Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0XdRc9WR1LhqSpjkBce-Z0qYoaM.roa
File: 0XdRc9WR1LhqSpjkBce-Z0qYoaM.roa (raw, json)
Hash identifier: KhuGQF5jFxotWCom0kQ1EAnkq27Y8ZK47iFaFEksMco=
Subject key identifier: D1:77:51:73:D5:91:D4:B8:6A:4A:98:E4:05:C7:BE:67:4A:98:A1:A3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01865C78ABBE0273CB8E387D5A75E1D5BD3C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0XdRc9WR1LhqSpjkBce-Z0qYoaM.roa
Signing time: Thu 16 Feb 2023 23:04:17 +0000
ROA not before: Thu 16 Feb 2023 23:04:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:5c78:9d6a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5c:78:ab:be:02:73:cb:8e:38:7d:5a:75:e1:d5:bd:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 16 23:04:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d1775173d591d4b86a4a98e405c7be674a98a1a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:14:d6:68:e0:a7:68:2f:3f:af:b9:ec:85:c0:
25:c3:80:45:24:12:55:eb:82:a4:3d:ab:07:60:95:
fe:e5:cc:4b:94:77:ef:37:0b:b2:1f:2b:0c:19:25:
8f:91:70:90:42:c0:61:1f:00:36:13:27:3f:ca:22:
09:57:77:4f:06:8f:2f:21:0b:64:f1:4e:a5:33:d8:
08:3b:d4:8d:00:0b:9e:58:79:96:df:06:2b:69:bd:
4e:fd:06:e8:0c:44:70:a4:ca:36:8c:4a:fa:c7:58:
54:56:d5:16:ac:3b:c3:6f:4f:6c:da:97:a0:7e:a6:
1b:10:9c:13:ea:5e:ce:b3:b4:74:c4:a2:10:47:cb:
c2:c7:5b:3b:46:a1:a4:42:e0:b3:e9:81:ab:d5:35:
de:9c:77:92:9a:9c:3f:46:1f:f7:5f:d3:ed:3a:db:
84:ad:74:27:3a:6f:cb:b5:d0:df:0c:12:2e:16:30:
63:83:0b:44:3f:a4:07:9a:3c:60:0a:20:a9:76:55:
19:e5:39:07:b7:ee:7c:c7:39:99:4d:90:11:61:92:
1f:a3:b1:0e:dc:1f:6f:00:54:85:ce:81:77:f5:c2:
e4:1c:f2:93:9e:e7:e8:13:86:aa:15:5d:6b:4c:7d:
1f:6e:b6:81:71:08:56:cb:6b:bb:6d:98:20:c7:57:
d2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:77:51:73:D5:91:D4:B8:6A:4A:98:E4:05:C7:BE:67:4A:98:A1:A3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0XdRc9WR1LhqSpjkBce-Z0qYoaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
64:4f:54:74:db:59:93:4f:78:0c:6d:27:80:bb:ea:f5:e4:92:
7f:78:e8:50:06:d8:4d:9e:cd:a0:57:d3:fd:54:d1:75:e4:71:
0b:de:5d:ea:07:9b:df:e6:e1:61:8b:91:01:2a:b6:06:0d:f9:
51:b6:0c:1e:3d:74:e4:51:31:db:6b:a1:fd:3c:e3:64:a2:ab:
ae:bb:ca:a4:3e:98:47:6d:9a:7f:df:a0:b7:4e:27:87:99:35:
c5:a7:e2:4e:0c:e0:2e:a6:69:72:75:2a:d2:97:e0:3f:1e:03:
db:cf:ff:e3:00:72:15:21:0c:48:03:9b:3e:72:ce:ec:36:19:
33:03:a0:df:34:14:38:10:4c:9a:a5:11:8a:db:f5:34:11:0c:
e1:a4:2e:f9:0b:e5:68:7d:06:f7:46:7d:dc:13:f3:51:41:0a:
d1:96:ba:12:cd:42:4e:6a:be:bb:a0:61:98:01:f1:68:c8:22:
6a:70:ad:11:cb:88:96:a9:2c:f3:f7:61:5d:17:e7:45:77:f6:
09:3b:07:90:4d:10:15:42:98:c7:fd:7e:37:4a:86:51:dd:c6:
f2:7d:51:d0:f7:2d:6f:96:10:e2:51:f3:3a:82:3d:13:d0:ce:
dd:40:b7:92:e8:69:20:1f:8e:48:39:f8:95:a8:e7:66:94:ec:
33:17:d7:b9
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYZceKu+AnPLjjh9WnXh1b08MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjE2MjMwNDE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMTc3NTE3M2Q1OTFkNGI4NmE0YTk4ZTQwNWM3YmU2NzRhOThhMWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxTWaOCnaC8/r7nshcAlw4BFJBJV
64KkPasHYJX+5cxLlHfvNwuyHysMGSWPkXCQQsBhHwA2Eyc/yiIJV3dPBo8vIQtk
8U6lM9gIO9SNAAueWHmW3wYrab1O/QboDERwpMo2jEr6x1hUVtUWrDvDb09s2peg
fqYbEJwT6l7Os7R0xKIQR8vCx1s7RqGkQuCz6YGr1TXenHeSmpw/Rh/3X9PtOtuE
rXQnOm/LtdDfDBIuFjBjgwtEP6QHmjxgCiCpdlUZ5TkHt+58xzmZTZARYZIfo7EO
3B9vAFSFzoF39cLkHPKTnufoE4aqFV1rTH0fbraBcQhWy2u7bZggx1fSHQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNF3UXPVkdS4akqY5AXHvmdKmKGjMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMFhkUmM5V1IxTGhxU3Bqa0JjZS1aMHFZb2FNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGRPVHTbWZNPeAxtJ4C7
6vXkkn946FAG2E2ezaBX0/1U0XXkcQveXeoHm9/m4WGLkQEqtgYN+VG2DB49dORR
Mdtrof0842Siq667yqQ+mEdtmn/foLdOJ4eZNcWn4k4M4C6maXJ1KtKX4D8eA9vP
/+MAchUhDEgDmz5yzuw2GTMDoN80FDgQTJqlEYrb9TQRDOGkLvkL5Wh9BvdGfdwT
81FBCtGWuhLNQk5qvrugYZgB8WjIImpwrRHLiJapLPP3YV0X50V39gk7B5BNEBVC
mMf9fjdKhlHdxvJ9UdD3LW+WEOJR8zqCPRPQzt1At5LoaSAfjkg5+JWo52aU7DMX
17k=
-----END CERTIFICATE-----
Generated at Wed Apr 30 18:46:20 2025 by rpki-client