Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bUNIryxy3I7bH1s5lFqqtCutClo.roa
File: bUNIryxy3I7bH1s5lFqqtCutClo.roa (raw, json)
Hash identifier: qLA+SACUomt0g65pUnr/b4qKUw/bgDTsuIeFiE0mofg=
Subject key identifier: 6D:43:48:AF:2C:72:DC:8E:DB:1F:5B:39:94:5A:AA:B4:2B:AD:0A:5A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187F19BFFF7C5A33E0277FAB1C0D4CA443B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bUNIryxy3I7bH1s5lFqqtCutClo.roa
Signing time: Sat 06 May 2023 15:09:05 +0000
ROA not before: Sat 06 May 2023 15:09:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:f1:9b:ff:f7:c5:a3:3e:02:77:fa:b1:c0:d4:ca:44:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 6 15:09:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d4348af2c72dc8edb1f5b39945aaab42bad0a5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:29:8e:b4:24:41:d8:1f:77:3b:5a:7c:21:64:
d5:1b:b2:59:53:3d:a8:58:c7:e0:41:9d:0a:8e:c1:
22:31:40:45:68:99:73:95:d3:72:31:71:f6:02:5b:
70:76:05:68:a3:42:dc:d8:46:df:b9:b4:a4:c3:80:
b1:a8:dd:80:b1:9e:4f:68:8c:21:1c:32:5d:49:f4:
68:84:fb:28:7c:da:89:59:17:2c:f1:88:77:23:d8:
d9:4a:0d:bb:ae:a6:7e:b7:f6:d6:93:c2:5b:0e:7a:
f5:dc:93:d9:a7:b7:78:30:5c:cd:d3:17:96:c5:0b:
b8:f6:53:d2:de:56:47:3c:1d:11:8f:88:15:f4:74:
c7:47:18:ad:2a:e4:e1:5d:84:c4:71:e9:f8:f3:20:
b3:4e:af:17:5c:3f:2c:4b:25:29:34:33:87:1b:23:
80:6b:ce:92:3e:74:f4:6b:47:e1:4b:0d:fe:36:37:
ac:06:06:ef:11:8c:7b:00:4d:da:eb:57:3f:87:f1:
75:33:c8:d4:da:2d:97:00:c3:5f:9c:75:96:8a:10:
f7:20:fa:a4:98:7e:c9:9b:85:60:0f:00:d0:67:ca:
49:25:35:21:db:7a:4e:ee:c2:0a:dc:4f:4e:3c:49:
16:4b:0f:7b:8f:66:e5:53:0c:e7:d4:13:af:7e:12:
a3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:43:48:AF:2C:72:DC:8E:DB:1F:5B:39:94:5A:AA:B4:2B:AD:0A:5A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bUNIryxy3I7bH1s5lFqqtCutClo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
aa:fc:f2:8f:68:f6:57:19:07:5d:f4:c3:d7:49:c3:91:4c:54:
44:49:2c:7c:1a:75:70:c9:cb:ab:79:5c:8f:2a:73:60:28:6d:
f1:d1:7f:a9:39:8a:8c:16:73:bf:20:f1:00:bc:73:15:4e:c3:
bd:37:39:e3:6b:0f:24:19:63:e9:45:1e:23:af:11:92:ea:59:
fd:c7:c3:fa:3a:5f:af:47:28:d7:4e:36:67:7a:52:c6:1d:35:
17:dc:f6:8c:32:53:f7:28:27:d6:a3:a7:ff:9b:37:31:2e:16:
23:27:af:ef:db:31:52:f7:8f:7f:f4:c5:ee:c0:32:b8:88:d5:
2b:19:ec:b2:66:66:34:7c:19:8b:a9:99:2c:72:4c:fb:d5:7e:
de:14:0a:21:7f:21:e0:01:6a:88:5a:5c:3f:05:4d:f6:f3:83:
fb:d4:8f:02:2f:74:53:cf:f4:b4:aa:13:46:4f:48:cb:29:0c:
59:af:c6:6d:41:d9:a6:33:c6:4a:83:0d:1c:d1:91:60:12:59:
21:ed:6e:f8:f9:7c:92:81:5b:10:38:8a:02:2d:45:f6:e0:c9:
50:66:d5:92:a4:69:f9:ed:94:70:89:6d:e0:37:fd:00:94:5c:
8b:22:c7:81:7e:4d:59:8c:ce:69:21:e0:f6:dc:34:50:8a:82:
09:7d:74:7b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYfxm//3xaM+Anf6scDUykQ7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTA2MTUwOTA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZDQzNDhhZjJjNzJkYzhlZGIxZjViMzk5NDVhYWFiNDJiYWQwYTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApymOtCRB2B93O1p8IWTVG7JZUz2o
WMfgQZ0KjsEiMUBFaJlzldNyMXH2AltwdgVoo0Lc2EbfubSkw4CxqN2AsZ5PaIwh
HDJdSfRohPsofNqJWRcs8Yh3I9jZSg27rqZ+t/bWk8JbDnr13JPZp7d4MFzN0xeW
xQu49lPS3lZHPB0Rj4gV9HTHRxitKuThXYTEcen48yCzTq8XXD8sSyUpNDOHGyOA
a86SPnT0a0fhSw3+NjesBgbvEYx7AE3a61c/h/F1M8jU2i2XAMNfnHWWihD3IPqk
mH7Jm4VgDwDQZ8pJJTUh23pO7sIK3E9OPEkWSw97j2blUwzn1BOvfhKj2wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFG1DSK8sctyO2x9bOZRaqrQrrQpaMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvYlVOSXJ5eHkzSTdiSDFzNWxGcXF0Q3V0Q2xvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKr88o9o9lcZB130w9dJ
w5FMVERJLHwadXDJy6t5XI8qc2AobfHRf6k5iowWc78g8QC8cxVOw703OeNrDyQZ
Y+lFHiOvEZLqWf3Hw/o6X69HKNdONmd6UsYdNRfc9owyU/coJ9ajp/+bNzEuFiMn
r+/bMVL3j3/0xe7AMriI1SsZ7LJmZjR8GYupmSxyTPvVft4UCiF/IeABaohaXD8F
Tfbzg/vUjwIvdFPP9LSqE0ZPSMspDFmvxm1B2aYzxkqDDRzRkWASWSHtbvj5fJKB
WxA4igItRfbgyVBm1ZKkafntlHCJbeA3/QCUXIsix4F+TVmMzmkh4PbcNFCKggl9
dHs=
-----END CERTIFICATE-----
Generated at Thu May 1 12:01:50 2025 by rpki-client