Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-R0JPUp0Ufn4mPQvKIt_juqKTdY.roa
File: 1-R0JPUp0Ufn4mPQvKIt_juqKTdY.roa (raw, json)
Hash identifier: TieWEa6z6Sl0G11Q+zocWTd7LOPrbJflEsuAhIAkGlc=
Subject key identifier: F9:1D:09:3D:4A:74:51:F9:F8:98:F4:2F:28:8B:7F:8E:EA:8A:4D:D6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184F16F65BE909B3AF00F608F6AAB066408
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-R0JPUp0Ufn4mPQvKIt_juqKTdY.roa
Signing time: Thu 08 Dec 2022 11:12:00 +0000
ROA not before: Thu 08 Dec 2022 11:12:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f1:6f:65:be:90:9b:3a:f0:0f:60:8f:6a:ab:06:64:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 8 11:12:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f91d093d4a7451f9f898f42f288b7f8eea8a4dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9f:ca:1e:9a:5b:21:fe:3a:fe:29:4d:8b:9c:
37:0e:48:ec:05:23:41:38:57:21:36:69:8c:41:0e:
f2:ae:e0:e6:d2:d7:20:4e:a7:9f:8e:6e:68:c2:93:
2a:75:58:28:3f:90:72:43:0c:f8:2b:ef:f5:be:29:
8a:d4:94:55:ec:a8:af:2d:cb:10:a2:56:f2:ea:bb:
19:fc:7b:4d:3c:0c:67:60:4f:10:59:23:ad:01:02:
35:25:68:45:23:01:72:b3:9b:2e:67:34:f1:65:2d:
b6:bb:e3:e4:89:b5:25:4f:bb:c3:60:6a:e5:1c:e5:
9c:8c:b6:08:2d:02:04:2a:d2:af:c5:9a:70:74:e5:
5c:7c:e0:bc:59:d2:dd:a0:15:9d:ae:67:53:90:95:
14:65:43:0c:c0:ff:97:52:88:4d:a4:c7:77:90:9c:
75:38:a8:4a:75:32:1b:9e:de:0b:09:55:46:01:a8:
d9:c5:00:2c:2f:d2:87:0b:1e:81:bc:f1:aa:56:fc:
4c:da:5e:95:8a:e3:40:41:f1:11:ba:7a:02:c1:0c:
87:80:ea:65:ae:a3:42:b2:40:54:13:65:d7:d8:e5:
e0:74:f7:da:f9:a0:cb:f7:e4:4e:93:83:8e:fb:aa:
87:f3:9f:f8:1b:c6:34:44:6a:8a:a3:47:f4:6b:0e:
e0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:1D:09:3D:4A:74:51:F9:F8:98:F4:2F:28:8B:7F:8E:EA:8A:4D:D6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-R0JPUp0Ufn4mPQvKIt_juqKTdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
59:f3:93:ac:a3:a3:14:3d:75:27:f5:72:54:38:a1:2b:5e:cd:
15:63:92:56:cc:a2:ea:75:53:1f:41:be:21:59:1c:ad:5a:e2:
4e:46:cd:8d:ea:ab:19:e6:4f:fc:de:a1:86:0a:84:3b:30:0d:
90:98:d6:54:df:bd:b4:a1:78:c7:26:83:72:9e:c3:14:d6:0d:
88:13:cf:06:2c:4b:5a:7d:90:8e:8a:80:ed:c0:50:98:07:83:
13:0e:a2:89:8c:c1:76:aa:21:49:a4:89:fc:4a:8b:7b:fc:b7:
5c:7b:45:8f:5d:cb:6a:42:f4:a7:97:47:b8:2b:23:80:f2:ab:
4c:2c:69:97:1b:8a:89:94:00:e9:df:19:6c:d7:18:68:bc:f6:
9a:a3:9d:13:14:e9:f0:d3:02:b6:e1:f8:25:e7:b9:db:51:53:
c1:2c:a6:14:36:9f:04:dd:29:4a:d2:95:4d:6d:f7:d3:5e:ed:
81:0d:34:6b:83:1b:ed:47:54:ab:84:13:5e:a2:67:95:c1:46:
37:98:39:2e:c3:cf:79:64:7f:70:00:1d:7a:ca:dd:29:80:60:
1a:32:5c:a7:d8:44:50:17:8f:1b:70:78:8f:db:42:5f:ed:1f:
05:b3:f3:62:c6:c4:40:35:28:39:eb:de:3c:ec:c3:8f:85:bf:
65:7f:b1:c4
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYTxb2W+kJs68A9gj2qrBmQIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjA4MTExMjAwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTFkMDkzZDRhNzQ1MWY5Zjg5OGY0MmYyODhiN2Y4ZWVhOGE0ZGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnp/KHppbIf46/ilNi5w3DkjsBSNB
OFchNmmMQQ7yruDm0tcgTqefjm5owpMqdVgoP5ByQwz4K+/1vimK1JRV7KivLcsQ
olby6rsZ/HtNPAxnYE8QWSOtAQI1JWhFIwFys5suZzTxZS22u+PkibUlT7vDYGrl
HOWcjLYILQIEKtKvxZpwdOVcfOC8WdLdoBWdrmdTkJUUZUMMwP+XUohNpMd3kJx1
OKhKdTIbnt4LCVVGAajZxQAsL9KHCx6BvPGqVvxM2l6ViuNAQfERunoCwQyHgOpl
rqNCskBUE2XX2OXgdPfa+aDL9+ROk4OO+6qH85/4G8Y0RGqKo0f0aw7gOQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPkdCT1KdFH5+Jj0LyiLf47qik3WMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMS1SMEpQVXAwVWZuNG1QUXZLSXRfanVxS1RkWS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFh
Ni8xL2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAP
BAIAAjAJAwcAIAEGfABkMA0GCSqGSIb3DQEBCwUAA4IBAQBZ85Oso6MUPXUn9XJU
OKErXs0VY5JWzKLqdVMfQb4hWRytWuJORs2N6qsZ5k/83qGGCoQ7MA2QmNZU3720
oXjHJoNynsMU1g2IE88GLEtafZCOioDtwFCYB4MTDqKJjMF2qiFJpIn8Sot7/Ldc
e0WPXctqQvSnl0e4KyOA8qtMLGmXG4qJlADp3xls1xhovPaao50TFOnw0wK24fgl
57nbUVPBLKYUNp8E3SlK0pVNbffTXu2BDTRrgxvtR1SrhBNeomeVwUY3mDkuw895
ZH9wAB16yt0pgGAaMlyn2ERQF48bcHiP20Jf7R8Fs/NixsRANSg569487MOPhb9l
f7HE
-----END CERTIFICATE-----
Generated at Sat May 3 10:30:23 2025 by rpki-client