Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-AaiXRlUoKc5LTX46Vu-9BoxEYE.roa
File: 1-AaiXRlUoKc5LTX46Vu-9BoxEYE.roa (raw, json)
Hash identifier: PLQiu5J2NrxSAenkM6OzE+z5Om8QVbMNk3Zr9ACtP4Y=
Subject key identifier: F8:06:A2:5D:19:54:A0:A7:39:2D:35:F8:E9:5B:BE:F4:1A:31:11:81
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189A9E8690E382FC9FA54E29DD1D8EB1EE6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-AaiXRlUoKc5LTX46Vu-9BoxEYE.roa
Signing time: Mon 31 Jul 2023 03:05:27 +0000
ROA not before: Mon 31 Jul 2023 03:05:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a9e7:a15c/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:a9:e8:69:0e:38:2f:c9:fa:54:e2:9d:d1:d8:eb:1e:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 31 03:05:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f806a25d1954a0a7392d35f8e95bbef41a311181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6b:4c:27:1c:83:52:e3:35:b3:b0:de:71:6b:
61:e4:eb:d4:35:d2:4a:fc:10:3c:02:85:78:c6:d1:
5c:3a:be:b0:e2:8a:d6:3c:dd:c4:30:db:47:fc:91:
c8:84:bf:49:10:40:33:64:05:8b:ea:fb:a5:72:35:
ff:42:20:d6:c4:49:f7:b3:36:7c:de:d8:55:7b:ac:
b3:d2:b1:db:a7:da:26:15:14:5e:a9:f7:dc:06:7f:
13:2e:31:27:96:02:d5:6c:bf:04:9b:81:8d:2b:65:
8e:df:c8:85:90:5f:d5:ce:9f:8c:3b:15:17:63:ad:
43:e3:98:14:22:83:e7:48:71:20:34:18:3c:98:ea:
cf:9e:01:53:86:04:8e:03:17:1f:7e:04:e8:8b:82:
21:06:b8:7b:63:cd:52:c2:da:71:31:46:86:61:7f:
88:69:d4:3e:76:5f:02:e9:47:d7:41:6f:51:f3:d4:
46:a5:e9:94:37:1b:a6:d7:a1:11:8e:a1:de:94:bb:
02:00:40:93:11:d0:8d:cd:7f:86:5b:f1:c0:24:3b:
be:2c:d5:41:ae:0f:4e:65:55:d9:3c:ae:2e:22:3f:
cc:55:e2:d3:4f:20:7f:23:76:31:e0:5c:b9:07:91:
a6:cb:6f:60:a4:8c:8c:0a:99:3f:da:47:41:3f:44:
f3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:06:A2:5D:19:54:A0:A7:39:2D:35:F8:E9:5B:BE:F4:1A:31:11:81
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-AaiXRlUoKc5LTX46Vu-9BoxEYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
26:65:38:c4:56:59:7a:3b:b4:a3:13:76:97:a4:a6:c4:c8:ef:
7f:81:47:62:da:15:f5:3f:8b:bc:33:5b:e0:96:0d:a6:8a:dd:
28:b1:e8:ee:19:df:fc:f7:5e:b1:46:79:e8:0e:78:3c:eb:b9:
c9:ee:8a:8e:c1:31:a3:6a:39:38:f7:56:05:7a:68:dc:83:ee:
c2:c6:03:e1:cf:5c:bb:5d:33:0e:a2:c4:b9:91:ab:fe:5b:5b:
99:d7:32:93:79:06:24:cd:c4:58:ef:3e:7e:40:5c:74:4c:b6:
35:c1:df:5f:f6:fe:c6:1e:47:d3:f9:d6:d6:d9:49:74:f0:5a:
19:5b:b7:b1:96:24:34:02:3e:0a:25:a3:d0:d4:46:b8:e4:57:
60:1b:7b:c7:44:f0:bf:5d:53:98:9f:c9:b0:c1:01:9b:c5:a0:
af:2d:29:ef:30:92:8d:6c:75:89:93:18:a9:86:82:8d:91:3f:
7c:d8:10:bc:bb:23:6a:aa:9a:74:74:3c:35:e9:d4:a3:fc:97:
b2:b6:2b:65:6b:9e:50:ba:77:e7:79:b8:1f:30:35:07:d8:cd:
67:3d:e9:03:7e:d3:ca:a4:08:71:0d:44:68:55:42:b7:46:d4:
14:04:b3:0a:85:60:7f:42:c1:9c:5c:af:a8:2f:b3:f5:fc:a9:
14:58:ee:e7
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYmp6GkOOC/J+lTindHY6x7mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzMxMDMwNTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODA2YTI1ZDE5NTRhMGE3MzkyZDM1ZjhlOTViYmVmNDFhMzExMTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGtMJxyDUuM1s7DecWth5OvUNdJK
/BA8AoV4xtFcOr6w4orWPN3EMNtH/JHIhL9JEEAzZAWL6vulcjX/QiDWxEn3szZ8
3thVe6yz0rHbp9omFRReqffcBn8TLjEnlgLVbL8Em4GNK2WO38iFkF/Vzp+MOxUX
Y61D45gUIoPnSHEgNBg8mOrPngFThgSOAxcffgToi4IhBrh7Y81SwtpxMUaGYX+I
adQ+dl8C6UfXQW9R89RGpemUNxum16ERjqHelLsCAECTEdCNzX+GW/HAJDu+LNVB
rg9OZVXZPK4uIj/MVeLTTyB/I3Yx4Fy5B5Gmy29gpIyMCpk/2kdBP0TzGwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPgGol0ZVKCnOS01+OlbvvQaMRGBMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMS1BYWlYUmxVb0tjNUxUWDQ2VnUtOUJveEVZRS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFh
Ni8xL2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAP
BAIAAjAJAwcAIAEGfABkMA0GCSqGSIb3DQEBCwUAA4IBAQAmZTjEVll6O7SjE3aX
pKbEyO9/gUdi2hX1P4u8M1vglg2mit0osejuGd/8916xRnnoDng867nJ7oqOwTGj
ajk491YFemjcg+7CxgPhz1y7XTMOosS5kav+W1uZ1zKTeQYkzcRY7z5+QFx0TLY1
wd9f9v7GHkfT+dbW2Ul08FoZW7exliQ0Aj4KJaPQ1Ea45FdgG3vHRPC/XVOYn8mw
wQGbxaCvLSnvMJKNbHWJkxiphoKNkT982BC8uyNqqpp0dDw16dSj/Jeytitla55Q
unfnebgfMDUH2M1nPekDftPKpAhxDURoVUK3RtQUBLMKhWB/QsGcXK+oL7P1/KkU
WO7n
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:05 2025 by rpki-client