Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/BRMZIdRFHfEconBXLTTGS3sEbjs.roa
File: BRMZIdRFHfEconBXLTTGS3sEbjs.roa (raw, json)
Hash identifier: K9ue2ciKHYgj8Zd4y2lNXp081oOng09D02Ku3WJ1QbU=
Subject key identifier: 05:13:19:21:D4:45:1D:F1:1C:A2:70:57:2D:34:C6:4B:7B:04:6E:3B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AEABBF061EF8C804666E4575EEA29619F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/BRMZIdRFHfEconBXLTTGS3sEbjs.roa
Signing time: Sun 01 Oct 2023 10:14:59 +0000
ROA not before: Sun 01 Oct 2023 10:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ea:bb:f0:61:ef:8c:80:46:66:e4:57:5e:ea:29:61:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 1 10:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=05131921d4451df11ca270572d34c64b7b046e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:99:ac:ce:0a:81:be:37:e9:6f:6c:4f:f6:a8:
21:4a:06:08:11:6a:42:68:61:9d:5e:44:88:c1:27:
b1:6d:6e:0c:9b:68:f8:bb:07:39:f6:b3:9f:84:82:
20:7b:07:3a:62:74:11:c4:4a:3d:4e:8a:c5:d6:c1:
e8:e6:4d:1d:fc:c2:c4:19:a1:8e:6f:94:d9:e5:9f:
23:ef:39:9e:32:a6:4d:29:f7:cb:80:02:da:4d:eb:
91:1e:e1:3d:bd:f1:5e:63:e8:fd:4d:65:9a:b8:74:
5b:36:04:0e:0e:cb:fc:44:04:9a:5c:67:94:23:c1:
37:57:6b:3e:93:93:b9:6b:8a:3f:3d:ea:3d:8d:25:
59:e7:27:79:c2:a4:2c:cd:84:85:5b:ba:16:b3:f6:
1e:32:a0:29:9f:84:c4:aa:42:ee:95:f9:7e:1a:66:
f8:98:f9:da:d5:e7:dc:27:bd:b8:25:ea:7b:7c:aa:
46:e5:29:66:72:2b:0c:40:77:90:f8:c6:50:21:38:
d9:32:cf:09:65:9b:d6:26:b5:12:a3:8d:8b:2f:7c:
e4:b4:ef:52:b0:5c:73:5b:a7:3e:91:fa:0e:5c:89:
ca:36:f6:b7:36:be:d5:4e:d3:5c:5c:49:cd:f2:fd:
07:e0:a6:2d:34:9e:13:70:c8:0d:b1:47:70:b2:c3:
9d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:13:19:21:D4:45:1D:F1:1C:A2:70:57:2D:34:C6:4B:7B:04:6E:3B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/BRMZIdRFHfEconBXLTTGS3sEbjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
13:d9:52:2c:8f:93:1a:11:b1:72:cd:ea:19:53:d3:c1:15:e7:
cb:d7:67:8d:15:ea:58:b8:d6:80:6c:5b:24:d5:c3:b9:9e:b6:
c1:e6:82:b2:56:8e:4f:91:ee:9e:d4:79:c6:ee:67:cd:00:91:
ec:e0:5e:bb:2c:32:91:bc:ad:72:a3:eb:c1:21:60:39:88:22:
d5:29:73:71:89:e0:d4:ef:1b:cb:43:81:ce:dd:e5:dc:a1:d1:
2c:8f:9a:a3:8a:17:2d:21:82:b4:3d:97:d7:72:dd:d8:b5:dc:
2d:15:96:fa:db:70:80:00:02:1e:17:28:7e:dc:5c:c5:7e:13:
ba:19:1c:a0:dc:46:f4:32:5b:1c:40:f5:06:dd:b4:7c:31:6e:
05:45:3e:d2:03:81:5d:37:62:99:20:3d:4e:da:e6:a8:0d:46:
e3:69:87:59:3d:76:79:6b:0a:b6:bc:e6:44:3a:51:62:ac:f2:
28:df:22:3d:be:25:5e:1f:c9:f8:ee:2b:bd:6d:5a:b7:9e:cc:
69:24:a4:61:0f:8e:83:90:8a:1a:71:cc:1e:25:89:02:76:7e:
1b:ad:93:ca:5e:20:32:0f:b3:cd:b0:a4:56:e9:7e:d4:5a:21:
b5:d2:26:75:85:31:1a:03:45:57:eb:fa:6f:d7:42:bb:ce:a2:
25:ba:7d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:06:27 2025 by rpki-client