Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/BZfRKpwyg-cH_o0MWaUUASCKiCU.roa
File: BZfRKpwyg-cH_o0MWaUUASCKiCU.roa (raw, json)
Hash identifier: hfgcdQsnYsKlKBvlZSAL2Iy+lh6LPCGW2RiYulTWjg0=
Subject key identifier: 05:97:D1:2A:9C:32:83:E7:07:FE:8D:0C:59:A5:14:01:20:8A:88:25
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C491D11D56D7A72117BFDBD6EB9A639CC
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/BZfRKpwyg-cH_o0MWaUUASCKiCU.roa
Signing time: Fri 08 Dec 2023 11:08:10 +0000
ROA not before: Fri 08 Dec 2023 11:08:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
2001:67c:64:ffff:0:18c:4919:d4b7/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:49:1d:11:d5:6d:7a:72:11:7b:fd:bd:6e:b9:a6:39:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 8 11:08:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0597d12a9c3283e707fe8d0c59a51401208a8825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f3:a2:3b:92:f1:0e:ed:51:27:08:db:64:38:
7f:1b:16:55:07:49:56:fe:73:7d:4b:34:3a:33:23:
12:82:c2:ce:3a:36:bf:be:00:7a:0e:5d:d5:84:6f:
d4:8b:b7:34:c3:36:5b:7a:95:b2:f4:87:38:3f:c6:
c4:18:14:62:5c:c4:80:c8:63:d7:30:fe:4d:39:55:
b7:2c:0a:c7:d1:f1:63:4a:2d:95:29:63:9a:f4:34:
7b:1e:43:2d:97:e6:34:a6:e4:4a:5d:2b:bf:2f:cb:
82:e1:e5:5c:7e:5a:f5:ac:80:d0:1b:8b:3f:ed:61:
ae:9f:95:8f:61:fe:da:65:56:11:ab:61:13:f7:55:
28:93:b2:03:8f:ac:2b:fc:fc:77:c1:f1:09:1c:be:
be:be:40:fc:9a:47:a5:7f:48:4f:14:16:f2:56:c9:
5f:f5:15:6d:a3:5e:5a:8b:47:56:08:9e:3c:8d:9b:
46:09:60:7d:db:a0:86:86:a3:18:3c:42:dc:5b:64:
26:16:13:da:65:db:b7:7f:5c:24:88:25:11:56:4f:
9d:ff:87:02:00:85:13:5d:18:6a:b1:b6:fb:0c:1c:
43:fe:69:77:35:91:dc:e2:c9:e7:18:77:80:7e:6f:
06:a2:7b:01:66:ca:40:c7:84:fa:28:4e:39:a2:72:
43:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:97:D1:2A:9C:32:83:E7:07:FE:8D:0C:59:A5:14:01:20:8A:88:25
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/BZfRKpwyg-cH_o0MWaUUASCKiCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
75:87:bd:f3:b2:8e:02:e2:81:da:ee:6e:a9:98:ae:f3:d5:3a:
76:ef:9c:b1:7e:68:d9:62:74:cc:be:8d:4d:db:29:63:43:fa:
1a:47:a9:d0:08:03:4c:56:b3:c5:f1:9c:1a:0f:fd:de:84:25:
9a:19:63:b7:ad:f6:99:39:2e:7a:cf:b1:84:6b:39:83:f3:c8:
5f:35:67:05:74:bc:cf:57:b7:5d:1e:55:b7:46:7a:d0:99:b0:
88:8e:c5:2e:03:a8:b1:80:f4:75:5c:21:3a:b3:eb:fa:a2:0c:
27:36:53:36:ea:b4:3c:1c:9e:2a:15:d9:3c:a3:0f:52:e6:55:
18:09:4a:3c:bc:86:39:e6:85:1c:8e:0a:0d:ac:3f:d4:be:c3:
85:ac:e9:5a:6c:c3:06:f9:89:44:90:7b:30:e5:81:d1:a7:c0:
36:f8:e8:2f:f2:5d:88:fc:2a:2c:4e:f9:2a:e7:33:1d:bc:36:
51:0a:e3:b8:29:36:be:7c:94:47:d0:bb:44:c4:44:64:b0:e8:
36:89:ad:26:72:3e:29:94:35:fa:41:7e:69:46:8d:5d:03:69:
ef:e1:31:eb:d3:21:dc:6c:76:39:a0:f8:cb:0c:05:9c:2d:ed:
87:35:5a:63:28:9f:18:e7:67:83:f5:46:2b:eb:3e:fa:51:7c:
54:e7:90:1a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYxJHRHVbXpyEXv9vW65pjnMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjA4MTEwODEwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTk3ZDEyYTljMzI4M2U3MDdmZThkMGM1OWE1MTQwMTIwOGE4ODI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPOiO5LxDu1RJwjbZDh/GxZVB0lW
/nN9SzQ6MyMSgsLOOja/vgB6Dl3VhG/Ui7c0wzZbepWy9Ic4P8bEGBRiXMSAyGPX
MP5NOVW3LArH0fFjSi2VKWOa9DR7HkMtl+Y0puRKXSu/L8uC4eVcflr1rIDQG4s/
7WGun5WPYf7aZVYRq2ET91Uok7IDj6wr/Px3wfEJHL6+vkD8mkelf0hPFBbyVslf
9RVto15ai0dWCJ48jZtGCWB926CGhqMYPELcW2QmFhPaZdu3f1wkiCURVk+d/4cC
AIUTXRhqsbb7DBxD/ml3NZHc4snnGHeAfm8GonsBZspAx4T6KE45onJDNwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAWX0SqcMoPnB/6NDFmlFAEgioglMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvQlpmUktwd3lnLWNIX28wTVdhVVVBU0NLaUNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHWHvfOyjgLigdrubqmY
rvPVOnbvnLF+aNlidMy+jU3bKWND+hpHqdAIA0xWs8XxnBoP/d6EJZoZY7et9pk5
LnrPsYRrOYPzyF81ZwV0vM9Xt10eVbdGetCZsIiOxS4DqLGA9HVcITqz6/qiDCc2
UzbqtDwcnioV2TyjD1LmVRgJSjy8hjnmhRyOCg2sP9S+w4Ws6Vpswwb5iUSQezDl
gdGnwDb46C/yXYj8KixO+SrnMx28NlEK47gpNr58lEfQu0TERGSw6DaJrSZyPimU
NfpBfmlGjV0Dae/hMevTIdxsdjmg+MsMBZwt7Yc1WmMonxjnZ4P1RivrPvpRfFTn
kBo=
-----END CERTIFICATE-----
Generated at Mon Jul 28 21:51:36 2025 by rpki-client