Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BQASpEjFyXXq3lID-MugDfjrYsA.roa
File: BQASpEjFyXXq3lID-MugDfjrYsA.roa (raw, json)
Hash identifier: lEmBdjXzWEkxak7ObQK88mZicR6YDHg0uceHZ4XxnD4=
Subject key identifier: 05:00:12:A4:48:C5:C9:75:EA:DE:52:03:F8:CB:A0:0D:F8:EB:62:C0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183737EBA2965E78A48CD1CA55B207852EC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BQASpEjFyXXq3lID-MugDfjrYsA.roa
Signing time: Sun 25 Sep 2022 07:13:48 +0000
ROA not before: Sun 25 Sep 2022 07:13:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:183:5f81:ab13/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:73:7e:ba:29:65:e7:8a:48:cd:1c:a5:5b:20:78:52:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 25 07:13:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=050012a448c5c975eade5203f8cba00df8eb62c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:51:4a:d3:00:b1:86:f1:19:6b:18:0d:01:b5:
14:00:fe:ad:b5:a5:0d:5d:d9:f7:b2:5d:00:6a:10:
8a:e4:ac:7d:09:2f:e1:42:0b:76:29:a6:45:36:95:
93:34:58:55:0e:e5:30:e2:d3:0c:31:2f:67:3c:40:
04:4a:fa:12:84:4e:1e:db:44:b5:34:fb:7a:ac:c3:
c4:07:fa:38:00:1b:ba:bd:8c:50:41:68:85:15:b2:
7a:80:03:04:13:c4:8c:7e:d6:f3:9b:fa:82:50:a5:
4e:0c:35:bd:b4:9e:9b:7c:41:e9:06:83:4b:2e:ac:
90:13:58:04:c3:d1:24:22:b1:02:ee:46:cd:c1:14:
b4:13:68:12:e3:df:cd:5a:99:7d:b7:5f:64:2f:3c:
ff:f2:ce:5c:ca:8a:d9:83:c7:50:d8:9b:7c:b5:66:
d0:4b:2a:15:9e:6c:93:61:78:d2:8f:c7:b7:82:97:
fc:64:85:7e:89:ac:31:b7:1a:2a:70:65:5c:12:53:
f2:d2:8b:6b:b9:46:01:69:9a:3f:a3:44:07:b9:f1:
2c:95:67:f1:14:f3:3d:33:bd:bc:e8:31:25:df:fa:
9b:c1:db:83:7c:21:8c:c7:86:3d:09:f6:44:fe:86:
2c:99:07:f8:df:60:2f:5b:89:0b:ca:56:62:1c:76:
56:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:00:12:A4:48:C5:C9:75:EA:DE:52:03:F8:CB:A0:0D:F8:EB:62:C0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BQASpEjFyXXq3lID-MugDfjrYsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
84:55:6d:1f:f3:19:77:95:40:cf:0f:59:d7:d2:94:e2:81:f5:
02:04:c5:27:6a:01:62:d7:ed:df:46:cb:df:5d:30:eb:ed:ac:
37:c6:d1:17:ef:48:ff:f0:17:38:31:cc:eb:01:9a:86:ef:bf:
d0:5b:0c:82:25:1b:6a:97:ca:05:e3:a2:fd:1e:5c:a5:e7:87:
83:8a:0f:59:5b:40:6c:6e:55:fb:0d:ec:cd:65:85:22:f1:94:
b0:6e:08:e9:be:10:d0:b3:a6:30:78:a6:16:95:da:da:b4:00:
68:d5:6a:c7:10:5f:ca:1c:7b:42:0e:95:a3:ab:b2:47:b6:bf:
30:b1:f7:f0:c9:07:22:29:42:df:2a:a1:82:7d:8a:5b:06:61:
67:b2:9a:19:45:f8:df:62:7e:fb:3c:b4:22:e0:96:8e:23:55:
42:c6:b7:ba:4d:9b:3c:be:53:52:3d:8b:b7:18:14:1f:d0:0d:
3b:3e:78:13:91:9b:5c:23:4b:e4:9f:8f:40:88:e4:10:66:c4:
15:9e:8a:a1:a0:cc:51:3e:a1:47:8b:11:2d:5a:92:74:89:ef:
79:db:86:24:47:6a:44:c3:e6:35:64:8d:e7:dc:63:09:79:06:
3a:06:b5:bd:bf:96:66:e3:5d:d7:4d:d3:31:11:2b:0b:87:81:
e3:64:7e:13
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYNzfropZeeKSM0cpVsgeFLsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwOTI1MDcxMzQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTAwMTJhNDQ4YzVjOTc1ZWFkZTUyMDNmOGNiYTAwZGY4ZWI2MmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVFK0wCxhvEZaxgNAbUUAP6ttaUN
Xdn3sl0AahCK5Kx9CS/hQgt2KaZFNpWTNFhVDuUw4tMMMS9nPEAESvoShE4e20S1
NPt6rMPEB/o4ABu6vYxQQWiFFbJ6gAMEE8SMftbzm/qCUKVODDW9tJ6bfEHpBoNL
LqyQE1gEw9EkIrEC7kbNwRS0E2gS49/NWpl9t19kLzz/8s5cyorZg8dQ2Jt8tWbQ
SyoVnmyTYXjSj8e3gpf8ZIV+iawxtxoqcGVcElPy0otruUYBaZo/o0QHufEslWfx
FPM9M7286DEl3/qbwduDfCGMx4Y9CfZE/oYsmQf432AvW4kLylZiHHZWOwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAUAEqRIxcl16t5SA/jLoA3462LAMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvQlFBU3BFakZ5WFhxM2xJRC1NdWdEZmpyWXNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIRVbR/zGXeVQM8PWdfS
lOKB9QIExSdqAWLX7d9Gy99dMOvtrDfG0RfvSP/wFzgxzOsBmobvv9BbDIIlG2qX
ygXjov0eXKXnh4OKD1lbQGxuVfsN7M1lhSLxlLBuCOm+ENCzpjB4phaV2tq0AGjV
ascQX8oce0IOlaOrske2vzCx9/DJByIpQt8qoYJ9ilsGYWeymhlF+N9ifvs8tCLg
lo4jVULGt7pNmzy+U1I9i7cYFB/QDTs+eBORm1wjS+Sfj0CI5BBmxBWeiqGgzFE+
oUeLES1aknSJ73nbhiRHakTD5jVkjefcYwl5BjoGtb2/lmbjXddN0zERKwuHgeNk
fhM=
-----END CERTIFICATE-----
Generated at Mon Jun 9 19:06:38 2025 by rpki-client