Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/02701d-081c-4d07-b3ff-69fcaf488bfa/1/BGvN300qDApBceyrOPCr01iNdUQ.roa
File: BGvN300qDApBceyrOPCr01iNdUQ.roa (raw, json)
Hash identifier: qmqdEVujAXPugTJCyZnxdviuJ7QEELKXlX+nuC2x1R0=
Subject key identifier: 04:6B:CD:DF:4D:2A:0C:0A:41:71:EC:AB:38:F0:AB:D3:58:8D:75:44
Certificate issuer: /CN=0b175873adeb83c8f16a2e0e3cbb251e58833a87
Certificate serial: 077574D8
Authority key identifier: 0B:17:58:73:AD:EB:83:C8:F1:6A:2E:0E:3C:BB:25:1E:58:83:3A:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxdYc63rg8jxai4OPLslHliDOoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/02701d-081c-4d07-b3ff-69fcaf488bfa/1/BGvN300qDApBceyrOPCr01iNdUQ.roa
Signing time: Thu 31 Mar 2022 05:26:13 +0000
ROA not before: Thu 31 Mar 2022 05:26:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49882
IP address blocks: 185.88.184.0/22 maxlen: 22
185.88.184.0/24 maxlen: 24
91.92.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125138136 (0x77574d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b175873adeb83c8f16a2e0e3cbb251e58833a87
Validity
Not Before: Mar 31 05:26:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=046bcddf4d2a0c0a4171ecab38f0abd3588d7544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:bb:cd:cb:9c:7e:5e:e7:bf:e7:d6:e9:04:ef:
f0:ae:63:d0:44:6f:85:25:7f:6f:5f:a4:62:7a:97:
7f:4d:2b:c6:55:33:b9:72:12:44:31:60:d1:c3:43:
5e:13:73:db:ca:e6:d9:c6:ab:7a:1d:05:c6:b0:54:
88:cd:a2:19:2c:73:ad:ef:67:8b:39:8e:76:7a:65:
89:df:84:fa:fd:f9:07:dc:42:29:9c:d5:50:05:cb:
fc:68:25:6c:6e:89:b6:47:b1:a7:bb:78:e0:8f:db:
93:e7:6e:57:a1:17:f0:cd:f9:8e:10:b6:97:a4:56:
11:cc:10:5e:52:8d:a1:f5:a0:ee:b6:70:b3:07:d6:
f0:7f:5e:b4:09:cb:ff:41:3b:99:38:9a:48:f7:15:
95:9b:1e:c1:7b:b0:ef:de:99:47:ba:b0:e2:62:46:
2a:57:88:44:09:34:b8:e1:55:dc:8d:fd:a8:53:03:
34:5b:88:50:2c:d2:32:b6:c4:fd:9c:9d:ac:6c:da:
58:cc:1d:76:ce:8b:16:9c:31:50:51:8f:83:1d:8a:
0e:9a:1b:86:f5:a8:66:b3:78:b0:69:54:b4:0f:51:
2d:ee:5d:de:ae:4e:05:d7:f3:19:bf:dd:1c:9c:b1:
1a:75:2c:56:b4:68:53:4a:84:4e:6a:5d:b6:e3:67:
94:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:6B:CD:DF:4D:2A:0C:0A:41:71:EC:AB:38:F0:AB:D3:58:8D:75:44
X509v3 Authority Key Identifier:
keyid:0B:17:58:73:AD:EB:83:C8:F1:6A:2E:0E:3C:BB:25:1E:58:83:3A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxdYc63rg8jxai4OPLslHliDOoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/02701d-081c-4d07-b3ff-69fcaf488bfa/1/BGvN300qDApBceyrOPCr01iNdUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/02701d-081c-4d07-b3ff-69fcaf488bfa/1/CxdYc63rg8jxai4OPLslHliDOoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.92.196.0/24
