Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BqmNfjcuAKTBrPUTaJcc2Gq2D0k.roa
File: BqmNfjcuAKTBrPUTaJcc2Gq2D0k.roa (raw, json)
Hash identifier: il8XVL6/Dlz9JHM0q8PFAWbPgunk/ZA2rH1QEGMO4mc=
Subject key identifier: 06:A9:8D:7E:37:2E:00:A4:C1:AC:F5:13:68:97:1C:D8:6A:B6:0F:49
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01851845A699BEF12B0FDF6F7F79B72ABBB9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BqmNfjcuAKTBrPUTaJcc2Gq2D0k.roa
Signing time: Fri 16 Dec 2022 00:11:35 +0000
ROA not before: Fri 16 Dec 2022 00:11:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:18:45:a6:99:be:f1:2b:0f:df:6f:7f:79:b7:2a:bb:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 16 00:11:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=06a98d7e372e00a4c1acf51368971cd86ab60f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:72:be:aa:71:75:73:34:23:01:52:20:57:87:
48:c5:33:af:b1:ca:6a:1e:e8:b6:6b:5a:30:83:fd:
c6:e3:29:f9:59:c9:d1:56:72:d4:fa:2a:56:40:68:
0b:ac:b4:17:bf:e7:f8:8c:9c:c5:81:c6:35:eb:df:
49:75:6e:6a:9c:22:71:ec:1e:9b:87:07:17:21:ef:
94:7e:ba:f0:cb:9b:60:27:e5:36:34:7f:9e:35:ac:
ec:35:64:f4:60:a4:70:57:27:6b:42:5a:ec:0e:54:
5f:35:ef:21:18:5a:ae:71:4f:51:76:a8:fa:f1:eb:
41:fc:57:dd:be:62:bb:de:fa:ba:9a:b0:27:98:d3:
5f:73:cf:2c:7a:bf:da:b2:8a:a2:38:50:ad:a1:bf:
a6:6e:fa:63:91:92:23:9f:b2:47:51:58:93:66:05:
d1:30:a6:40:63:ba:45:ef:98:fd:06:e3:be:69:07:
2d:34:98:bd:66:75:bb:07:1f:14:86:c8:14:d7:3b:
47:5e:35:59:17:44:68:1a:dc:79:75:da:e3:1b:e3:
4b:53:88:ae:3a:87:91:09:83:c1:fb:9f:d9:91:2c:
bc:51:ed:6f:e7:5c:1f:91:10:8c:88:97:68:48:7a:
4d:6f:24:fe:2e:c3:07:11:32:8e:58:9a:b3:28:26:
c0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A9:8D:7E:37:2E:00:A4:C1:AC:F5:13:68:97:1C:D8:6A:B6:0F:49
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BqmNfjcuAKTBrPUTaJcc2Gq2D0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
52:71:4e:46:62:fb:d0:22:10:cd:f1:8a:d7:02:49:22:7c:ce:
f8:c4:54:bf:4b:e7:11:9f:59:7c:b3:56:68:c9:7a:f0:ce:e2:
82:5a:75:cc:c4:62:8c:91:39:03:d5:b3:3b:c8:2c:20:ed:fd:
fd:69:08:2c:d2:ba:d9:7c:a8:58:c2:05:1f:ff:fd:b5:40:6c:
2d:41:f9:23:e0:d8:bd:3e:f8:66:81:e4:16:ab:f3:78:4c:76:
bd:57:ce:1c:15:19:d0:4c:a4:27:39:4e:d5:26:f1:70:7d:63:
b1:b7:cd:61:04:04:9e:d2:9e:f0:03:59:83:3d:35:60:0d:70:
20:06:f6:53:bf:e1:a7:89:e3:d6:8b:38:39:9e:c1:fb:7a:1c:
fb:a9:38:72:62:62:da:47:ca:01:38:a2:2c:3b:01:7a:86:97:
8e:c1:0a:d6:15:3f:dd:9a:50:6f:2d:f2:71:ce:2f:45:b9:9c:
78:1e:4e:1e:c1:e0:64:1e:11:f3:b8:3f:f1:16:9e:b4:69:a3:
32:aa:c0:f1:01:13:59:d4:a2:6b:b2:2c:be:08:48:e9:8f:25:
20:bb:19:69:f6:af:89:60:5b:f6:f8:37:dd:04:16:80:38:e2:
a1:79:b7:aa:1e:ee:e4:0f:fd:ed:a9:3e:b9:8c:67:94:b0:f2:
73:d6:c2:d9
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYUYRaaZvvErD99vf3m3Kru5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjE2MDAxMTM1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNmE5OGQ3ZTM3MmUwMGE0YzFhY2Y1MTM2ODk3MWNkODZhYjYwZjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXK+qnF1czQjAVIgV4dIxTOvscpq
Hui2a1owg/3G4yn5WcnRVnLU+ipWQGgLrLQXv+f4jJzFgcY1699JdW5qnCJx7B6b
hwcXIe+Ufrrwy5tgJ+U2NH+eNazsNWT0YKRwVydrQlrsDlRfNe8hGFqucU9Rdqj6
8etB/FfdvmK73vq6mrAnmNNfc88ser/asoqiOFCtob+mbvpjkZIjn7JHUViTZgXR
MKZAY7pF75j9BuO+aQctNJi9ZnW7Bx8UhsgU1ztHXjVZF0RoGtx5ddrjG+NLU4iu
OoeRCYPB+5/ZkSy8Ue1v51wfkRCMiJdoSHpNbyT+LsMHETKOWJqzKCbAOwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAapjX43LgCkwaz1E2iXHNhqtg9JMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvQnFtTmZqY3VBS1RCclBVVGFKY2MyR3EyRDBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFJxTkZi+9AiEM3xitcC
SSJ8zvjEVL9L5xGfWXyzVmjJevDO4oJadczEYoyROQPVszvILCDt/f1pCCzSutl8
qFjCBR///bVAbC1B+SPg2L0++GaB5Bar83hMdr1XzhwVGdBMpCc5TtUm8XB9Y7G3
zWEEBJ7SnvADWYM9NWANcCAG9lO/4aeJ49aLODmewft6HPupOHJiYtpHygE4oiw7
AXqGl47BCtYVP92aUG8t8nHOL0W5nHgeTh7B4GQeEfO4P/EWnrRpozKqwPEBE1nU
omuyLL4ISOmPJSC7GWn2r4lgW/b4N90EFoA44qF5t6oe7uQP/e2pPrmMZ5Sw8nPW
wtk=
-----END CERTIFICATE-----
Generated at Thu May 1 22:23:21 2025 by rpki-client