Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BPD5MHdnq24t3zXUmrzs4KBm66o.roa
File: BPD5MHdnq24t3zXUmrzs4KBm66o.roa (raw, json)
Hash identifier: uWPBRcW1CQYfyyMBVpivN56nNNub5TvKxk5r+6lqeiE=
Subject key identifier: 04:F0:F9:30:77:67:AB:6E:2D:DF:35:D4:9A:BC:EC:E0:A0:66:EB:AA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183FDE20615B28D676B15987501E5A36054
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BPD5MHdnq24t3zXUmrzs4KBm66o.roa
Signing time: Sat 22 Oct 2022 04:09:51 +0000
ROA not before: Sat 22 Oct 2022 04:09:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:fd:e2:06:15:b2:8d:67:6b:15:98:75:01:e5:a3:60:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 22 04:09:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=04f0f9307767ab6e2ddf35d49abcece0a066ebaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:53:35:f3:28:b1:74:7d:61:c5:7b:a6:8f:1c:
00:e3:29:5a:6c:51:7c:05:bc:3b:cf:8d:5b:cb:1c:
ce:0b:ab:5e:9e:35:1d:9f:4d:89:cd:e5:89:bd:ee:
9e:21:76:36:16:a2:bd:d0:1b:38:4b:00:da:3c:78:
4c:5e:0b:d3:b0:68:91:9c:cb:0e:79:12:01:c6:6d:
97:4b:b3:ea:91:1b:51:73:58:5e:60:4e:2a:99:7a:
71:e8:56:81:ee:7c:99:03:b6:5e:e1:a1:c4:9a:70:
9e:b5:c5:c3:d7:6a:62:23:04:17:f5:9d:4e:3d:d6:
24:66:8c:04:07:10:26:02:37:65:a1:b3:94:6f:74:
5f:a6:64:bd:b3:af:bb:30:85:b2:0c:23:47:91:a7:
7e:fd:1c:5c:c9:a9:e0:01:69:f7:03:07:49:f2:6e:
8f:e0:5a:56:a8:54:06:48:87:da:25:38:3a:3c:27:
00:74:31:60:64:d3:7b:b8:25:70:a8:2e:aa:2b:f4:
47:fc:34:65:83:e4:71:14:42:2d:76:1e:6c:24:88:
33:33:30:f5:fe:54:70:7e:92:ca:c0:67:11:4b:e3:
f6:ce:58:bb:09:72:96:5b:dd:d8:df:25:19:16:9e:
00:5a:e1:93:d2:b2:50:c6:32:d7:5d:0b:a5:d9:5f:
c3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:F0:F9:30:77:67:AB:6E:2D:DF:35:D4:9A:BC:EC:E0:A0:66:EB:AA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BPD5MHdnq24t3zXUmrzs4KBm66o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
00:6f:a6:15:42:4d:ab:b2:35:98:d9:50:cd:b6:c0:21:9d:63:
e4:0e:18:cb:06:f8:b8:46:ae:15:38:d6:2f:48:19:16:40:e4:
48:14:57:c5:7b:d5:36:4c:36:a2:f1:90:52:0c:ca:fb:c6:08:
ed:56:d5:e1:6d:8d:74:54:4b:80:8c:1e:dc:75:e1:62:3f:83:
fa:45:cf:08:1b:5c:4a:7c:48:15:e0:96:bf:23:5b:81:bc:80:
f8:3d:8a:ab:a7:f2:b3:f5:0f:e4:6a:31:5d:f3:2e:c6:5a:58:
74:44:74:ae:74:8b:e0:46:34:d4:9f:cd:bf:24:84:bd:c4:b1:
09:1c:e0:91:30:fb:00:19:3e:a8:f9:a0:10:27:ff:d3:33:f8:
d5:c8:a8:75:39:11:a6:42:33:98:7d:be:4c:ab:af:8f:1d:9f:
5e:56:fb:82:2d:ff:0c:dc:9b:00:d5:9c:9f:3a:83:dd:e4:5e:
c1:c2:a4:0e:d7:0d:b5:6e:72:b1:6e:3f:5c:8a:a0:25:93:ce:
8b:17:65:4a:6b:d7:8a:7d:ce:03:2d:b5:ac:3e:4e:cd:3e:e8:
a2:aa:07:6a:40:e6:01:9c:55:89:1c:77:39:49:cb:c3:65:b8:
5b:0a:da:a9:45:65:72:5e:65:6c:b1:85:8e:b4:ca:a7:54:df:
7b:39:a1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:48:43 2025 by rpki-client