Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/BJUv-Frp0hRrDmRDRrGsuAzExG4.roa
File: BJUv-Frp0hRrDmRDRrGsuAzExG4.roa (raw, json)
Hash identifier: bd4BoyZvKIqxx9QgpjbmzZW0s1XEECdGmSoxz+/x7go=
Subject key identifier: 04:95:2F:F8:5A:E9:D2:14:6B:0E:64:43:46:B1:AC:B8:0C:C4:C4:6E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B87C8A6AE1171C9FBC47AA90259F3021C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/BJUv-Frp0hRrDmRDRrGsuAzExG4.roa
Signing time: Tue 31 Oct 2023 22:09:15 +0000
ROA not before: Tue 31 Oct 2023 22:09:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:87:c8:a6:ae:11:71:c9:fb:c4:7a:a9:02:59:f3:02:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 31 22:09:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=04952ff85ae9d2146b0e644346b1acb80cc4c46e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:36:c6:4f:c3:a1:60:a5:a6:57:d0:4f:32:38:
04:07:27:a8:75:f9:f8:a9:94:a7:4d:13:0b:12:b6:
ab:3d:ea:7d:8f:cc:f6:33:58:17:49:60:24:c4:56:
9b:e2:1c:e1:29:9a:ba:d7:4d:67:61:ae:60:8a:e3:
0c:2b:bd:5d:7f:b0:48:9f:58:9e:54:f6:f7:c2:23:
72:7f:d3:8f:28:c7:08:f9:26:2a:b6:e2:9d:f2:57:
05:5b:df:87:62:d2:7d:d4:b6:43:ce:31:03:76:28:
a9:f1:b0:81:31:45:de:fc:09:38:3d:53:24:19:99:
2f:0e:8b:58:fb:f9:c4:86:5f:be:d7:10:05:ae:af:
1e:aa:f8:d4:c6:07:11:3f:a2:cf:a8:be:e5:11:5a:
a8:80:65:d6:26:14:56:bf:b0:2c:f1:0e:dd:10:84:
88:1e:78:43:af:7c:80:8b:b2:c7:b5:8a:39:8e:1b:
b8:6c:64:87:53:39:2e:ba:47:fd:5e:e5:b9:25:74:
89:3c:95:18:a7:0c:ec:e8:8d:90:9e:3c:cc:40:b2:
23:5f:07:0a:73:8c:59:3e:33:bd:1f:df:5c:a6:34:
73:15:e2:2e:a0:1c:4d:a3:6a:10:0c:65:33:22:1e:
dc:e6:a3:d6:31:ea:14:74:43:ed:21:b3:dc:2b:c1:
7b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:95:2F:F8:5A:E9:D2:14:6B:0E:64:43:46:B1:AC:B8:0C:C4:C4:6E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/BJUv-Frp0hRrDmRDRrGsuAzExG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
36:e6:e3:ad:39:fe:80:a9:4f:03:b6:f3:a5:ed:a7:d9:92:15:
12:11:db:9b:8a:72:df:5e:54:be:e2:9b:c3:d7:a6:99:39:79:
2e:4a:31:ff:81:e3:30:8e:e4:27:de:5b:61:b5:73:32:7e:a9:
99:c2:ab:9d:ac:7f:17:06:94:44:8e:0c:5b:53:ca:ea:61:92:
03:f0:76:ce:99:69:97:e5:61:15:b3:a9:aa:c7:bc:df:20:63:
d5:3d:fc:cb:55:07:72:10:3d:f2:dd:20:3b:2d:0e:b4:ea:78:
d9:ed:63:fe:c9:c9:7b:7f:b9:af:ed:73:15:3f:27:f1:f0:84:
02:30:93:6b:25:6a:4a:8b:ba:51:b6:62:b3:e4:43:86:e7:dd:
e9:8a:f6:e8:03:fa:ad:f7:c9:e2:16:a3:98:99:f2:de:11:2c:
8f:51:14:28:57:68:dc:bf:6e:0f:3c:8e:72:9f:3c:c1:41:49:
15:28:b5:78:49:2e:c4:d5:2e:67:ce:be:29:ab:50:c4:a0:1d:
c3:39:74:ac:1a:f5:ba:34:17:20:40:8d:87:eb:21:43:4e:1d:
20:70:96:e2:6a:eb:95:20:89:95:20:a3:88:e2:63:53:52:7b:
d9:a6:74:65:63:bf:be:58:ec:76:19:1a:1d:c9:47:b8:55:47:
bc:af:f8:39
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYuHyKauEXHJ+8R6qQJZ8wIcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMDMxMjIwOTE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNDk1MmZmODVhZTlkMjE0NmIwZTY0NDM0NmIxYWNiODBjYzRjNDZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljbGT8OhYKWmV9BPMjgEByeodfn4
qZSnTRMLErarPep9j8z2M1gXSWAkxFab4hzhKZq6101nYa5giuMMK71df7BIn1ie
VPb3wiNyf9OPKMcI+SYqtuKd8lcFW9+HYtJ91LZDzjEDdiip8bCBMUXe/Ak4PVMk
GZkvDotY+/nEhl++1xAFrq8eqvjUxgcRP6LPqL7lEVqogGXWJhRWv7As8Q7dEISI
HnhDr3yAi7LHtYo5jhu4bGSHUzkuukf9XuW5JXSJPJUYpwzs6I2QnjzMQLIjXwcK
c4xZPjO9H99cpjRzFeIuoBxNo2oQDGUzIh7c5qPWMeoUdEPtIbPcK8F7RwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFASVL/ha6dIUaw5kQ0axrLgMxMRuMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvQkpVdi1GcnAwaFJyRG1SRFJyR3N1QXpFeEc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADbm4605/oCpTwO286Xt
p9mSFRIR25uKct9eVL7im8PXppk5eS5KMf+B4zCO5CfeW2G1czJ+qZnCq52sfxcG
lESODFtTyuphkgPwds6ZaZflYRWzqarHvN8gY9U9/MtVB3IQPfLdIDstDrTqeNnt
Y/7JyXt/ua/tcxU/J/HwhAIwk2slakqLulG2YrPkQ4bn3emK9ugD+q33yeIWo5iZ
8t4RLI9RFChXaNy/bg88jnKfPMFBSRUotXhJLsTVLmfOvimrUMSgHcM5dKwa9bo0
FyBAjYfrIUNOHSBwluJq65UgiZUgo4jiY1NSe9mmdGVjv75Y7HYZGh3JR7hVR7yv
+Dk=
-----END CERTIFICATE-----
Generated at Sat May 10 12:27:31 2025 by rpki-client