Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/BGJmtbVWTzs_wiNkLSkP1EhHEgU.roa
File: BGJmtbVWTzs_wiNkLSkP1EhHEgU.roa (raw, json)
Hash identifier: DK23OsdLl+z6cU0gw3c4CK0yYGKOGeWwlsXZuRDR6uE=
Subject key identifier: 04:62:66:B5:B5:56:4F:3B:3F:C2:23:64:2D:29:0F:D4:48:47:12:05
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B314C25EA0CD43C492FBB73C8E8E3FBA9
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/BGJmtbVWTzs_wiNkLSkP1EhHEgU.roa
Signing time: Sun 15 Oct 2023 03:05:55 +0000
ROA not before: Sun 15 Oct 2023 03:05:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:314b:d790/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:31:4c:25:ea:0c:d4:3c:49:2f:bb:73:c8:e8:e3:fb:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 15 03:05:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=046266b5b5564f3b3fc223642d290fd448471205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:09:bb:3d:f5:56:6e:9c:a5:92:03:93:90:f9:
cb:36:3d:10:05:c5:8f:8b:a0:fc:48:07:1b:fd:80:
8c:d2:67:d9:d8:0f:af:dd:10:ba:ee:15:e7:52:98:
ba:05:e7:57:59:a4:64:c5:79:9c:f7:55:7a:fe:42:
bd:72:43:d7:47:a9:99:c7:05:a4:13:d0:cc:0f:24:
3d:a9:0d:72:a9:fd:f1:5c:be:81:15:3b:27:9a:48:
fd:bd:f0:2c:f7:89:6c:53:20:94:2e:39:26:ab:f4:
97:fd:1a:45:33:d1:2c:ca:0e:9a:16:83:e5:40:96:
6b:01:95:35:bb:61:60:61:b2:0f:86:96:a3:7e:62:
80:d1:ce:7b:6a:e0:71:82:a8:0d:f6:70:7c:5d:b5:
15:dc:f6:3c:3d:4b:1e:68:55:1e:aa:b0:2e:e6:a2:
5e:d5:8a:cc:f0:1f:d1:2c:c5:9a:fc:30:a9:94:63:
2e:bf:83:b7:ab:ee:a1:bd:71:df:14:b2:31:f3:92:
57:df:c9:4c:f1:b8:94:f9:cf:00:a7:9b:6a:8d:78:
98:d9:a3:4e:29:94:31:da:eb:9b:35:e4:0b:34:cc:
c7:a6:f4:78:cb:32:d3:d8:fa:5f:0c:50:04:f3:79:
86:e7:ef:6a:02:1a:4a:93:28:6d:43:8a:8d:74:91:
d2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:62:66:B5:B5:56:4F:3B:3F:C2:23:64:2D:29:0F:D4:48:47:12:05
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/BGJmtbVWTzs_wiNkLSkP1EhHEgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a6:87:81:b9:2e:c3:ec:4c:8e:fb:43:a5:9b:cc:36:84:73:6e:
81:7b:f1:b9:27:f1:b0:4d:fc:52:a5:1a:e7:b2:3f:10:fd:8d:
d2:00:1e:98:79:6f:88:31:9b:69:0a:b7:e0:fa:f5:35:19:46:
9e:69:d5:5c:6c:99:56:d2:e0:f8:4b:ff:72:12:7a:59:19:4c:
d0:ed:0a:82:eb:62:89:af:58:ae:b8:09:cb:80:c2:17:ce:7b:
8d:eb:8f:fd:6c:1c:d0:1c:4e:66:f6:17:8f:0d:7a:aa:6f:09:
6e:77:56:9b:f6:46:1f:31:36:96:e3:f2:90:29:27:5f:77:da:
aa:96:1f:c7:42:84:de:c0:34:1f:e0:8e:c5:9e:d6:bc:2a:4d:
b3:d7:6c:18:43:ef:23:aa:f7:52:41:44:b2:05:b8:fa:09:83:
c0:b4:b9:95:2e:73:ba:1c:7b:72:77:83:91:da:d2:7b:88:2d:
36:3c:3b:1d:39:3f:27:f5:7d:a1:f2:d4:5f:14:97:23:1a:44:
c3:49:fa:df:06:5e:b4:2c:92:89:f3:6b:ac:58:25:b9:e0:87:
cd:90:5d:44:78:41:22:35:9c:5c:9f:37:cf:ff:91:a3:f2:a2:
e5:fd:59:ea:e9:69:4c:d2:92:0f:51:52:38:49:2a:f6:62:67:
97:41:6a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 12:40:48 2025 by rpki-client