Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/BT5Tc_nsO2kQwayy6rLW8SbW2oU.roa
File: BT5Tc_nsO2kQwayy6rLW8SbW2oU.roa (raw, json)
Hash identifier: omGXYLJpxqMV8QuoiFsCr59808CNqD3hRDiYULXyf/Q=
Subject key identifier: 05:3E:53:73:F9:EC:3B:69:10:C1:AC:B2:EA:B2:D6:F1:26:D6:DA:85
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F8A8A3879FC1AC097C74EE8EB8D16F51A
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/BT5Tc_nsO2kQwayy6rLW8SbW2oU.roa
Signing time: Sat 18 May 2024 07:11:04 +0000
ROA not before: Sat 18 May 2024 07:11:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:8a:8a:38:79:fc:1a:c0:97:c7:4e:e8:eb:8d:16:f5:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 18 07:11:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=053e5373f9ec3b6910c1acb2eab2d6f126d6da85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c4:39:74:bb:f8:98:86:18:a0:c6:87:f7:98:
47:84:9b:36:7a:84:fd:5c:a6:41:8a:ed:de:a3:2c:
81:3e:fb:8a:17:bf:9f:5e:28:7e:70:84:41:02:c7:
a1:12:4b:45:9f:b7:f7:d3:d9:f1:d5:a2:8c:d8:44:
48:ae:38:c3:cc:59:8a:4c:d9:7d:05:1f:67:27:d0:
f4:e1:31:a0:9b:83:50:8d:1d:a2:68:21:8a:e9:fc:
85:e7:70:d9:c1:d3:05:4f:c7:2d:3c:53:ca:69:24:
d3:5c:1d:26:02:9f:02:9c:80:50:7a:80:a3:5b:ad:
7d:d0:16:64:c1:ad:ea:9c:9c:b4:58:7e:7f:49:95:
5b:3b:b5:3b:75:36:cd:ec:51:7a:21:58:8d:f8:f4:
6f:5c:87:3e:e6:d2:66:b6:f9:25:d5:be:f8:9d:79:
38:bc:8a:f2:d5:f9:e1:d8:48:fd:68:36:8b:50:e9:
be:e3:9f:5a:71:a4:88:f4:bc:45:9d:f2:9f:41:e0:
d7:7a:ed:b4:23:2c:b1:9e:d4:f3:07:d2:8d:d0:e1:
29:8c:de:61:4a:9a:61:2d:d6:7d:19:e0:ab:90:fa:
16:b9:1d:26:55:56:28:16:1c:1f:43:f4:59:dc:ef:
99:81:bd:6d:3c:5b:8a:15:1f:5a:00:06:d0:f1:dc:
d2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:3E:53:73:F9:EC:3B:69:10:C1:AC:B2:EA:B2:D6:F1:26:D6:DA:85
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/BT5Tc_nsO2kQwayy6rLW8SbW2oU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
12:4e:4b:c8:01:c5:e5:13:ca:bf:87:61:3c:f3:b8:a6:fd:20:
41:95:56:2b:6b:32:9b:41:30:4d:29:90:04:2e:e9:95:f5:75:
5a:1d:be:70:11:d3:78:24:5a:d3:9a:b6:38:c2:4d:3d:03:13:
ff:a6:bb:4a:e2:9b:3e:44:bc:b6:4f:52:f8:39:61:c5:0e:61:
ef:fe:9f:4c:a3:f7:fd:83:72:6c:33:ee:3a:84:10:10:22:35:
42:05:05:48:86:2a:51:37:06:40:f1:ca:13:bd:51:67:33:27:
15:50:d3:07:2d:79:28:57:d6:a8:93:34:93:81:fd:31:d0:09:
14:b2:12:40:88:33:b3:10:ca:49:54:3f:ea:e5:19:db:6e:f3:
c7:d7:df:5a:1d:24:3d:90:49:1f:b1:ea:89:1c:26:b3:35:da:
a2:7e:2e:2e:13:d4:aa:eb:05:af:ab:c7:ea:c4:56:c0:40:02:
5f:94:7f:c6:3d:43:5c:41:e4:d1:d3:ed:6d:fb:20:ed:38:7e:
10:32:a6:92:28:fa:df:a0:52:9c:8d:06:be:4e:f5:ac:72:d3:
b0:a1:11:ca:a8:01:38:41:e7:ca:cd:73:75:58:2d:51:b9:04:
bc:84:38:f1:00:11:4c:0d:d6:b1:64:8a:65:9e:40:26:e6:10:
29:b3:b9:9e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY+Kijh5/BrAl8dO6OuNFvUaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYmVjNDFiZDJmM2IxNzlkZTA5NTE0MzA2NTMwYmQzZmJh
YzcwN2IwHhcNMjQwNTE4MDcxMTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTNlNTM3M2Y5ZWMzYjY5MTBjMWFjYjJlYWIyZDZmMTI2ZDZkYTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsQ5dLv4mIYYoMaH95hHhJs2eoT9
XKZBiu3eoyyBPvuKF7+fXih+cIRBAsehEktFn7f309nx1aKM2ERIrjjDzFmKTNl9
BR9nJ9D04TGgm4NQjR2iaCGK6fyF53DZwdMFT8ctPFPKaSTTXB0mAp8CnIBQeoCj
W6190BZkwa3qnJy0WH5/SZVbO7U7dTbN7FF6IViN+PRvXIc+5tJmtvkl1b74nXk4
vIry1fnh2Ej9aDaLUOm+459acaSI9LxFnfKfQeDXeu20IyyxntTzB9KN0OEpjN5h
SpphLdZ9GeCrkPoWuR0mVVYoFhwfQ/RZ3O+Zgb1tPFuKFR9aAAbQ8dzSJwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAU+U3P57DtpEMGssuqy1vEm1tqFMB8GA1UdIwQY
MBaAFLK+xBvS87F53glRQwZTC9P7rHB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYt
ZDEyZjAzOWRiMmM5LzEvQlQ1VGNfbnNPMmtRd2F5eTZyTFc4U2JXMm9VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYtZDEyZjAzOWRiMmM5
LzEvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABJOS8gBxeUTyr+HYTzz
uKb9IEGVVitrMptBME0pkAQu6ZX1dVodvnAR03gkWtOatjjCTT0DE/+mu0rimz5E
vLZPUvg5YcUOYe/+n0yj9/2Dcmwz7jqEEBAiNUIFBUiGKlE3BkDxyhO9UWczJxVQ
0wcteShX1qiTNJOB/THQCRSyEkCIM7MQyklUP+rlGdtu88fX31odJD2QSR+x6okc
JrM12qJ+Li4T1KrrBa+rx+rEVsBAAl+Uf8Y9Q1xB5NHT7W37IO04fhAyppIo+t+g
UpyNBr5O9axy07ChEcqoAThB58rNc3VYLVG5BLyEOPEAEUwN1rFkimWeQCbmECmz
uZ4=
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:46:33 2025 by rpki-client