Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-0CaAb9NUbSwZn_3A1ykNE9OTWU.roa
File: 1-0CaAb9NUbSwZn_3A1ykNE9OTWU.roa (raw, json)
Hash identifier: jbeo10ZyrYobr0O/5wzvVVqAtVDM/iEK7DymLBnaq7s=
Subject key identifier: FB:40:9A:01:BF:4D:51:B4:B0:66:7F:F7:03:5C:A4:34:4F:4E:4D:65
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01843E43528B8C17E6CE403188814582F803
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-0CaAb9NUbSwZn_3A1ykNE9OTWU.roa
Signing time: Thu 03 Nov 2022 16:11:50 +0000
ROA not before: Thu 03 Nov 2022 16:11:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:3e:43:52:8b:8c:17:e6:ce:40:31:88:81:45:82:f8:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 3 16:11:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fb409a01bf4d51b4b0667ff7035ca4344f4e4d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:df:d9:1d:74:f8:90:53:67:1f:46:d1:6a:21:
90:88:c8:ba:18:af:6a:7d:a1:c6:34:49:dc:7c:2d:
21:3d:88:9c:aa:0a:58:c8:d9:a7:aa:5e:c0:57:08:
7b:d7:57:87:ce:c9:42:b9:e3:10:37:8c:32:d9:0e:
1b:79:14:55:d1:01:51:ba:77:fc:48:13:74:85:0e:
0a:0e:ab:64:40:95:1f:b0:38:9d:b6:70:27:5d:23:
42:fa:80:52:7a:f2:38:d6:8d:a6:5e:93:8f:b2:b5:
37:c3:af:33:d5:d4:d9:e4:43:ac:fb:21:6f:b3:73:
42:89:18:ff:45:b1:b4:b2:79:4d:af:c4:cd:9b:91:
e0:54:27:71:8f:65:48:32:a8:4c:df:c8:3d:c4:c0:
5d:26:28:65:09:32:bc:19:83:32:bc:a6:9d:49:01:
67:ca:f3:f2:f6:0f:8b:63:5a:20:5a:00:13:7f:0c:
d0:37:a4:4e:79:f3:c5:db:bd:b8:3d:c8:93:c9:7f:
55:4d:16:46:1e:8b:4c:34:41:74:c6:06:3b:68:fb:
57:7e:a8:b8:1f:e5:3e:6d:07:7a:65:3e:1a:88:b8:
24:94:00:28:1f:ff:0d:fd:42:72:4d:42:4f:d4:14:
16:b7:7c:47:c5:6f:ba:53:2b:75:35:75:e2:6f:f2:
06:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:40:9A:01:BF:4D:51:B4:B0:66:7F:F7:03:5C:A4:34:4F:4E:4D:65
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-0CaAb9NUbSwZn_3A1ykNE9OTWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3b:62:96:50:d6:b8:e2:ea:18:26:7f:d6:f4:52:9b:77:fa:70:
ad:4f:46:e5:46:de:03:54:db:f0:3c:4b:72:93:2d:a9:f1:9e:
f1:9b:72:09:06:12:12:83:a2:65:48:cd:52:ae:c3:78:2b:2d:
88:96:8e:0e:c3:6e:ba:01:af:2b:22:f7:0f:b0:66:76:56:81:
ee:be:53:bf:95:01:62:0e:eb:0f:5a:21:98:9e:a7:26:70:77:
9d:f9:0e:87:18:4d:bd:67:51:fe:db:6e:a3:fb:a3:64:68:89:
b6:a0:21:ea:01:3b:10:96:d9:9d:73:8e:b5:eb:11:5d:c2:2f:
5a:bf:7e:54:27:4c:fb:43:ed:b0:52:4e:76:07:50:98:52:58:
c8:59:d3:28:ad:de:16:80:86:4b:34:a9:8d:75:d9:81:48:16:
95:3f:f9:60:2a:b3:85:e1:50:6f:c6:85:c6:5f:ac:0e:6a:56:
ab:09:91:e5:42:18:87:85:83:f3:5d:53:fe:a4:9f:ca:a9:e8:
9b:0a:b9:f7:14:f4:a1:c6:76:e2:81:0a:c1:e3:59:57:15:a0:
d4:be:1c:cf:6d:16:a3:67:02:85:12:5b:28:74:97:6c:3b:9d:
ec:f9:8c:51:c1:f2:f2:de:cb:56:a9:d4:ca:f2:a3:af:4e:2b:
c7:20:19:9f
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYQ+Q1KLjBfmzkAxiIFFgvgDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMTAzMTYxMTUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjQwOWEwMWJmNGQ1MWI0YjA2NjdmZjcwMzVjYTQzNDRmNGU0ZDY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAst/ZHXT4kFNnH0bRaiGQiMi6GK9q
faHGNEncfC0hPYicqgpYyNmnql7AVwh711eHzslCueMQN4wy2Q4beRRV0QFRunf8
SBN0hQ4KDqtkQJUfsDidtnAnXSNC+oBSevI41o2mXpOPsrU3w68z1dTZ5EOs+yFv
s3NCiRj/RbG0snlNr8TNm5HgVCdxj2VIMqhM38g9xMBdJihlCTK8GYMyvKadSQFn
yvPy9g+LY1ogWgATfwzQN6ROefPF2724PciTyX9VTRZGHotMNEF0xgY7aPtXfqi4
H+U+bQd6ZT4aiLgklAAoH/8N/UJyTUJP1BQWt3xHxW+6Uyt1NXXib/IGIwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPtAmgG/TVG0sGZ/9wNcpDRPTk1lMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMS0wQ2FBYjlOVWJTd1puXzNBMXlrTkU5T1RXVS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFh
Ni8xL2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAP
BAIAAjAJAwcAIAEGfABkMA0GCSqGSIb3DQEBCwUAA4IBAQA7YpZQ1rji6hgmf9b0
Upt3+nCtT0blRt4DVNvwPEtyky2p8Z7xm3IJBhISg6JlSM1SrsN4Ky2Ilo4Ow266
Aa8rIvcPsGZ2VoHuvlO/lQFiDusPWiGYnqcmcHed+Q6HGE29Z1H+226j+6NkaIm2
oCHqATsQltmdc4616xFdwi9av35UJ0z7Q+2wUk52B1CYUljIWdMord4WgIZLNKmN
ddmBSBaVP/lgKrOF4VBvxoXGX6wOalarCZHlQhiHhYPzXVP+pJ/KqeibCrn3FPSh
xnbigQrB41lXFaDUvhzPbRajZwKFElsodJdsO53s+YxRwfLy3stWqdTK8qOvTivH
IBmf
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:05 2025 by rpki-client