185.88.184.0/22
Signature Algorithm: sha256WithRSAEncryption
56:5d:23:dd:07:d5:83:81:48:76:01:9a:d4:21:ef:65:f1:db:
c0:07:97:93:b0:8f:48:1e:52:54:b0:02:b8:1a:64:f3:9e:c7:
78:5d:a0:77:bc:10:55:78:c8:5b:7e:8e:ef:87:98:2d:73:8d:
0f:65:c0:c9:4b:04:8e:c7:64:a2:99:61:3c:68:20:3d:d7:b3:
09:e4:02:da:1c:ed:8c:19:a5:4f:5c:92:f1:31:24:35:e4:d8:
fb:7b:17:96:03:69:c4:ac:00:69:af:77:de:29:35:cf:2c:59:
bb:7d:e4:27:7c:25:b7:d7:cf:56:d1:b1:27:e3:f0:74:cc:55:
a3:de:76:ce:fa:b1:cd:9b:97:5b:e1:66:f5:b4:66:c5:d6:b4:
2d:00:07:ac:70:9a:5c:f8:aa:c9:56:43:13:f2:ee:d5:0e:cd:
52:6a:96:5c:29:a6:3a:8d:f4:51:65:c2:fb:a2:02:e7:11:6d:
02:30:c4:ab:3d:9a:1a:eb:ab:9b:a8:de:4b:66:fc:cd:1d:03:
ce:c6:5e:40:09:06:b6:1c:e1:3a:86:eb:c2:7f:68:71:70:5f:
68:0f:cb:8a:3f:b2:bf:da:4d:b4:eb:5c:54:3b:3a:cb:8e:83:
4f:3d:dc:1a:ff:96:ea:fb:22:9d:f8:66:03:23:5b:5e:11:a0:
31:c2:f6:a7
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEB3V02DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
YjE3NTg3M2FkZWI4M2M4ZjE2YTJlMGUzY2JiMjUxZTU4ODMzYTg3MB4XDTIyMDMz
MTA1MjYxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDQ2YmNkZGY0ZDJh
MGMwYTQxNzFlY2FiMzhmMGFiZDM1ODhkNzU0NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIy7zcucfl7nv+fW6QTv8K5j0ERvhSV/b1+kYnqXf00rxlUz
uXISRDFg0cNDXhNz28rm2careh0FxrBUiM2iGSxzre9nizmOdnplid+E+v35B9xC
KZzVUAXL/GglbG6Jtkexp7t44I/bk+duV6EX8M35jhC2l6RWEcwQXlKNofWg7rZw
swfW8H9etAnL/0E7mTiaSPcVlZsewXuw796ZR7qw4mJGKleIRAk0uOFV3I39qFMD
NFuIUCzSMrbE/ZydrGzaWMwdds6LFpwxUFGPgx2KDpobhvWoZrN4sGlUtA9RLe5d
3q5OBdfzGb/dHJyxGnUsVrRoU0qETmpdtuNnlL8CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQEa83fTSoMCkFx7Ks48KvTWI11RDAfBgNVHSMEGDAWgBQLF1hzreuDyPFq
Lg48uyUeWIM6hzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0N4ZFljNjNyZzhqeGFpNE9QTHNsSGxpRE9vYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDMvMDI3MDFkLTA4MWMtNGQwNy1iM2ZmLTY5ZmNhZjQ4OGJmYS8x
L0JHdk4zMDBxREFwQmNleXJPUENyMDFpTmRVUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDMv
MDI3MDFkLTA4MWMtNGQwNy1iM2ZmLTY5ZmNhZjQ4OGJmYS8xL0N4ZFljNjNyZzhq
eGFpNE9QTHNsSGxpRE9vYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAFtcxAMEArlYuDANBgkqhkiG9w0B
AQsFAAOCAQEAVl0j3QfVg4FIdgGa1CHvZfHbwAeXk7CPSB5SVLACuBpk857HeF2g
d7wQVXjIW36O74eYLXOND2XAyUsEjsdkoplhPGggPdezCeQC2hztjBmlT1yS8TEk
NeTY+3sXlgNpxKwAaa933ik1zyxZu33kJ3wlt9fPVtGxJ+PwdMxVo952zvqxzZuX
W+Fm9bRmxda0LQAHrHCaXPiqyVZDE/Lu1Q7NUmqWXCmmOo30UWXC+6IC5xFtAjDE
qz2aGuurm6jeS2b8zR0DzsZeQAkGthzhOobrwn9ocXBfaA/Lij+yv9pNtOtcVDs6
y46DTz3cGv+W6vsinfhmAyNbXhGgMcL2pw==
-----END CERTIFICATE-----
Generated at Tue Apr 22 01:56:31 2025 by rpki-client