Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BsStViDo6II5_ME-2duzAE7F-O0.roa
File: BsStViDo6II5_ME-2duzAE7F-O0.roa (raw, json)
Hash identifier: CdkRiYKlTHDjSPU/Zc+SK5uyWLc4hidPw/H3rgPDMj4=
Subject key identifier: 06:C4:AD:56:20:E8:E8:82:39:FC:C1:3E:D9:DB:B3:00:4E:C5:F8:ED
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 88AAB62D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BsStViDo6II5_ME-2duzAE7F-O0.roa
Signing time: Tue 31 May 2022 08:10:13 +0000
ROA not before: Tue 31 May 2022 08:10:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:180:ff9c:1e7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2292889133 (0x88aab62d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 31 08:10:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=06c4ad5620e8e88239fcc13ed9dbb3004ec5f8ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:04:e0:0c:d2:23:1b:cd:08:1d:a5:d0:b9:44:
be:99:18:33:a4:dc:33:54:b4:f0:aa:e4:52:dd:cc:
7a:3f:a9:20:94:e4:80:ce:67:43:0a:2c:70:65:d3:
f4:d2:7a:97:41:d2:ba:bd:e3:21:75:07:80:13:a7:
7c:5a:0a:dd:d3:1b:ff:1e:8e:e2:88:d2:35:56:8a:
92:20:1e:65:b7:44:8a:66:bf:7e:96:c9:55:fd:59:
be:ea:46:62:51:1c:d5:df:e8:05:82:ab:ed:a7:b7:
34:1c:f6:8e:33:c0:21:e6:1a:97:3c:0c:88:8e:d6:
d4:c5:39:42:6a:69:d0:6c:eb:b7:9e:0b:83:32:c7:
b1:89:b8:66:18:51:07:84:17:6f:be:86:b3:c1:86:
19:cd:bb:66:e1:ac:ff:b3:81:4d:60:75:19:ba:f1:
5c:dd:a0:e2:a6:21:21:d0:05:4a:d5:39:c9:5a:c7:
f6:ff:14:ba:3e:98:f1:90:8c:60:7b:43:65:44:4c:
74:ce:9d:55:52:ea:e5:c3:ab:2b:10:f9:41:fc:c3:
30:25:9f:a4:54:fa:d2:aa:f4:b5:8a:9f:48:35:81:
da:14:2d:87:71:19:d9:93:6e:0a:28:6e:f6:59:6d:
78:4e:04:5b:58:3a:dc:ae:e5:66:ce:ba:9b:84:30:
c9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C4:AD:56:20:E8:E8:82:39:FC:C1:3E:D9:DB:B3:00:4E:C5:F8:ED
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BsStViDo6II5_ME-2duzAE7F-O0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
23:e7:44:d8:a5:df:fd:44:5d:27:13:8e:4a:13:4f:c3:fa:dd:
a7:ec:fb:4b:20:20:6c:5b:cc:56:5e:57:48:36:b0:87:3f:a6:
43:08:67:5f:11:67:12:51:79:23:35:1a:07:3b:ca:6b:91:8b:
76:c2:4a:a9:d8:d5:5b:b5:ce:bd:e3:9d:86:7a:d7:e2:bc:42:
67:3e:b7:17:83:8c:3a:f5:fc:20:4b:60:18:d8:4a:24:c3:34:
58:d5:9f:c7:50:0b:be:f5:ce:39:31:58:27:00:f9:d7:01:d2:
75:6f:43:cd:55:df:2c:17:25:78:98:57:0d:f2:11:0f:0f:5e:
05:99:13:1a:ba:84:67:e4:dd:22:d3:2e:06:e2:96:40:39:cf:
cb:f2:ac:a3:9b:a3:69:c5:c7:ef:ab:70:d4:fd:ba:88:5f:1c:
68:e1:50:bf:39:ba:5a:66:8f:73:2b:e6:19:3d:47:78:8b:75:
03:7e:e0:a7:b0:a3:a2:42:c6:82:41:08:e8:24:15:3d:38:ff:
9a:c9:f4:25:55:3b:3e:5e:bd:cd:5b:84:28:96:e9:91:df:e6:
d2:e7:c7:a1:82:fe:cc:5f:4d:7a:05:b5:62:6e:c1:16:bf:ab:
67:be:51:e5:87:75:30:f5:3a:28:74:41:03:cc:dd:c1:77:6c:
56:79:f0:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:09:15 2025 by rpki-client