Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0moG6_UVooAMuNNofM1GW0bbnFY.roa
File: 0moG6_UVooAMuNNofM1GW0bbnFY.roa (raw, json)
Hash identifier: dzUDyM7fohuol8o4VSOS4qKAObT3F/4oCz+uPP9c7Wg=
Subject key identifier: D2:6A:06:EB:F5:15:A2:80:0C:B8:D3:68:7C:CD:46:5B:46:DB:9C:56
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A32D8BD5D9779BCA4CE17D12A80AF2DF8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0moG6_UVooAMuNNofM1GW0bbnFY.roa
Signing time: Sat 26 Aug 2023 17:16:19 +0000
ROA not before: Sat 26 Aug 2023 17:16:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:32:d8:bd:5d:97:79:bc:a4:ce:17:d1:2a:80:af:2d:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 26 17:16:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d26a06ebf515a2800cb8d3687ccd465b46db9c56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5f:18:a7:cd:6f:2f:9b:e5:2c:da:89:5e:7e:
85:cd:00:0e:7e:0f:d3:a1:18:2e:13:05:55:26:a1:
ae:d1:4e:65:74:c2:d8:38:e5:e2:0b:84:c6:e3:7d:
e9:e2:cb:bb:f6:58:8a:b5:19:70:32:a2:1d:37:51:
01:3f:4a:9d:91:90:4b:20:b1:63:4f:9a:f1:2a:c8:
1c:85:24:5a:80:ff:65:f6:ac:cb:18:75:ad:30:b2:
4b:5c:e0:d5:fe:e8:fb:12:c7:08:c8:47:61:47:dc:
34:50:7d:53:d3:c6:bb:dd:ae:bc:59:d9:0a:16:ff:
97:47:e6:b9:a9:ca:e4:e4:12:29:57:a3:ff:9d:75:
b5:5d:fe:da:6f:1a:7e:e4:fc:22:c3:8f:88:32:6e:
59:99:bf:b5:a2:8c:4b:9e:60:e1:01:8b:5f:dc:b3:
3e:bb:14:b0:4f:9d:92:61:93:73:9e:6d:ee:36:8a:
6a:ab:5a:de:b2:b4:d0:eb:16:9d:87:e1:f7:26:59:
00:d7:01:16:47:70:9f:3c:d4:7f:07:27:9b:df:80:
af:fa:df:5c:20:c0:40:4e:24:83:a9:3c:1f:43:cd:
0e:50:9d:e7:b9:19:d6:da:74:d4:87:b7:69:3c:f4:
1a:47:7e:8c:23:44:13:77:21:4e:dd:eb:fc:60:51:
ca:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:6A:06:EB:F5:15:A2:80:0C:B8:D3:68:7C:CD:46:5B:46:DB:9C:56
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0moG6_UVooAMuNNofM1GW0bbnFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a9:92:db:88:20:ef:6a:6b:9a:5c:e7:14:35:7e:24:2e:69:3a:
a5:b0:15:4d:99:56:13:f7:2d:25:58:77:b3:f1:6a:f9:0d:d8:
8c:d8:e5:16:d2:e0:a4:68:77:73:3e:d2:de:7a:31:de:db:aa:
75:f0:76:0a:11:87:54:e4:4d:b5:85:fc:bd:2a:48:80:0e:70:
e5:1f:89:5f:b1:c7:c5:b9:b0:9f:4e:ee:b2:9e:d9:a2:db:d8:
08:3b:f2:92:85:2e:eb:2e:ed:a6:88:44:31:ec:79:b7:81:31:
2e:e0:22:da:88:f9:63:9b:b2:cb:2f:7b:8f:a8:6b:c5:a7:1e:
95:e0:03:55:3e:2a:1a:cd:62:25:73:0d:49:f7:87:07:6d:93:
72:1a:c1:09:c8:47:0a:98:f1:2a:b5:31:89:58:47:99:b3:a8:
8b:48:40:ea:e0:29:55:1e:ea:37:5a:12:e3:cd:7b:d2:19:1e:
37:66:35:95:90:b0:62:74:81:3c:f4:60:2c:c1:f7:4d:f1:2c:
1c:e6:ec:1d:da:dc:47:95:49:72:ad:01:39:d3:16:08:e9:6d:
7c:ab:2a:76:f1:e3:24:df:8c:04:b5:0c:64:93:51:0a:51:56:
47:51:45:6b:81:42:f3:01:a8:93:d9:10:f1:76:c2:8d:be:8c:
2d:d8:1a:b0
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYoy2L1dl3m8pM4X0SqAry34MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODI2MTcxNjE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjZhMDZlYmY1MTVhMjgwMGNiOGQzNjg3Y2NkNDY1YjQ2ZGI5YzU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAol8Yp81vL5vlLNqJXn6FzQAOfg/T
oRguEwVVJqGu0U5ldMLYOOXiC4TG433p4su79liKtRlwMqIdN1EBP0qdkZBLILFj
T5rxKsgchSRagP9l9qzLGHWtMLJLXODV/uj7EscIyEdhR9w0UH1T08a73a68WdkK
Fv+XR+a5qcrk5BIpV6P/nXW1Xf7abxp+5Pwiw4+IMm5Zmb+1ooxLnmDhAYtf3LM+
uxSwT52SYZNznm3uNopqq1resrTQ6xadh+H3JlkA1wEWR3CfPNR/Byeb34Cv+t9c
IMBATiSDqTwfQ80OUJ3nuRnW2nTUh7dpPPQaR36MI0QTdyFO3ev8YFHK2wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNJqBuv1FaKADLjTaHzNRltG25xWMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMG1vRzZfVVZvb0FNdU5Ob2ZNMUdXMGJibkZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKmS24gg72prmlznFDV+
JC5pOqWwFU2ZVhP3LSVYd7PxavkN2IzY5RbS4KRod3M+0t56Md7bqnXwdgoRh1Tk
TbWF/L0qSIAOcOUfiV+xx8W5sJ9O7rKe2aLb2Ag78pKFLusu7aaIRDHsebeBMS7g
ItqI+WObsssve4+oa8WnHpXgA1U+KhrNYiVzDUn3hwdtk3IawQnIRwqY8Sq1MYlY
R5mzqItIQOrgKVUe6jdaEuPNe9IZHjdmNZWQsGJ0gTz0YCzB903xLBzm7B3a3EeV
SXKtATnTFgjpbXyrKnbx4yTfjAS1DGSTUQpRVkdRRWuBQvMBqJPZEPF2wo2+jC3Y
GrA=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:30:08 2025 by rpki-client