Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-I9X6o2aCkv-BQRibGlS1mbLXcU.roa
File: 1-I9X6o2aCkv-BQRibGlS1mbLXcU.roa (raw, json)
Hash identifier: jvDuQUOFzwyVEEKpFYk2U56Pvna5IriHaKLy+vmWDaY=
Subject key identifier: F8:8F:57:EA:8D:9A:0A:4B:FE:05:04:62:6C:69:52:D6:66:CB:5D:C5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018583892749A04A8182C17F63B1DAD15320
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-I9X6o2aCkv-BQRibGlS1mbLXcU.roa
Signing time: Thu 05 Jan 2023 20:04:41 +0000
ROA not before: Thu 05 Jan 2023 20:04:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:185:8388:af4d/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:83:89:27:49:a0:4a:81:82:c1:7f:63:b1:da:d1:53:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 5 20:04:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f88f57ea8d9a0a4bfe0504626c6952d666cb5dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4e:db:28:20:da:d9:65:43:43:60:f8:f5:94:
60:15:e1:19:7b:79:02:9c:52:ec:26:ea:d8:1a:dc:
e0:94:d2:b3:32:8d:74:d5:96:7c:1e:a1:34:39:af:
93:d5:16:69:23:49:54:3c:00:a9:f4:87:3f:63:b7:
7d:6a:27:07:e7:e1:d8:2c:ea:29:cd:80:b5:d0:5a:
84:a6:55:8d:74:3d:de:10:0c:94:2e:2f:95:6a:6c:
02:16:be:74:2f:75:50:d6:29:74:3f:27:13:01:e4:
df:d0:b8:28:23:45:dd:8e:2d:00:5e:cf:ad:4a:6f:
2d:6b:e7:3d:8f:8c:37:93:ad:bd:cd:06:98:5a:16:
f3:6b:5b:3d:74:d3:30:a5:17:79:c9:f6:2c:39:f5:
2d:2b:15:ba:ce:a3:91:f4:1c:fb:c7:8d:8d:09:e9:
e1:78:6b:3f:4c:f1:e4:a2:21:3d:c8:94:6f:43:0b:
c6:05:75:8a:88:00:54:5f:81:12:48:70:47:a3:7e:
dd:54:ff:9b:49:72:c2:fe:81:08:a9:60:fd:2b:7f:
e8:c0:32:71:d9:b3:2f:02:05:2e:77:29:49:14:2d:
dc:6a:ef:06:2b:af:52:3b:07:01:f2:a4:5e:f0:aa:
fa:97:c0:9b:9d:2a:86:a0:25:f9:2f:91:3e:6f:f2:
04:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:8F:57:EA:8D:9A:0A:4B:FE:05:04:62:6C:69:52:D6:66:CB:5D:C5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-I9X6o2aCkv-BQRibGlS1mbLXcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
12:b5:59:fe:d4:12:ea:85:75:2c:2a:64:e7:e4:85:f5:9d:ed:
6c:d3:37:05:be:4a:fa:56:16:bd:fe:45:3d:ee:2c:26:60:c8:
0a:15:13:f6:d6:9a:96:a6:7c:8b:5e:dd:b4:9f:8a:26:db:de:
81:2b:15:de:44:02:f5:2f:21:67:c6:81:92:08:ee:63:63:eb:
f5:be:26:d6:fa:c1:b1:08:53:e4:b8:a7:8a:b5:d0:53:f6:d0:
be:0d:5c:7d:89:58:a2:56:4a:d3:ed:60:f2:bb:5f:19:e8:77:
58:16:40:cd:4a:a9:0b:cc:05:64:4c:1e:88:2f:5e:0d:c7:e4:
25:2d:8a:2c:d9:04:81:20:3e:49:ce:e7:32:c0:8a:3e:e9:81:
cb:53:20:00:98:29:72:9e:89:1f:35:ea:2a:1a:dc:d2:ef:7c:
6e:f1:0f:59:15:4c:15:ae:2d:63:3a:c6:cb:8a:6d:ac:ae:ad:
55:e3:b8:01:03:55:08:29:67:be:05:63:23:ba:cf:0b:4f:bc:
7e:ed:db:93:f5:fa:e6:6c:5a:e7:c8:35:0f:92:d3:5a:2c:91:
33:cd:b1:c9:de:d7:f8:49:7e:ab:93:e7:44:03:4d:a1:0e:27:
cb:a4:a0:b8:59:1f:ae:4d:f9:6b:f4:97:6e:57:23:e5:64:ca:
4e:7e:3b:26
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYWDiSdJoEqBgsF/Y7Ha0VMgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTA1MjAwNDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODhmNTdlYThkOWEwYTRiZmUwNTA0NjI2YzY5NTJkNjY2Y2I1ZGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl07bKCDa2WVDQ2D49ZRgFeEZe3kC
nFLsJurYGtzglNKzMo101ZZ8HqE0Oa+T1RZpI0lUPACp9Ic/Y7d9aicH5+HYLOop
zYC10FqEplWNdD3eEAyULi+VamwCFr50L3VQ1il0PycTAeTf0LgoI0Xdji0AXs+t
Sm8ta+c9j4w3k629zQaYWhbza1s9dNMwpRd5yfYsOfUtKxW6zqOR9Bz7x42NCenh
eGs/TPHkoiE9yJRvQwvGBXWKiABUX4ESSHBHo37dVP+bSXLC/oEIqWD9K3/owDJx
2bMvAgUudylJFC3cau8GK69SOwcB8qRe8Kr6l8CbnSqGoCX5L5E+b/IETwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPiPV+qNmgpL/gUEYmxpUtZmy13FMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMS1JOVg2bzJhQ2t2LUJRUmliR2xTMW1iTFhjVS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFh
Ni8xL2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAP
BAIAAjAJAwcAIAEGfABkMA0GCSqGSIb3DQEBCwUAA4IBAQAStVn+1BLqhXUsKmTn
5IX1ne1s0zcFvkr6Vha9/kU97iwmYMgKFRP21pqWpnyLXt20n4om296BKxXeRAL1
LyFnxoGSCO5jY+v1vibW+sGxCFPkuKeKtdBT9tC+DVx9iViiVkrT7WDyu18Z6HdY
FkDNSqkLzAVkTB6IL14Nx+QlLYos2QSBID5JzucywIo+6YHLUyAAmClynokfNeoq
GtzS73xu8Q9ZFUwVri1jOsbLim2srq1V47gBA1UIKWe+BWMjus8LT7x+7duT9frm
bFrnyDUPktNaLJEzzbHJ3tf4SX6rk+dEA02hDifLpKC4WR+uTflr9JduVyPlZMpO
fjsm
-----END CERTIFICATE-----
Generated at Thu May 1 02:51:57 2025 by rpki-client