Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-C91LuTtI68umqU_e2DvQVg1V_4.roa
File: 1-C91LuTtI68umqU_e2DvQVg1V_4.roa (raw, json)
Hash identifier: UIS1PgCsNTdY+dP+s4isRKjHcvqIcbDEeDI7yYXIzx0=
Subject key identifier: F8:2F:75:2E:E4:ED:23:AF:2E:9A:A5:3F:7B:60:EF:41:58:35:57:FE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184301FA7651FFE1F753BFC303B607BC4EB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-C91LuTtI68umqU_e2DvQVg1V_4.roa
Signing time: Mon 31 Oct 2022 22:18:11 +0000
ROA not before: Mon 31 Oct 2022 22:18:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:30:1f:a7:65:1f:fe:1f:75:3b:fc:30:3b:60:7b:c4:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 31 22:18:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f82f752ee4ed23af2e9aa53f7b60ef41583557fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6e:3e:ab:2f:f0:f2:e2:25:62:9f:14:ee:b8:
34:1a:b9:f2:f6:ab:65:78:15:2e:6e:1e:b9:17:16:
6a:e8:52:63:15:c9:f8:0c:16:75:1d:93:e4:79:64:
40:6c:69:0c:98:5b:65:14:46:2c:c7:02:5a:16:4a:
61:3f:e6:37:89:b0:de:af:f7:7e:a4:7b:84:c1:96:
50:90:f4:98:f5:e7:fd:4f:a2:25:66:f9:59:03:dc:
b8:b2:4a:34:3f:97:47:22:89:a1:b4:c4:cb:5b:5c:
e3:38:fa:24:68:ba:04:0c:5d:79:92:04:c0:8a:f5:
aa:4f:52:20:4a:c6:cb:2b:41:33:70:5e:ac:50:c1:
6c:aa:a9:d2:35:3a:73:fd:33:ba:2f:49:2d:cb:78:
6c:d9:db:fe:a5:58:b0:33:12:0e:56:11:c9:95:d8:
88:ec:c6:79:f5:47:64:fa:9e:b0:13:8b:89:b0:09:
5a:89:c0:fb:23:d7:d2:aa:07:75:98:d1:8d:6c:7c:
37:42:32:92:31:0a:f8:ec:55:cd:12:33:dc:e7:29:
b7:af:ea:1e:29:2f:77:43:7a:db:72:95:06:8e:17:
06:00:58:b3:63:d7:b0:6c:d5:62:71:5c:b7:f8:a4:
be:a8:a1:36:0c:43:6d:ee:e9:bd:1a:cd:94:e3:2f:
be:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:2F:75:2E:E4:ED:23:AF:2E:9A:A5:3F:7B:60:EF:41:58:35:57:FE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-C91LuTtI68umqU_e2DvQVg1V_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a2:c2:db:af:8e:65:63:a9:03:92:b7:f1:0a:64:74:cd:34:58:
b8:7f:1e:91:d3:24:76:e2:ea:7c:4b:17:c9:7e:9e:9a:f0:24:
0e:2f:02:55:ae:95:30:b0:84:2b:6f:a8:7e:49:4b:98:fe:6a:
f6:fd:05:f4:02:68:cd:cd:27:b6:30:f8:82:5e:89:a1:23:36:
30:66:17:c0:c1:18:95:d5:78:1d:ed:7e:09:6c:ad:58:7d:11:
3f:0c:73:69:93:63:d1:8c:11:19:81:a3:be:9b:12:f4:e3:5d:
77:a3:c1:26:00:8b:ec:2d:bd:77:8e:1f:72:3b:a9:4a:6a:dc:
73:f4:da:18:55:c8:b9:00:e4:53:7d:7e:84:74:d8:34:2a:d8:
53:4c:d6:5e:ee:6d:50:45:69:3b:40:9a:84:29:63:9a:84:83:
bd:c9:97:2a:1c:de:05:c0:22:e5:7e:94:89:f1:dd:05:9a:9b:
fa:6f:14:c2:13:f2:9a:d0:9f:b4:9d:5b:49:82:91:4f:63:71:
f7:d1:22:d9:2e:40:f3:d6:2d:78:2f:48:2a:a8:3d:68:40:73:
8e:e0:bb:85:92:82:c9:e1:b4:c6:0b:00:bf:b4:e6:5f:a8:2a:
4f:ac:34:ef:94:b7:f9:f6:79:14:0c:5c:d8:66:7d:e2:2c:ea:
9c:10:7b:4f
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYQwH6dlH/4fdTv8MDtge8TrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMDMxMjIxODExWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODJmNzUyZWU0ZWQyM2FmMmU5YWE1M2Y3YjYwZWY0MTU4MzU1N2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm24+qy/w8uIlYp8U7rg0Grny9qtl
eBUubh65FxZq6FJjFcn4DBZ1HZPkeWRAbGkMmFtlFEYsxwJaFkphP+Y3ibDer/d+
pHuEwZZQkPSY9ef9T6IlZvlZA9y4sko0P5dHIomhtMTLW1zjOPokaLoEDF15kgTA
ivWqT1IgSsbLK0EzcF6sUMFsqqnSNTpz/TO6L0kty3hs2dv+pViwMxIOVhHJldiI
7MZ59Udk+p6wE4uJsAlaicD7I9fSqgd1mNGNbHw3QjKSMQr47FXNEjPc5ym3r+oe
KS93Q3rbcpUGjhcGAFizY9ewbNVicVy3+KS+qKE2DENt7um9Gs2U4y++VQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPgvdS7k7SOvLpqlP3tg70FYNVf+MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMS1DOTFMdVR0STY4dW1xVV9lMkR2UVZnMVZfNC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFh
Ni8xL2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAP
BAIAAjAJAwcAIAEGfABkMA0GCSqGSIb3DQEBCwUAA4IBAQCiwtuvjmVjqQOSt/EK
ZHTNNFi4fx6R0yR24up8SxfJfp6a8CQOLwJVrpUwsIQrb6h+SUuY/mr2/QX0AmjN
zSe2MPiCXomhIzYwZhfAwRiV1Xgd7X4JbK1YfRE/DHNpk2PRjBEZgaO+mxL04113
o8EmAIvsLb13jh9yO6lKatxz9NoYVci5AORTfX6EdNg0KthTTNZe7m1QRWk7QJqE
KWOahIO9yZcqHN4FwCLlfpSJ8d0Fmpv6bxTCE/Ka0J+0nVtJgpFPY3H30SLZLkDz
1i14L0gqqD1oQHOO4LuFkoLJ4bTGCwC/tOZfqCpPrDTvlLf59nkUDFzYZn3iLOqc
EHtP
-----END CERTIFICATE-----
Generated at Fri May 2 03:34:15 2025 by rpki-client