09:c1:af:8f:b4:be:59:25:cc:ea:19:70:f3:
45:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:6F:02:FD:5E:CF:14:82:DE:5D:CB:F8:BD:AE:9E:41:EC:E8:39:E8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Bm8C_V7PFILeXcv4va6eQezoOeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
14:d7:6b:25:0c:c8:43:3d:61:e6:bf:50:8f:1e:3c:ed:e5:16:
e4:63:88:f6:1b:f0:76:7f:32:52:59:6c:2b:4a:af:a5:5a:4f:
5c:9b:4b:b1:6d:7c:fe:66:a4:67:1d:56:0d:81:9e:ab:ff:ff:
8f:34:9d:2d:e3:dc:19:a2:8c:60:39:a3:39:40:6d:1e:e2:22:
fd:33:3f:01:d6:0c:33:11:01:f3:7f:b2:89:36:ef:2e:59:3d:
a8:7d:20:31:9b:15:87:24:0a:71:3c:24:31:89:e5:05:3f:60:
fe:1e:7a:ac:11:ae:0f:1b:42:bb:21:a8:e1:91:95:5c:82:c2:
8f:c8:1f:71:97:37:21:36:7e:9a:e6:d3:9a:fd:f6:ea:2a:ed:
97:5f:95:be:45:66:ed:8d:62:ec:65:13:a0:f6:ac:ca:44:71:
96:13:4e:9a:34:44:ab:9c:00:fa:1a:88:bc:52:91:31:36:96:
cd:34:00:73:46:d6:c2:0c:d6:94:a2:f2:d2:a8:c8:49:96:5c:
f9:b4:72:7b:a2:15:2f:1b:4c:71:ec:aa:2d:b8:4b:81:e8:22:
8a:6a:f7:d0:ad:72:51:0d:65:ee:85:cc:81:24:73:ab:49:d7:
d2:6e:66:1a:a1:8c:12:e1:46:31:84:c6:f6:69:11:22:63:4d:
eb:ab:25:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:45:03 2025 by rpki-client