Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BxqT_Elo3YiZY7qOBd9IBUGYUX8.roa
File: BxqT_Elo3YiZY7qOBd9IBUGYUX8.roa (raw, json)
Hash identifier: 5nt/DZ0UJOSYdy0yTry9b03/HJh86uIDkOyUxNnyQ6I=
Subject key identifier: 07:1A:93:FC:49:68:DD:88:99:63:BA:8E:05:DF:48:05:41:98:51:7F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01852B250BF42AB1D8CF83B520191D16BDB4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BxqT_Elo3YiZY7qOBd9IBUGYUX8.roa
Signing time: Mon 19 Dec 2022 16:08:46 +0000
ROA not before: Mon 19 Dec 2022 16:08:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2b:25:0b:f4:2a:b1:d8:cf:83:b5:20:19:1d:16:bd:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 19 16:08:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=071a93fc4968dd889963ba8e05df48054198517f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e3:92:db:90:7c:9d:3e:d8:60:79:fb:f3:15:
59:d5:e5:15:75:e4:5a:8a:2f:4b:04:5e:a4:cd:68:
67:61:e0:49:8f:f9:25:b8:b1:d4:5a:3a:4a:5e:44:
15:33:25:54:8a:9b:7c:53:be:ab:8b:8d:81:71:c3:
7d:b3:92:46:0c:51:4f:c4:0c:4f:a2:df:17:d4:44:
b3:8c:90:97:22:8a:14:2d:fa:d5:e5:91:61:33:51:
dc:d1:b4:42:52:d0:19:aa:92:fb:39:88:29:52:46:
e8:3c:3e:6e:3f:6f:c7:3b:0b:20:a1:ec:ac:47:03:
78:b9:9b:8c:b7:25:73:c2:53:6f:5a:73:41:9e:3e:
c7:99:05:4c:6e:cf:9f:9f:26:f2:92:ae:01:8b:02:
e0:ca:f3:2a:62:06:6f:d9:d1:05:b7:c7:f6:62:d8:
4e:b9:d8:a9:18:cb:35:d0:e8:1d:8a:dc:a3:72:38:
87:1f:5e:43:99:e7:64:4b:18:7c:fe:f1:e0:bd:0e:
3a:b3:e3:03:1d:00:93:51:12:00:35:32:ea:ed:73:
65:4c:de:ac:36:e6:d9:d7:93:53:13:21:3a:2c:3e:
65:b4:68:f2:f6:28:85:b5:5d:b5:06:08:3c:56:45:
b5:b2:a8:25:b6:86:fc:0b:d7:ca:26:88:c8:9a:45:
41:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:1A:93:FC:49:68:DD:88:99:63:BA:8E:05:DF:48:05:41:98:51:7F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BxqT_Elo3YiZY7qOBd9IBUGYUX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
19:72:08:fa:05:81:62:24:75:f8:8d:e3:9f:b4:ed:41:c8:53:
f0:a6:a1:35:16:1d:f4:49:f1:5a:e7:ef:f6:08:13:d4:2e:29:
54:df:b1:ca:8f:2b:6f:54:29:ad:c7:d0:da:96:27:71:e5:f2:
b0:45:0e:67:7e:69:dc:9d:39:f1:5e:15:3c:22:62:e0:54:c7:
4b:ec:2b:85:66:cf:a0:99:bc:d5:c7:ce:ee:44:db:eb:2d:5e:
7a:1f:71:dd:81:25:c1:51:e2:e1:00:b6:bb:81:9e:22:d5:7b:
a2:3d:38:ca:5e:72:7e:43:ce:f4:45:a4:ab:c9:2a:2c:ae:14:
01:80:18:e3:25:5a:5f:18:7c:6b:b4:65:3a:75:0e:77:7f:2c:
44:8d:df:85:f4:95:85:e3:5f:4a:92:6c:05:08:5d:37:91:24:
d3:4b:c0:47:6f:4d:2a:df:a5:6b:32:43:ed:42:fb:da:71:15:
bf:f6:dd:b4:9a:c1:c1:9f:a4:93:f6:ed:92:88:c8:e5:67:28:
93:b5:af:57:36:21:4f:c4:f5:bd:94:7a:31:4c:45:6b:ad:5c:
cb:d2:bb:44:7e:dc:94:e2:3e:6a:c1:38:e1:32:fc:21:da:57:
b7:c8:37:ef:6a:b6:68:83:a0:84:40:54:3e:e8:a9:e1:2c:47:
02:f8:07:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:02:29 2025 by rpki-client