Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BfCVzALPhiod0rI0lHS5h_dJ95g.roa
File: BfCVzALPhiod0rI0lHS5h_dJ95g.roa (raw, json)
Hash identifier: +zTreW88STDT759AvM2L94VkM6H6+18bkK15z537O0E=
Subject key identifier: 05:F0:95:CC:02:CF:86:2A:1D:D2:B2:34:94:74:B9:87:F7:49:F7:98
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182211B24C618BA4CF6348255601C2CFDFE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BfCVzALPhiod0rI0lHS5h_dJ95g.roa
Signing time: Thu 21 Jul 2022 14:13:23 +0000
ROA not before: Thu 21 Jul 2022 14:13:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:21:1b:24:c6:18:ba:4c:f6:34:82:55:60:1c:2c:fd:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 21 14:13:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=05f095cc02cf862a1dd2b2349474b987f749f798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1d:c0:e7:dc:62:c6:70:3f:b1:8a:fb:eb:55:
0a:61:55:43:17:e8:ad:e6:37:7e:ef:e2:a5:19:17:
a2:19:80:29:cc:6e:8a:de:6b:73:ad:57:e5:29:2b:
80:5b:73:ea:bc:e5:80:16:6b:03:e2:52:4b:4c:6f:
d5:bf:b6:ee:3f:23:01:ec:ba:5b:f5:47:de:76:86:
03:90:be:71:31:fc:bc:86:f6:d2:ee:62:86:2a:b9:
2d:41:e6:6f:65:cb:3d:53:26:eb:00:16:62:94:d8:
4a:a8:42:f6:26:93:52:04:c3:33:59:06:b4:dc:3e:
98:2f:71:18:94:e9:64:2d:ca:d6:38:bc:55:c4:b1:
d5:c3:0f:94:82:43:00:73:98:57:ec:b8:93:6a:76:
85:be:b7:09:3c:f7:87:c0:52:f5:5e:87:a5:72:6b:
bc:80:84:26:d3:2f:38:5c:c6:b6:a1:2b:29:17:e2:
96:ce:12:11:de:09:91:75:ec:75:f6:5c:e1:b3:c3:
f8:a8:b3:08:ef:74:5c:79:2b:4a:2f:7c:62:b6:c4:
2d:54:4e:b1:e8:e4:9b:cd:f1:ed:7f:e5:ee:bc:e9:
5a:d1:6d:98:f9:d9:e8:85:b9:db:72:fa:f0:b3:9f:
69:8d:cb:b5:59:74:bd:e0:bc:df:75:7a:21:d8:09:
ec:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:F0:95:CC:02:CF:86:2A:1D:D2:B2:34:94:74:B9:87:F7:49:F7:98
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BfCVzALPhiod0rI0lHS5h_dJ95g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
67:6f:66:04:5d:fe:4e:ec:53:34:7c:05:a9:d4:bc:7e:9c:dd:
19:ba:76:38:a7:8f:d7:c3:4d:8d:5f:91:8a:78:1c:c4:ec:ec:
98:92:fc:78:d9:a7:cf:0c:c4:3c:ef:69:c4:19:57:a9:e7:6d:
2b:2f:17:7c:bf:a7:d1:2c:a7:c4:f8:25:c5:5e:cf:20:54:2b:
84:65:3f:d1:c1:0f:01:81:ad:69:1c:91:10:82:ff:18:ed:b4:
0d:5b:30:00:29:80:31:6b:15:ee:b8:b1:a6:20:32:58:5d:fc:
75:b8:1f:96:1d:bf:43:be:b9:73:f8:9c:fd:4b:79:59:ad:4f:
19:9d:53:a7:ea:88:d2:0c:54:20:eb:2b:1c:dd:fe:7a:f9:da:
6e:74:ef:6f:80:44:fc:10:33:c4:09:cb:6b:79:fd:b9:86:da:
9e:11:b4:7e:0e:d4:aa:09:32:36:c6:2e:98:5f:65:de:aa:42:
94:55:70:36:16:88:43:4b:b4:d0:a3:56:18:38:bf:2e:03:fb:
62:61:70:43:e7:16:6c:c4:22:03:21:ad:ae:60:f5:32:42:12:
93:69:9a:0d:8f:9e:3a:64:9d:98:6e:43:ea:eb:d7:ad:93:4e:
3a:53:75:66:a9:db:0d:ed:20:09:5b:a3:ab:c3:c7:9f:9a:36:
c5:b8:5d:47
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYIhGyTGGLpM9jSCVWAcLP3+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwNzIxMTQxMzIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNWYwOTVjYzAyY2Y4NjJhMWRkMmIyMzQ5NDc0Yjk4N2Y3NDlmNzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlR3A59xixnA/sYr761UKYVVDF+it
5jd+7+KlGReiGYApzG6K3mtzrVflKSuAW3PqvOWAFmsD4lJLTG/Vv7buPyMB7Lpb
9UfedoYDkL5xMfy8hvbS7mKGKrktQeZvZcs9UybrABZilNhKqEL2JpNSBMMzWQa0
3D6YL3EYlOlkLcrWOLxVxLHVww+UgkMAc5hX7LiTanaFvrcJPPeHwFL1Xoelcmu8
gIQm0y84XMa2oSspF+KWzhIR3gmRdex19lzhs8P4qLMI73RceStKL3xitsQtVE6x
6OSbzfHtf+XuvOla0W2Y+dnohbnbcvrws59pjcu1WXS94LzfdXoh2AnsHQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAXwlcwCz4YqHdKyNJR0uYf3SfeYMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvQmZDVnpBTFBoaW9kMHJJMGxIUzVoX2RKOTVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGdvZgRd/k7sUzR8BanU
vH6c3Rm6djinj9fDTY1fkYp4HMTs7JiS/HjZp88MxDzvacQZV6nnbSsvF3y/p9Es
p8T4JcVezyBUK4RlP9HBDwGBrWkckRCC/xjttA1bMAApgDFrFe64saYgMlhd/HW4
H5Ydv0O+uXP4nP1LeVmtTxmdU6fqiNIMVCDrKxzd/nr52m5072+ARPwQM8QJy2t5
/bmG2p4RtH4O1KoJMjbGLphfZd6qQpRVcDYWiENLtNCjVhg4vy4D+2JhcEPnFmzE
IgMhra5g9TJCEpNpmg2PnjpknZhuQ+rr162TTjpTdWap2w3tIAlbo6vDx5+aNsW4
XUc=
-----END CERTIFICATE-----
Generated at Mon Jun 9 06:48:30 2025 by rpki-client