Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/bv0FaNTBjshnhKA1Xqkj57bABvY.roa
File: bv0FaNTBjshnhKA1Xqkj57bABvY.roa (raw, json)
Hash identifier: DZV/+5i88CFh+2tk44VeWTvVrw33/G1gWeq71CSCJno=
Subject key identifier: 6E:FD:05:68:D4:C1:8E:C8:67:84:A0:35:5E:A9:23:E7:B6:C0:06:F6
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F8A16DA33440387DCA7709C5EC6B5AD36
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/bv0FaNTBjshnhKA1Xqkj57bABvY.roa
Signing time: Sat 18 May 2024 05:05:04 +0000
ROA not before: Sat 18 May 2024 05:05:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:8a16:ba7/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:8a:16:da:33:44:03:87:dc:a7:70:9c:5e:c6:b5:ad:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 18 05:05:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6efd0568d4c18ec86784a0355ea923e7b6c006f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d0:a1:c6:98:8a:48:a8:31:85:47:49:11:6b:
8b:e4:09:f6:8d:00:2e:63:b6:cf:c9:af:22:1d:0b:
b8:6b:6a:40:f3:f7:c6:3f:b7:c2:01:8f:e5:40:3f:
be:d8:c3:a7:7e:6c:3e:75:f5:96:5b:06:3d:c7:11:
25:94:f2:cf:1d:6f:2f:cc:17:89:a3:02:c2:ca:c3:
38:57:9f:73:00:8e:75:2b:cf:46:48:6b:08:2f:13:
c9:93:d3:48:c8:bf:8c:42:9b:70:b8:b5:34:b1:0c:
bc:b3:25:5f:82:55:f2:e5:dc:15:79:6c:52:8e:11:
8f:fb:72:3d:62:33:b6:af:26:d0:49:c6:9a:2d:6d:
c3:fb:f6:77:69:65:d9:db:ea:c9:54:1f:42:04:82:
6d:0b:2d:5e:ae:33:f9:62:8e:00:d1:12:a7:09:a9:
30:99:4e:e4:c8:39:1d:42:e3:e0:2c:6c:a7:f4:4e:
16:60:e0:11:33:11:ce:34:61:a5:e4:d0:08:69:18:
db:78:d7:76:9a:d3:9f:50:2b:6a:d3:70:6d:c8:c4:
c6:9b:57:96:bc:d4:ea:dd:a2:2e:36:41:ba:6c:4b:
bf:f6:69:a5:87:98:76:db:b4:24:2d:ab:1f:1e:de:
a6:27:85:e5:a4:a3:04:2f:1d:19:33:29:21:12:b5:
e3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:FD:05:68:D4:C1:8E:C8:67:84:A0:35:5E:A9:23:E7:B6:C0:06:F6
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/bv0FaNTBjshnhKA1Xqkj57bABvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9d:cf:61:05:85:bd:d4:0f:da:12:16:8d:71:22:46:b1:a0:12:
ef:95:64:24:91:77:72:a2:21:cb:fe:df:2a:7a:bc:72:c3:9f:
64:3c:3d:14:81:10:e4:a5:56:d6:71:09:82:11:22:92:79:77:
4a:94:0f:69:cb:ec:22:a5:19:4c:58:08:f5:06:5f:6f:91:84:
b5:3e:fa:59:96:1c:4c:ec:15:3d:0a:57:c4:a0:d6:11:15:e3:
95:ad:9e:c8:6c:e7:b7:31:2b:a4:29:d7:21:f6:af:88:a4:10:
75:c4:00:ea:27:90:1c:4b:77:97:90:df:0b:5e:dd:a5:b1:3c:
4c:2c:bb:51:f0:23:f7:ae:d5:bd:b7:8f:f1:fd:3d:b2:38:90:
2c:82:52:75:a4:16:ba:57:a5:76:d7:bf:b2:a4:6e:9c:e4:22:
6e:85:25:33:d8:5f:35:e6:2d:ca:37:e2:f5:bb:78:18:e0:e7:
1e:a8:45:cf:c0:20:ee:49:cc:90:c7:63:40:53:07:94:1a:70:
43:15:21:87:fe:cc:94:37:2b:b2:56:aa:60:d9:16:d0:48:89:
82:ac:67:26:87:82:06:cb:b2:58:08:2d:ce:59:ff:82:31:31:
12:e4:6a:88:03:31:9a:42:8b:37:8a:86:ff:3d:a5:1c:91:93:
31:83:d6:40
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY+KFtozRAOH3KdwnF7Gta02MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYmVjNDFiZDJmM2IxNzlkZTA5NTE0MzA2NTMwYmQzZmJh
YzcwN2IwHhcNMjQwNTE4MDUwNTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZWZkMDU2OGQ0YzE4ZWM4Njc4NGEwMzU1ZWE5MjNlN2I2YzAwNmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdChxpiKSKgxhUdJEWuL5An2jQAu
Y7bPya8iHQu4a2pA8/fGP7fCAY/lQD++2MOnfmw+dfWWWwY9xxEllPLPHW8vzBeJ
owLCysM4V59zAI51K89GSGsILxPJk9NIyL+MQptwuLU0sQy8syVfglXy5dwVeWxS
jhGP+3I9YjO2rybQScaaLW3D+/Z3aWXZ2+rJVB9CBIJtCy1erjP5Yo4A0RKnCakw
mU7kyDkdQuPgLGyn9E4WYOARMxHONGGl5NAIaRjbeNd2mtOfUCtq03BtyMTGm1eW
vNTq3aIuNkG6bEu/9mmlh5h227QkLasfHt6mJ4XlpKMELx0ZMykhErXjiwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFG79BWjUwY7IZ4SgNV6pI+e2wAb2MB8GA1UdIwQY
MBaAFLK+xBvS87F53glRQwZTC9P7rHB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYt
ZDEyZjAzOWRiMmM5LzEvYnYwRmFOVEJqc2huaEtBMVhxa2o1N2JBQnZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYtZDEyZjAzOWRiMmM5
LzEvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJ3PYQWFvdQP2hIWjXEi
RrGgEu+VZCSRd3KiIcv+3yp6vHLDn2Q8PRSBEOSlVtZxCYIRIpJ5d0qUD2nL7CKl
GUxYCPUGX2+RhLU++lmWHEzsFT0KV8Sg1hEV45Wtnshs57cxK6Qp1yH2r4ikEHXE
AOonkBxLd5eQ3wte3aWxPEwsu1HwI/eu1b23j/H9PbI4kCyCUnWkFrpXpXbXv7Kk
bpzkIm6FJTPYXzXmLco34vW7eBjg5x6oRc/AIO5JzJDHY0BTB5QacEMVIYf+zJQ3
K7JWqmDZFtBIiYKsZyaHggbLslgILc5Z/4IxMRLkaogDMZpCizeKhv89pRyRkzGD
1kA=
-----END CERTIFICATE-----
Generated at Tue May 6 00:17:00 2025 by rpki-client