Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0lbI-OpcnJZBNmwikSXj1BjOWZI.roa
File: 0lbI-OpcnJZBNmwikSXj1BjOWZI.roa (raw, json)
Hash identifier: BuX/XoWxPrtS5/p7sIEAnY+Bt+TFRdHDafz7LhxVmh0=
Subject key identifier: D2:56:C8:F8:EA:5C:9C:96:41:36:6C:22:91:25:E3:D4:18:CE:59:92
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183A847FCB462FAD46DAAAAFC34850C7211
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0lbI-OpcnJZBNmwikSXj1BjOWZI.roa
Signing time: Wed 05 Oct 2022 13:13:53 +0000
ROA not before: Wed 05 Oct 2022 13:13:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:183:5f81:ab13/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a8:47:fc:b4:62:fa:d4:6d:aa:aa:fc:34:85:0c:72:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 5 13:13:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d256c8f8ea5c9c9641366c229125e3d418ce5992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a6:a4:95:1a:74:3c:83:fb:92:c1:b4:3c:6f:
bf:d7:c1:9a:da:13:6d:63:4c:16:74:61:90:98:59:
79:8d:41:76:cc:fc:df:bd:48:23:92:73:47:c2:fe:
28:7c:78:a4:fb:36:06:2a:a5:64:7e:58:b6:5a:8b:
1f:a9:6b:fc:64:06:fb:36:bb:2d:4d:9f:7f:65:af:
cb:c1:0f:16:51:80:5a:2e:36:97:9b:fd:32:7c:3d:
13:f0:6e:82:b9:1d:0e:32:bf:88:e4:24:d7:cf:aa:
1c:c5:c9:c1:43:d4:ec:96:5e:5e:27:12:a0:38:c9:
3c:57:7a:4c:9d:02:21:f4:20:4e:e1:e3:3b:77:e1:
3a:d0:30:af:58:8e:f2:d0:37:cd:a4:46:cc:25:93:
e9:38:58:09:cf:77:c1:57:f9:06:ed:7d:da:d2:99:
51:59:40:80:53:18:51:c8:6e:2a:0e:f1:fb:ba:ac:
74:33:c0:8b:1f:6c:7f:10:e3:66:59:b1:29:2a:e6:
74:e2:4f:0c:24:74:e9:30:df:bb:21:9a:ac:ab:65:
0b:63:c4:7b:e9:9e:4c:3d:5b:31:75:3e:f5:b0:f4:
87:c6:11:a2:4e:3b:54:25:b8:0e:bd:4e:02:25:02:
f2:79:c2:3f:6a:fa:f1:7c:30:d6:83:02:ba:11:d5:
a1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:56:C8:F8:EA:5C:9C:96:41:36:6C:22:91:25:E3:D4:18:CE:59:92
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0lbI-OpcnJZBNmwikSXj1BjOWZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1f:cb:2f:5c:6e:10:8a:e0:69:67:a4:b0:4e:27:8a:dc:35:7d:
49:31:47:fc:48:2a:17:97:3e:27:fd:85:c0:cf:0c:74:27:ac:
79:75:f6:c1:3e:a3:fa:ed:24:96:ae:08:04:92:c4:fb:58:48:
0d:03:95:ff:0a:fa:88:2f:7e:d9:3e:a5:83:f1:d9:8d:51:ba:
ec:2e:28:eb:d3:70:71:e0:33:79:fe:55:8a:0c:e6:7e:38:39:
4e:56:94:da:3d:b3:42:a9:07:59:68:b6:1b:26:da:78:8f:3f:
f9:25:4a:10:a2:2c:15:4e:a7:ee:8d:ba:1c:0d:6d:e6:88:da:
94:6a:d7:9f:b6:a8:dd:6e:43:bb:7a:5f:4c:28:c4:b1:b1:f4:
9f:7f:45:6d:12:d2:05:7e:91:37:d9:41:4a:e7:f3:42:c6:89:
9c:58:cf:ce:f7:6f:e5:cc:3d:f1:1d:3d:2d:ca:87:8c:cb:1c:
f6:56:8c:ca:e6:c4:1e:8e:0b:94:bd:f8:4c:b7:75:e1:b0:f4:
21:f2:5e:7a:9c:19:61:09:5c:55:64:be:f1:e4:e8:6c:d2:0f:
0a:83:3d:7c:a3:b4:f7:47:f7:1c:48:fc:c5:a5:3c:8c:ae:51:
78:49:98:b9:f4:ad:e4:fd:03:76:05:d9:52:8c:d3:44:6c:51:
b7:54:34:c7
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYOoR/y0YvrUbaqq/DSFDHIRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMDA1MTMxMzUzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjU2YzhmOGVhNWM5Yzk2NDEzNjZjMjI5MTI1ZTNkNDE4Y2U1OTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKaklRp0PIP7ksG0PG+/18Ga2hNt
Y0wWdGGQmFl5jUF2zPzfvUgjknNHwv4ofHik+zYGKqVkfli2WosfqWv8ZAb7Nrst
TZ9/Za/LwQ8WUYBaLjaXm/0yfD0T8G6CuR0OMr+I5CTXz6ocxcnBQ9Tsll5eJxKg
OMk8V3pMnQIh9CBO4eM7d+E60DCvWI7y0DfNpEbMJZPpOFgJz3fBV/kG7X3a0plR
WUCAUxhRyG4qDvH7uqx0M8CLH2x/EONmWbEpKuZ04k8MJHTpMN+7IZqsq2ULY8R7
6Z5MPVsxdT71sPSHxhGiTjtUJbgOvU4CJQLyecI/avrxfDDWgwK6EdWh0QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNJWyPjqXJyWQTZsIpEl49QYzlmSMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMGxiSS1PcGNuSlpCTm13aWtTWGoxQmpPV1pJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAB/LL1xuEIrgaWeksE4n
itw1fUkxR/xIKheXPif9hcDPDHQnrHl19sE+o/rtJJauCASSxPtYSA0Dlf8K+ogv
ftk+pYPx2Y1RuuwuKOvTcHHgM3n+VYoM5n44OU5WlNo9s0KpB1lothsm2niPP/kl
ShCiLBVOp+6NuhwNbeaI2pRq15+2qN1uQ7t6X0woxLGx9J9/RW0S0gV+kTfZQUrn
80LGiZxYz873b+XMPfEdPS3Kh4zLHPZWjMrmxB6OC5S9+Ey3deGw9CHyXnqcGWEJ
XFVkvvHk6GzSDwqDPXyjtPdH9xxI/MWlPIyuUXhJmLn0reT9A3YF2VKM00RsUbdU
NMc=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:49 2025 by rpki-client