Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Bqt96mzLs1Ebq-0rg3QKlbsJkDo.roa
File: Bqt96mzLs1Ebq-0rg3QKlbsJkDo.roa (raw, json)
Hash identifier: x+yIUyIWnKu/PibDWgmp0cNaxVVyWk+02I3P9uYvBFA=
Subject key identifier: 06:AB:7D:EA:6C:CB:B3:51:1B:AB:ED:2B:83:74:0A:95:BB:09:90:3A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018338B2900FE186367B18F47928759B17C4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Bqt96mzLs1Ebq-0rg3QKlbsJkDo.roa
Signing time: Tue 13 Sep 2022 21:12:49 +0000
ROA not before: Tue 13 Sep 2022 21:12:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:38:b2:90:0f:e1:86:36:7b:18:f4:79:28:75:9b:17:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 13 21:12:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=06ab7dea6ccbb3511babed2b83740a95bb09903a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3a:00:60:89:0b:ba:38:af:2b:ef:14:b9:e0:
bf:31:2f:fb:fe:37:e5:8a:e0:38:2c:9b:ab:3d:9b:
97:81:8a:98:34:09:d6:db:93:7d:d0:58:70:a3:b0:
b4:ee:3d:dc:2a:c4:0e:e5:a6:7f:c0:75:e8:3d:73:
16:ef:0d:f4:b6:60:eb:e5:a2:ee:67:2a:a0:d5:d2:
9c:36:15:a8:24:12:04:27:04:2b:b3:1b:38:75:de:
e3:e2:44:8a:af:92:e6:cc:80:6b:db:35:24:ad:23:
06:ed:d6:b4:5d:3e:4d:86:9a:7b:ea:a6:60:b4:93:
41:f1:4d:5d:91:e9:43:d7:b3:6f:71:b2:fc:4e:60:
fd:25:64:23:b7:1e:f5:02:56:e4:21:70:b7:86:9c:
fc:b1:c7:79:25:fa:eb:bf:30:e5:36:33:5a:1d:cd:
49:a9:58:72:74:04:24:a4:3b:1b:b7:83:a2:2e:86:
57:59:0a:f7:26:cf:16:3b:80:8f:95:64:3c:75:d6:
98:01:01:7e:56:15:5a:e8:9d:f9:8b:ee:5f:b9:e1:
13:43:04:74:b2:42:99:d2:a2:d1:ed:44:82:36:b4:
25:cc:fd:1f:2b:69:6f:c4:af:0d:c2:6e:90:82:10:
06:9a:6e:6f:61:8f:71:62:a2:2c:e2:8d:04:ea:54:
e2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:AB:7D:EA:6C:CB:B3:51:1B:AB:ED:2B:83:74:0A:95:BB:09:90:3A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Bqt96mzLs1Ebq-0rg3QKlbsJkDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9b:a0:27:9e:ba:74:c8:2d:5c:2f:b3:e4:02:63:66:87:9a:57:
c5:40:32:7a:ab:f5:04:f0:f3:b9:17:fe:12:33:e1:bf:07:12:
d0:be:c4:7c:96:d7:40:41:52:6f:16:3a:3f:66:8f:f7:aa:ef:
2f:0f:df:4d:3f:ad:78:6a:c7:10:db:78:e9:fc:7d:aa:b0:b7:
5c:24:15:28:e0:68:15:4f:25:ef:65:40:02:cd:ae:c8:b4:2a:
6d:83:09:00:51:8a:af:20:bd:53:9e:22:cc:cc:3e:71:61:45:
8d:47:b9:4f:6e:1d:67:8d:71:ad:27:96:3e:f9:0d:2a:39:ea:
92:1f:82:e5:02:cd:4e:38:1b:f8:4a:bc:47:1f:38:e4:c1:4f:
16:ce:2c:ea:55:55:99:dd:cc:8a:0b:aa:4c:41:17:ef:71:66:
2b:ba:fa:7b:ac:56:89:28:71:50:f6:3d:14:a9:d1:eb:dd:e9:
40:a5:33:22:e4:2b:91:ec:2c:3b:90:8f:67:f7:ce:27:dc:ea:
e4:16:2c:c6:2b:80:6c:11:d5:c8:a6:af:a2:87:17:8d:ee:f9:
6a:7e:56:c3:55:d2:8b:f4:9a:75:b3:ea:7a:6d:d2:f7:04:c3:
a1:69:85:0c:38:8b:2a:92:2a:0c:fe:f7:8d:d9:69:ad:50:17:
66:31:dc:d6
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYM4spAP4YY2exj0eSh1mxfEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwOTEzMjExMjQ5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNmFiN2RlYTZjY2JiMzUxMWJhYmVkMmI4Mzc0MGE5NWJiMDk5MDNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzoAYIkLujivK+8UueC/MS/7/jfl
iuA4LJurPZuXgYqYNAnW25N90Fhwo7C07j3cKsQO5aZ/wHXoPXMW7w30tmDr5aLu
Zyqg1dKcNhWoJBIEJwQrsxs4dd7j4kSKr5LmzIBr2zUkrSMG7da0XT5Nhpp76qZg
tJNB8U1dkelD17NvcbL8TmD9JWQjtx71AlbkIXC3hpz8scd5JfrrvzDlNjNaHc1J
qVhydAQkpDsbt4OiLoZXWQr3Js8WO4CPlWQ8ddaYAQF+VhVa6J35i+5fueETQwR0
skKZ0qLR7USCNrQlzP0fK2lvxK8Nwm6QghAGmm5vYY9xYqIs4o0E6lTimQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAarfepsy7NRG6vtK4N0CpW7CZA6MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvQnF0OTZtekxzMUVicS0wcmczUUtsYnNKa0RvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJugJ566dMgtXC+z5AJj
ZoeaV8VAMnqr9QTw87kX/hIz4b8HEtC+xHyW10BBUm8WOj9mj/eq7y8P300/rXhq
xxDbeOn8faqwt1wkFSjgaBVPJe9lQALNrsi0Km2DCQBRiq8gvVOeIszMPnFhRY1H
uU9uHWeNca0nlj75DSo56pIfguUCzU44G/hKvEcfOOTBTxbOLOpVVZndzIoLqkxB
F+9xZiu6+nusVokocVD2PRSp0evd6UClMyLkK5HsLDuQj2f3zifc6uQWLMYrgGwR
1cimr6KHF43u+Wp+VsNV0ov0mnWz6npt0vcEw6FphQw4iyqSKgz+943Zaa1QF2Yx
3NY=
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:07:30 2025 by rpki-client