Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BpTqPTFR9yrQLDb9BBIolhcirwg.roa
File: BpTqPTFR9yrQLDb9BBIolhcirwg.roa (raw, json)
Hash identifier: /suYTSOR0uec5EWMj0CXYLATRlovV8lZjov1JnskBac=
Subject key identifier: 06:94:EA:3D:31:51:F7:2A:D0:2C:36:FD:04:12:28:96:17:22:AF:08
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018435B39EFBC5B2ACF73A20676FD234F10F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BpTqPTFR9yrQLDb9BBIolhcirwg.roa
Signing time: Wed 02 Nov 2022 00:17:54 +0000
ROA not before: Wed 02 Nov 2022 00:17:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:35:b3:9e:fb:c5:b2:ac:f7:3a:20:67:6f:d2:34:f1:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 2 00:17:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0694ea3d3151f72ad02c36fd041228961722af08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:aa:6b:0f:ce:74:81:2f:5e:1e:78:60:94:54:
32:c1:82:c9:5e:6d:d7:5f:82:3a:74:4d:9d:82:8b:
fc:fe:8c:38:ea:13:1b:ad:81:75:20:44:60:7f:b5:
e5:f8:d0:d3:d0:e5:7f:23:db:bb:a3:30:0b:57:61:
3d:4e:15:f6:f0:8d:ab:d2:ad:aa:88:35:6d:27:e9:
d4:6e:a2:39:3f:8e:05:06:24:9f:c2:62:62:e1:b0:
e1:85:e2:8c:7f:23:b5:3c:e9:46:19:81:b4:d4:34:
07:b3:3c:0f:99:e4:6a:8d:88:07:70:9e:ab:80:a9:
1f:4b:cb:65:6b:45:b4:0b:7a:4c:8e:0f:0e:90:d4:
a3:2a:de:5e:cc:f8:42:1e:13:5d:a2:fc:15:44:9a:
13:2a:cb:87:53:82:63:e3:28:1c:d8:53:26:24:f4:
6a:9d:99:b5:7e:ef:c2:a9:4b:f0:f4:67:eb:e6:0e:
14:86:69:ee:2f:b5:b0:68:ef:74:df:19:b2:32:dd:
91:78:a7:e7:95:98:f5:c9:02:8c:ca:ef:a2:e1:25:
19:d0:4e:98:e2:2a:f1:61:91:77:58:05:d1:e0:40:
d3:16:19:cb:d3:52:13:b6:ee:34:e8:72:7a:94:c9:
a7:f3:94:2b:9d:2b:2b:f9:15:2f:68:05:a1:43:7f:
d7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:94:EA:3D:31:51:F7:2A:D0:2C:36:FD:04:12:28:96:17:22:AF:08
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BpTqPTFR9yrQLDb9BBIolhcirwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a1:48:57:c9:f2:8f:21:91:2c:90:84:d4:11:98:64:ce:f1:1e:
39:0f:72:ac:21:98:4b:47:54:4d:06:c3:77:c1:8f:7f:46:67:
95:31:8d:87:2d:11:80:1f:ef:7f:33:0e:e4:3e:09:95:1c:ca:
52:06:18:ea:c1:b6:7a:33:4f:74:5d:e1:3c:f4:24:eb:8c:1c:
03:3f:4d:89:af:11:b2:2b:99:5f:4b:a3:bd:5f:59:b2:dd:ff:
8b:f9:40:e4:20:19:ed:e4:71:c4:e4:a6:45:62:40:a3:db:63:
fe:b7:23:f2:a5:33:13:43:8f:36:81:27:3b:ec:70:56:c7:ab:
a5:8c:e7:c2:82:69:eb:5a:df:51:55:27:18:23:57:e7:fb:3b:
86:cc:c6:ba:e9:cc:3e:68:65:41:aa:50:ea:1f:4b:c6:d4:2c:
16:20:7d:45:a3:97:62:b3:fb:93:fb:a3:4a:4f:17:5a:f4:54:
2a:30:db:ff:5d:fc:02:cc:38:b5:ec:15:40:64:de:9d:ef:7d:
7b:af:88:83:aa:1f:31:fd:a0:42:17:2e:94:b1:23:5a:7a:95:
bf:23:5b:77:bc:c2:9e:39:a0:93:99:d6:04:f8:2a:78:49:0e:
a7:b9:72:6d:d4:0d:04:4d:12:7f:4f:dc:95:93:31:cf:b8:06:
2f:c6:31:90
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYQ1s577xbKs9zogZ2/SNPEPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMTAyMDAxNzU0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNjk0ZWEzZDMxNTFmNzJhZDAyYzM2ZmQwNDEyMjg5NjE3MjJhZjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKprD850gS9eHnhglFQywYLJXm3X
X4I6dE2dgov8/ow46hMbrYF1IERgf7Xl+NDT0OV/I9u7ozALV2E9ThX28I2r0q2q
iDVtJ+nUbqI5P44FBiSfwmJi4bDhheKMfyO1POlGGYG01DQHszwPmeRqjYgHcJ6r
gKkfS8tla0W0C3pMjg8OkNSjKt5ezPhCHhNdovwVRJoTKsuHU4Jj4ygc2FMmJPRq
nZm1fu/CqUvw9Gfr5g4UhmnuL7WwaO903xmyMt2ReKfnlZj1yQKMyu+i4SUZ0E6Y
4irxYZF3WAXR4EDTFhnL01ITtu406HJ6lMmn85QrnSsr+RUvaAWhQ3/XRQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAaU6j0xUfcq0Cw2/QQSKJYXIq8IMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvQnBUcVBURlI5eXJRTERiOUJCSW9saGNpcndnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKFIV8nyjyGRLJCE1BGY
ZM7xHjkPcqwhmEtHVE0Gw3fBj39GZ5UxjYctEYAf738zDuQ+CZUcylIGGOrBtnoz
T3Rd4Tz0JOuMHAM/TYmvEbIrmV9Lo71fWbLd/4v5QOQgGe3kccTkpkViQKPbY/63
I/KlMxNDjzaBJzvscFbHq6WM58KCaeta31FVJxgjV+f7O4bMxrrpzD5oZUGqUOof
S8bULBYgfUWjl2Kz+5P7o0pPF1r0VCow2/9d/ALMOLXsFUBk3p3vfXuviIOqHzH9
oEIXLpSxI1p6lb8jW3e8wp45oJOZ1gT4KnhJDqe5cm3UDQRNEn9P3JWTMc+4Bi/G
MZA=
-----END CERTIFICATE-----
Generated at Wed Apr 30 23:23:48 2025 by rpki-client