Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bFsPA-4rPJPSnoX5ce1myPKt9To.roa
File: bFsPA-4rPJPSnoX5ce1myPKt9To.roa (raw, json)
Hash identifier: vs5rZ9HzrUN5e0BqIsp3EsIUjkbbLufhZWcs3j50sq4=
Subject key identifier: 6C:5B:0F:03:EE:2B:3C:93:D2:9E:85:F9:71:ED:66:C8:F2:AD:F5:3A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 723B11DF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bFsPA-4rPJPSnoX5ce1myPKt9To.roa
Signing time: Sun 13 Mar 2022 16:09:25 +0000
ROA not before: Sun 13 Mar 2022 16:09:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1916473823 (0x723b11df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 13 16:09:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c5b0f03ee2b3c93d29e85f971ed66c8f2adf53a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c1:50:1d:83:29:79:1c:fe:6f:01:e8:25:a4:
24:22:bc:f8:c2:68:34:74:c4:46:fa:a9:92:7a:a9:
fc:80:8a:4d:29:c0:69:97:af:10:0d:ce:bd:6c:ce:
85:eb:22:17:9f:bf:22:d0:1a:b8:1d:3c:19:42:21:
20:72:8e:56:72:51:0e:ee:56:5c:25:78:64:90:7a:
d2:22:1d:50:2b:af:d5:45:31:d7:4a:60:c1:cb:fa:
03:9b:7d:a6:8b:73:41:dc:00:a1:46:e1:78:d5:00:
b6:f2:3c:e0:c9:a8:f1:9e:63:c0:a0:ec:56:a4:b8:
38:67:89:5f:8e:78:34:4b:24:a8:d7:51:6f:8d:9f:
5e:08:ac:bc:71:e0:40:f6:83:8c:a4:0d:74:cd:90:
e6:43:bc:42:8d:9e:da:ae:a8:f2:10:15:b4:5a:9b:
69:c6:65:6c:c8:62:e8:21:fd:1b:23:03:1d:4b:91:
c5:16:4f:23:7d:3d:dd:ac:50:5a:86:0d:70:a8:48:
07:c3:6b:b8:95:9a:7d:fc:73:37:ad:0c:69:b4:27:
53:a2:86:f7:46:37:91:ea:2f:ba:f1:5b:27:b5:e2:
b5:6b:34:f1:59:cd:76:03:ce:a1:25:2a:45:e8:87:
19:de:dc:10:2c:8f:ee:00:2e:41:a8:81:cd:9c:a1:
13:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:5B:0F:03:EE:2B:3C:93:D2:9E:85:F9:71:ED:66:C8:F2:AD:F5:3A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bFsPA-4rPJPSnoX5ce1myPKt9To.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
71:ac:07:67:13:e8:7a:ca:f0:46:a7:b0:fb:10:61:63:05:f8:
c9:a7:d0:20:2d:7a:bc:0f:a0:f0:59:54:00:7f:52:7a:bc:a7:
3e:1c:48:0e:4e:e9:68:4b:55:1a:49:3d:b5:47:ec:4e:ef:51:
da:ea:7e:6d:fd:d7:38:f6:f4:1d:b7:b4:d0:84:54:1b:45:03:
0c:8a:85:aa:1c:2c:9b:96:8e:eb:89:be:6e:13:ce:a3:71:f4:
88:14:c7:ad:d1:c8:fb:fe:fc:76:f1:fd:55:7c:68:20:b5:e9:
3d:69:d8:6b:e8:3f:94:ca:eb:3c:3e:eb:34:16:73:56:bc:35:
82:f9:b3:a7:ae:0c:4d:e2:e9:ef:25:62:28:98:bc:bc:ab:ac:
05:80:f5:40:71:c3:5d:26:b5:9f:28:c4:c1:c5:c1:cb:5c:f5:
72:f1:e0:e8:44:a1:93:51:a6:26:d3:fc:57:d9:e9:5f:90:f5:
b7:0d:0e:e1:2a:25:0a:98:fa:f7:5d:df:cc:dc:9a:bd:0a:b3:
c4:07:73:b2:20:ea:86:c2:f9:81:16:29:96:69:ee:e1:8f:bc:
ff:19:c7:44:bc:04:19:d2:c0:c6:da:63:c2:c0:7a:8c:4e:98:
79:0f:47:54:a1:c5:f6:4b:f1:b6:a8:1a:6e:3e:cf:e2:6e:c9:
e8:51:c6:6e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEcjsR3zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDMx
MzE2MDkyNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmM1YjBmMDNlZTJi
M2M5M2QyOWU4NWY5NzFlZDY2YzhmMmFkZjUzYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL/BUB2DKXkc/m8B6CWkJCK8+MJoNHTERvqpknqp/ICKTSnA
aZevEA3OvWzOhesiF5+/ItAauB08GUIhIHKOVnJRDu5WXCV4ZJB60iIdUCuv1UUx
10pgwcv6A5t9potzQdwAoUbheNUAtvI84Mmo8Z5jwKDsVqS4OGeJX454NEskqNdR
b42fXgisvHHgQPaDjKQNdM2Q5kO8Qo2e2q6o8hAVtFqbacZlbMhi6CH9GyMDHUuR
xRZPI3093axQWoYNcKhIB8NruJWaffxzN60MabQnU6KG90Y3keovuvFbJ7XitWs0
8VnNdgPOoSUqReiHGd7cECyP7gAuQaiBzZyhE3sCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBRsWw8D7is8k9Kehflx7WbI8q31OjAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L2JGc1BBLTRyUEpQU25vWDVjZTFteVBLdDlUby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQBxrAdnE+h6yvBGp7D7EGFjBfjJp9AgLXq8D6Dw
WVQAf1J6vKc+HEgOTuloS1UaST21R+xO71Ha6n5t/dc49vQdt7TQhFQbRQMMioWq
HCyblo7rib5uE86jcfSIFMet0cj7/vx28f1VfGggtek9adhr6D+Uyus8Pus0FnNW
vDWC+bOnrgxN4unvJWIomLy8q6wFgPVAccNdJrWfKMTBxcHLXPVy8eDoRKGTUaYm
0/xX2elfkPW3DQ7hKiUKmPr3Xd/M3Jq9CrPEB3OyIOqGwvmBFimWae7hj7z/GcdE
vAQZ0sDG2mPCwHqMTph5D0dUocX2S/G2qBpuPs/ibsnoUcZu
-----END CERTIFICATE-----
Generated at Thu May 1 11:37:22 2025 by rpki-client