Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/BGe-PDeTjHAPFfqIV6pApOZKZvQ.roa
File: BGe-PDeTjHAPFfqIV6pApOZKZvQ.roa (raw, json)
Hash identifier: PdOhS8tYWTfF43rVBz5fDqncS84CQ26UBPs3WNvu7QA=
Subject key identifier: 04:67:BE:3C:37:93:8C:70:0F:15:FA:88:57:AA:40:A4:E6:4A:66:F4
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C05C2308D61194619CB0CEE7ABE1DF5F0
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/BGe-PDeTjHAPFfqIV6pApOZKZvQ.roa
Signing time: Sat 25 Nov 2023 09:14:21 +0000
ROA not before: Sat 25 Nov 2023 09:14:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:05:c2:30:8d:61:19:46:19:cb:0c:ee:7a:be:1d:f5:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 25 09:14:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0467be3c37938c700f15fa8857aa40a4e64a66f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f1:c6:59:ca:5e:4b:fd:bf:05:4c:5e:16:d2:
83:34:f8:9f:61:da:26:a6:d4:96:eb:6b:3b:c3:a9:
45:20:21:e7:08:8c:a9:4a:0f:33:80:a0:47:57:d4:
f0:ae:1e:22:3a:cd:f4:5b:f1:cc:83:53:f7:b7:d5:
76:20:5c:e9:82:95:05:96:dd:8d:20:6d:95:39:07:
d2:68:3a:60:31:36:fa:ce:90:3f:26:66:f1:ac:b9:
4e:31:45:30:70:f8:4a:85:60:26:0a:63:f3:4c:e4:
a4:ad:f0:ac:d4:d6:04:9b:dc:09:ac:5d:09:d6:3d:
3e:4d:20:be:cf:f4:9f:2a:cb:4e:94:2c:26:3b:0f:
c2:6e:84:85:fd:07:9b:3a:0c:34:f0:03:bb:77:66:
a5:e8:d4:41:89:17:9b:6b:18:ac:f3:d5:e7:e2:a1:
00:cf:c6:49:d2:aa:ed:82:4f:1d:8c:18:9a:9a:62:
92:a9:6a:99:d4:30:80:23:28:1f:af:a6:30:fb:f1:
78:23:35:39:db:f0:f1:0f:64:7b:60:ae:cd:1c:31:
21:35:f7:15:7b:97:a4:22:1e:44:2d:cc:e3:9b:4e:
df:53:d0:54:10:c6:22:ed:ca:43:3c:86:a0:d6:d9:
a8:4d:9f:65:38:d9:f6:e5:d6:da:75:cd:ce:cc:fb:
eb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:67:BE:3C:37:93:8C:70:0F:15:FA:88:57:AA:40:A4:E6:4A:66:F4
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/BGe-PDeTjHAPFfqIV6pApOZKZvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
35:60:c9:30:42:4b:0f:0d:6d:35:8e:b2:7a:fa:66:96:3f:ff:
08:cf:05:27:d6:68:7a:a9:08:48:03:c5:97:0d:cd:c7:ed:f7:
8d:e6:d3:ae:00:10:9f:a9:87:49:ad:50:99:4c:95:bf:62:90:
f5:ab:84:ed:14:f5:30:cb:29:49:e1:17:63:7a:00:3c:98:bf:
40:f2:4b:99:c0:27:ad:0c:46:23:fd:f5:0b:34:c5:77:f4:55:
77:98:d5:0c:d5:3b:07:b1:29:3d:2c:6d:dd:96:2c:b1:42:5a:
d8:2f:ad:3f:be:66:f4:81:11:ac:a7:d7:91:91:4a:d8:2d:60:
49:56:bb:6e:09:3f:c4:93:5e:db:a4:dc:de:02:63:60:78:3a:
c1:41:a3:32:ae:7e:41:b0:54:50:d1:af:83:d4:ab:42:f6:b0:
b6:50:8b:69:ac:1d:02:01:e6:cd:21:3d:a3:1c:59:1e:b7:5f:
73:a0:bc:31:e8:85:60:b1:ef:fb:15:46:39:a0:bc:0e:1f:e1:
cc:9c:fc:04:fb:cc:3d:26:e5:a0:2d:1c:93:3e:a5:cc:1a:f9:
7e:11:2c:40:0a:ca:87:7f:f1:35:12:7f:65:25:dd:f1:97:c4:
57:33:c8:c1:2f:9e:f2:ed:64:80:a2:2d:12:bb:f9:8b:69:90:
11:34:7f:95
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYwFwjCNYRlGGcsM7nq+HfXwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTI1MDkxNDIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNDY3YmUzYzM3OTM4YzcwMGYxNWZhODg1N2FhNDBhNGU2NGE2NmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fHGWcpeS/2/BUxeFtKDNPifYdom
ptSW62s7w6lFICHnCIypSg8zgKBHV9Twrh4iOs30W/HMg1P3t9V2IFzpgpUFlt2N
IG2VOQfSaDpgMTb6zpA/JmbxrLlOMUUwcPhKhWAmCmPzTOSkrfCs1NYEm9wJrF0J
1j0+TSC+z/SfKstOlCwmOw/CboSF/QebOgw08AO7d2al6NRBiRebaxis89Xn4qEA
z8ZJ0qrtgk8djBiammKSqWqZ1DCAIygfr6Yw+/F4IzU52/DxD2R7YK7NHDEhNfcV
e5ekIh5ELczjm07fU9BUEMYi7cpDPIag1tmoTZ9lONn25dbadc3OzPvrLwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFARnvjw3k4xwDxX6iFeqQKTmSmb0MB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvQkdlLVBEZVRqSEFQRmZxSVY2cEFwT1pLWnZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADVgyTBCSw8NbTWOsnr6
ZpY//wjPBSfWaHqpCEgDxZcNzcft943m064AEJ+ph0mtUJlMlb9ikPWrhO0U9TDL
KUnhF2N6ADyYv0DyS5nAJ60MRiP99Qs0xXf0VXeY1QzVOwexKT0sbd2WLLFCWtgv
rT++ZvSBEayn15GRStgtYElWu24JP8STXtuk3N4CY2B4OsFBozKufkGwVFDRr4PU
q0L2sLZQi2msHQIB5s0hPaMcWR63X3OgvDHohWCx7/sVRjmgvA4f4cyc/AT7zD0m
5aAtHJM+pcwa+X4RLEAKyod/8TUSf2Ul3fGXxFczyMEvnvLtZICiLRK7+YtpkBE0
f5U=
-----END CERTIFICATE-----
Generated at Mon Apr 21 06:50:14 2025 by rpki-client