Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BTy4-PUWuVyCgHbeFh3mvtlXwV0.roa
File: BTy4-PUWuVyCgHbeFh3mvtlXwV0.roa (raw, json)
Hash identifier: e803almVRZCI+h2SfAnwNZ1DCEJzlazBTEcOVjxEhUk=
Subject key identifier: 05:3C:B8:F8:F5:16:B9:5C:82:80:76:DE:16:1D:E6:BE:D9:57:C1:5D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01880221CD447EBC1584B7750D647F830A48
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BTy4-PUWuVyCgHbeFh3mvtlXwV0.roa
Signing time: Tue 09 May 2023 20:09:09 +0000
ROA not before: Tue 09 May 2023 20:09:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:02:21:cd:44:7e:bc:15:84:b7:75:0d:64:7f:83:0a:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 9 20:09:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=053cb8f8f516b95c828076de161de6bed957c15d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:bf:41:78:6b:c6:1b:69:f0:3a:b7:c4:25:2d:
5c:dd:3a:98:ea:cf:01:ce:05:ce:ad:d1:a2:67:59:
b3:90:61:e2:ec:f0:26:12:d5:93:a9:bf:67:62:86:
94:8d:0c:31:24:7d:fb:07:1d:90:60:cb:f2:3e:df:
0c:cc:09:bf:dc:41:b5:49:ba:d1:7e:b9:b3:76:da:
e6:e1:85:b7:07:7d:cb:7a:3c:eb:2f:70:15:a7:f7:
16:c1:45:8a:f0:1e:b1:38:3a:e0:73:32:95:fb:11:
b1:65:43:6b:dc:8c:26:38:3e:44:6b:e9:17:e2:32:
b2:6f:4d:78:36:73:6b:65:f2:aa:a3:65:1d:0f:d4:
fc:43:67:93:0d:71:b5:ea:cb:ac:9b:20:68:21:dd:
5e:ef:2c:57:07:41:ea:11:cf:dd:b6:c8:fb:b9:bc:
43:e9:4c:a4:7b:80:ea:cc:d0:c1:2c:5f:1c:b4:a0:
07:43:f1:90:3a:f5:3b:9e:49:0e:4e:bc:59:f5:95:
c4:74:30:fa:13:bb:ec:40:71:4d:9b:56:1e:3e:4d:
5a:19:29:fa:be:9a:d8:e8:fc:2e:0e:1b:dc:4f:97:
e5:82:5e:f9:43:33:51:41:99:d4:81:58:e0:c8:11:
f1:10:07:b4:e5:fc:f2:33:aa:a6:f5:70:7c:62:23:
48:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:3C:B8:F8:F5:16:B9:5C:82:80:76:DE:16:1D:E6:BE:D9:57:C1:5D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BTy4-PUWuVyCgHbeFh3mvtlXwV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
60:ab:10:09:d8:26:d4:b9:fc:c9:59:6f:25:a0:f4:68:e2:c2:
5e:9d:79:f0:71:fa:af:49:f4:da:6f:88:93:3e:e6:2d:01:a1:
38:b8:e1:b3:cc:14:5e:42:1c:58:f0:3b:66:f1:66:cf:d0:8e:
17:3e:56:19:23:ab:f1:4e:49:ce:07:ec:8f:59:af:ce:18:70:
e3:c4:de:a4:a1:21:bd:07:d4:01:28:13:71:ac:2d:38:2b:47:
61:d6:a1:c0:a1:73:be:34:fd:7d:06:48:55:df:7a:0e:f7:0b:
e8:5a:69:38:a5:2b:9f:09:1f:da:cf:a1:a7:c3:87:dd:39:2a:
10:b0:11:bb:ff:86:28:79:8c:f2:1d:15:f2:35:5c:ed:13:4e:
58:03:df:bd:8d:88:e6:8f:ca:7c:9b:39:b3:37:cd:14:b4:d3:
a3:4f:9c:96:f2:c0:0e:20:a8:03:84:c5:a6:65:80:15:e7:0f:
83:f2:03:8b:5c:c9:22:00:66:46:85:4a:72:8d:3b:2a:28:81:
2e:06:20:68:b0:71:2e:ef:23:bb:3b:06:54:fb:97:05:cc:66:
93:38:ee:df:00:69:a8:53:aa:76:3e:da:22:2a:14:d2:05:cf:
35:5f:04:97:40:e0:c2:91:94:a9:6e:a9:5e:ef:79:16:39:fa:
b5:30:57:f2
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYgCIc1EfrwVhLd1DWR/gwpIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTA5MjAwOTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTNjYjhmOGY1MTZiOTVjODI4MDc2ZGUxNjFkZTZiZWQ5NTdjMTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgr9BeGvGG2nwOrfEJS1c3TqY6s8B
zgXOrdGiZ1mzkGHi7PAmEtWTqb9nYoaUjQwxJH37Bx2QYMvyPt8MzAm/3EG1SbrR
frmzdtrm4YW3B33LejzrL3AVp/cWwUWK8B6xODrgczKV+xGxZUNr3IwmOD5Ea+kX
4jKyb014NnNrZfKqo2UdD9T8Q2eTDXG16susmyBoId1e7yxXB0HqEc/dtsj7ubxD
6Uyke4DqzNDBLF8ctKAHQ/GQOvU7nkkOTrxZ9ZXEdDD6E7vsQHFNm1YePk1aGSn6
vprY6PwuDhvcT5flgl75QzNRQZnUgVjgyBHxEAe05fzyM6qm9XB8YiNIyQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAU8uPj1FrlcgoB23hYd5r7ZV8FdMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvQlR5NC1QVVd1VnlDZ0hiZUZoM212dGxYd1YwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGCrEAnYJtS5/MlZbyWg
9Gjiwl6defBx+q9J9NpviJM+5i0BoTi44bPMFF5CHFjwO2bxZs/Qjhc+Vhkjq/FO
Sc4H7I9Zr84YcOPE3qShIb0H1AEoE3GsLTgrR2HWocChc740/X0GSFXfeg73C+ha
aTilK58JH9rPoafDh905KhCwEbv/hih5jPIdFfI1XO0TTlgD372NiOaPynybObM3
zRS006NPnJbywA4gqAOExaZlgBXnD4PyA4tcySIAZkaFSnKNOyoogS4GIGiwcS7v
I7s7BlT7lwXMZpM47t8AaahTqnY+2iIqFNIFzzVfBJdA4MKRlKluqV7veRY5+rUw
V/I=
-----END CERTIFICATE-----
Generated at Mon Jun 9 03:46:24 2025 by rpki-client