Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BxWyvj00HW_79dKxJmcSb1j15PA.roa
File: BxWyvj00HW_79dKxJmcSb1j15PA.roa (raw, json)
Hash identifier: GV2JgG4jIsfFQfWXUyUToCKpFZEd8dHq9TrigxwL8Og=
Subject key identifier: 07:15:B2:BE:3D:34:1D:6F:FB:F5:D2:B1:26:67:12:6F:58:F5:E4:F0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A22B6817B2015B72C89C80C405A829770
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BxWyvj00HW_79dKxJmcSb1j15PA.roa
Signing time: Wed 23 Aug 2023 14:05:00 +0000
ROA not before: Wed 23 Aug 2023 14:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:178d:7ed9/128 maxlen: 128
2001:67c:64:ffff:0:18a:22b5:c721/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:22:b6:81:7b:20:15:b7:2c:89:c8:0c:40:5a:82:97:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 23 14:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0715b2be3d341d6ffbf5d2b12667126f58f5e4f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:90:ab:f1:23:6a:4b:18:ea:4f:d7:e1:09:8c:
5a:fc:7d:29:79:0e:59:ad:a5:d4:b1:b4:2c:a4:91:
d9:2d:d4:77:7c:68:89:18:c1:3b:98:e1:a2:ce:02:
e9:b1:a8:03:61:7d:49:cc:a9:b0:40:cc:14:e7:01:
49:39:a5:24:2a:ac:f8:bf:33:8e:77:3b:fc:90:e9:
35:77:1c:b1:9b:53:96:44:19:a9:17:79:ce:b5:ce:
dd:0d:55:3d:7e:e7:5f:a7:5a:11:3e:5e:23:16:9e:
b6:ff:d7:f6:5b:fe:e8:33:27:d3:5c:80:f8:a7:fd:
33:2f:52:e8:ae:be:05:85:d0:b6:74:6e:85:c7:1d:
69:d6:bc:01:bf:49:70:f4:25:6f:73:c6:dc:6e:55:
3b:22:ef:ba:cd:d6:e3:32:7e:29:33:69:05:ef:0d:
20:06:25:47:61:17:9e:d0:3d:23:32:c5:72:6e:b4:
9e:cc:e2:3c:5a:9f:ce:c0:cf:33:12:96:bf:c2:e0:
2e:1f:4a:19:37:f0:2c:7e:5e:21:25:cc:06:c9:60:
3e:8e:cd:1e:c5:ad:72:ad:0f:f1:34:97:18:fa:d5:
3e:3a:2c:2e:67:4a:78:df:a9:bf:ee:f8:bf:e9:55:
dc:49:d0:67:36:a6:fd:f9:5f:1d:ce:4c:c5:0d:15:
ed:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:15:B2:BE:3D:34:1D:6F:FB:F5:D2:B1:26:67:12:6F:58:F5:E4:F0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BxWyvj00HW_79dKxJmcSb1j15PA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a5:c6:10:53:ca:aa:c7:5e:13:6d:1b:25:17:3f:36:e9:d3:56:
34:bb:c8:3f:d1:d8:ee:29:2b:2f:de:90:21:47:73:fa:37:b2:
30:83:43:82:2f:f1:99:aa:69:e2:22:37:4f:10:f2:92:c5:2f:
2e:21:e1:80:98:9a:7c:dd:b1:d3:78:d9:22:8f:5f:45:2e:57:
da:7e:9d:7d:79:d7:a7:53:7e:62:de:e7:3d:11:22:d6:ac:5f:
ca:0c:00:5c:d3:99:be:a2:c0:74:3e:11:0b:a6:7c:0e:87:47:
0b:28:05:6e:ff:a0:d3:f6:54:da:d9:ca:3a:48:f3:cc:c3:83:
03:71:fe:90:d3:f0:8f:b4:0a:97:c3:c0:c4:93:5c:f9:86:50:
ec:94:65:45:d0:40:57:a9:b4:5b:43:ed:e3:b1:18:70:69:be:
47:4a:42:a6:76:01:c4:61:f2:7f:cc:60:0b:b4:19:26:42:56:
26:48:92:53:3f:75:99:61:c7:5d:01:42:b8:96:b6:e3:c9:a0:
a2:e1:d7:97:7c:4d:d2:75:fb:4f:ce:10:21:93:16:9d:3d:df:
e4:d9:59:db:6e:0e:aa:96:37:b5:1c:70:ce:04:2a:d9:bf:5e:
1e:bc:7f:55:f1:57:ea:b3:82:c0:98:4d:73:07:61:9b:d6:1a:
c3:6c:f3:06
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYoitoF7IBW3LInIDEBagpdwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODIzMTQwNTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzE1YjJiZTNkMzQxZDZmZmJmNWQyYjEyNjY3MTI2ZjU4ZjVlNGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZCr8SNqSxjqT9fhCYxa/H0peQ5Z
raXUsbQspJHZLdR3fGiJGME7mOGizgLpsagDYX1JzKmwQMwU5wFJOaUkKqz4vzOO
dzv8kOk1dxyxm1OWRBmpF3nOtc7dDVU9fudfp1oRPl4jFp62/9f2W/7oMyfTXID4
p/0zL1Lorr4FhdC2dG6Fxx1p1rwBv0lw9CVvc8bcblU7Iu+6zdbjMn4pM2kF7w0g
BiVHYRee0D0jMsVybrSezOI8Wp/OwM8zEpa/wuAuH0oZN/Asfl4hJcwGyWA+js0e
xa1yrQ/xNJcY+tU+OiwuZ0p436m/7vi/6VXcSdBnNqb9+V8dzkzFDRXtfwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAcVsr49NB1v+/XSsSZnEm9Y9eTwMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvQnhXeXZqMDBIV183OWRLeEptY1NiMWoxNVBBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKXGEFPKqsdeE20bJRc/
NunTVjS7yD/R2O4pKy/ekCFHc/o3sjCDQ4Iv8ZmqaeIiN08Q8pLFLy4h4YCYmnzd
sdN42SKPX0UuV9p+nX1516dTfmLe5z0RItasX8oMAFzTmb6iwHQ+EQumfA6HRwso
BW7/oNP2VNrZyjpI88zDgwNx/pDT8I+0CpfDwMSTXPmGUOyUZUXQQFeptFtD7eOx
GHBpvkdKQqZ2AcRh8n/MYAu0GSZCViZIklM/dZlhx10BQriWtuPJoKLh15d8TdJ1
+0/OECGTFp093+TZWdtuDqqWN7UccM4EKtm/Xh68f1XxV+qzgsCYTXMHYZvWGsNs
8wY=
-----END CERTIFICATE-----
Generated at Thu May 1 11:34:55 2025 by rpki-client