Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rsBgeLAdOYsyD8sBhlDOv8fg9i4.roa
File: rsBgeLAdOYsyD8sBhlDOv8fg9i4.roa (raw, json)
Hash identifier: ynqaB79g8ds3oz4vKCYh7k/ooE9v6djOjXm+Do4mffE=
Subject key identifier: AE:C0:60:78:B0:1D:39:8B:32:0F:CB:01:86:50:CE:BF:C7:E0:F6:2E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01867308BBF434FB9531EE53CCC92A9C95B2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rsBgeLAdOYsyD8sBhlDOv8fg9i4.roa
Signing time: Tue 21 Feb 2023 08:13:17 +0000
ROA not before: Tue 21 Feb 2023 08:13:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:73:08:bb:f4:34:fb:95:31:ee:53:cc:c9:2a:9c:95:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 21 08:13:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aec06078b01d398b320fcb018650cebfc7e0f62e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:98:82:d6:e1:73:2f:39:2f:3b:79:24:a2:b2:
23:b4:27:23:a5:ee:30:4d:9d:1e:7d:31:4d:71:96:
37:8e:18:d0:38:c7:13:25:1c:27:65:90:4e:1e:a5:
c5:ef:71:bf:31:3e:86:8d:fa:4e:63:b7:9d:f6:14:
68:2c:84:05:a8:06:eb:f8:42:44:18:88:95:f1:04:
89:6c:7b:ad:17:a0:c5:d1:1c:43:33:26:fa:0b:dc:
20:ba:5c:ce:81:ed:bd:cd:95:d9:e8:e2:5f:da:98:
79:af:a0:91:dd:85:e6:2e:9f:92:cc:f6:1e:d7:45:
84:64:a9:d4:db:fb:90:8d:fb:7a:b7:2a:bd:52:1e:
e8:4f:f4:80:a8:1f:b1:50:1b:31:2f:2a:59:1e:86:
f3:05:7a:de:86:1f:49:fe:4e:49:8b:ef:66:08:82:
74:bd:ce:2f:21:4e:51:5b:25:2e:48:8e:e9:23:80:
7b:12:56:31:df:a7:85:ba:5f:94:47:ce:5d:c5:ce:
a9:89:24:2c:04:bd:7f:e4:7c:b4:90:2d:d6:6c:47:
0c:9a:9d:75:b3:8c:c8:7b:28:41:d1:67:4b:63:c3:
fb:0c:ad:5e:20:e5:15:ce:27:8c:d5:97:25:05:8a:
84:14:cc:c0:74:73:32:fb:b7:da:54:c7:39:ac:eb:
02:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C0:60:78:B0:1D:39:8B:32:0F:CB:01:86:50:CE:BF:C7:E0:F6:2E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rsBgeLAdOYsyD8sBhlDOv8fg9i4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
45:29:02:a4:ac:6e:01:59:81:5d:5a:24:f0:e4:24:9e:92:8f:
22:07:b0:c4:cd:9c:da:6e:1e:a4:ec:e9:e7:f8:a3:ab:c4:b8:
1b:b7:7e:c3:65:6c:9e:d6:67:ae:75:41:c2:b0:fe:d8:14:d2:
f8:b1:4f:26:41:3e:d7:60:56:e0:c9:24:7a:04:95:6e:5b:53:
72:95:40:f4:15:13:f5:4a:59:4c:7d:11:8a:8c:5d:24:32:6b:
bd:92:4c:fa:9b:4e:48:f3:55:46:d3:f8:6a:16:a5:80:b9:36:
fe:cf:c8:7a:8a:6c:af:4b:5a:f6:99:d5:8e:d0:cf:6e:37:55:
fb:47:63:02:6a:1a:cd:9a:4c:c3:6d:73:c1:9d:34:a0:2b:92:
9f:81:00:13:da:1d:8f:7d:94:bf:53:d2:a8:37:be:65:54:d8:
be:ae:ae:fe:88:b8:16:6c:a6:df:ee:59:ef:f4:52:a2:b9:90:
c8:d5:d9:5b:88:81:86:8f:97:48:0c:2a:8f:64:af:1c:26:ad:
97:e1:2b:ce:28:d6:68:ad:c6:b5:ce:21:6f:df:d1:42:83:69:
4d:41:97:3a:36:31:0c:47:fc:ee:e9:28:40:56:51:52:38:71:
4d:a4:28:7b:ba:59:3a:3f:e8:31:ad:61:c7:86:dd:3c:5f:88:
62:3d:b5:a3
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYZzCLv0NPuVMe5TzMkqnJWyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjIxMDgxMzE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZWMwNjA3OGIwMWQzOThiMzIwZmNiMDE4NjUwY2ViZmM3ZTBmNjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5iC1uFzLzkvO3kkorIjtCcjpe4w
TZ0efTFNcZY3jhjQOMcTJRwnZZBOHqXF73G/MT6GjfpOY7ed9hRoLIQFqAbr+EJE
GIiV8QSJbHutF6DF0RxDMyb6C9wgulzOge29zZXZ6OJf2ph5r6CR3YXmLp+SzPYe
10WEZKnU2/uQjft6tyq9Uh7oT/SAqB+xUBsxLypZHobzBXrehh9J/k5Ji+9mCIJ0
vc4vIU5RWyUuSI7pI4B7ElYx36eFul+UR85dxc6piSQsBL1/5Hy0kC3WbEcMmp11
s4zIeyhB0WdLY8P7DK1eIOUVzieM1ZclBYqEFMzAdHMy+7faVMc5rOsCGwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFK7AYHiwHTmLMg/LAYZQzr/H4PYuMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvcnNCZ2VMQWRPWXN5RDhzQmhsRE92OGZnOWk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEUpAqSsbgFZgV1aJPDk
JJ6SjyIHsMTNnNpuHqTs6ef4o6vEuBu3fsNlbJ7WZ651QcKw/tgU0vixTyZBPtdg
VuDJJHoElW5bU3KVQPQVE/VKWUx9EYqMXSQya72STPqbTkjzVUbT+GoWpYC5Nv7P
yHqKbK9LWvaZ1Y7Qz243VftHYwJqGs2aTMNtc8GdNKArkp+BABPaHY99lL9T0qg3
vmVU2L6urv6IuBZspt/uWe/0UqK5kMjV2VuIgYaPl0gMKo9krxwmrZfhK84o1mit
xrXOIW/f0UKDaU1Blzo2MQxH/O7pKEBWUVI4cU2kKHu6WTo/6DGtYceG3TxfiGI9
taM=
-----END CERTIFICATE-----
Generated at Wed Apr 30 21:25:23 2025 by rpki-client