Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1cIxyF78R_P6D59td61RKFeJ710.roa
File: 1cIxyF78R_P6D59td61RKFeJ710.roa (raw, json)
Hash identifier: +Sv9Dcy8peaG+Vd21u25XXyDSfa4vVEge0FV01Xjlkw=
Subject key identifier: D5:C2:31:C8:5E:FC:47:F3:FA:0F:9F:6D:77:AD:51:28:57:89:EF:5D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6FF5FACE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1cIxyF78R_P6D59td61RKFeJ710.roa
Signing time: Sat 05 Mar 2022 18:04:13 +0000
ROA not before: Sat 05 Mar 2022 18:04:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:5b40:e0a3/128 maxlen: 128
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1878391502 (0x6ff5face)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 5 18:04:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d5c231c85efc47f3fa0f9f6d77ad51285789ef5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:49:f4:d2:05:00:7e:05:14:94:87:84:a0:6b:
e6:4b:87:9d:05:b9:ce:0e:a1:46:3a:7c:70:e8:7e:
fb:90:8f:b5:97:3b:62:75:e1:5c:4e:17:14:72:d0:
e2:cb:5a:a3:f5:53:bb:c8:47:7f:b5:b2:ba:ff:c2:
e9:75:cd:35:8c:4b:64:92:de:e6:12:f9:2a:ca:18:
81:b2:1c:e6:d0:7d:50:e9:b1:06:11:d2:4f:7c:41:
25:3f:1d:35:b9:75:d2:4a:d2:8f:40:79:d6:09:bc:
4f:89:72:4f:64:a6:5a:d7:ee:75:5f:9a:b4:95:70:
63:23:9b:a7:ec:c5:ad:bb:1e:ce:35:4d:96:ba:65:
56:6e:3d:38:d7:b1:2f:6c:51:00:57:51:73:e2:e8:
b8:53:78:18:81:46:33:67:19:21:a0:7f:50:a6:30:
b8:01:eb:60:db:80:8b:cf:4d:17:e5:7f:2b:d8:03:
97:a9:f0:da:0d:3a:2f:b1:28:9d:b1:85:2e:c2:07:
26:f0:08:33:98:dc:54:1f:7d:6b:05:d8:79:e7:d8:
06:fb:72:d1:67:6d:20:09:12:e6:37:8d:4b:83:f5:
31:ae:1a:43:28:5f:42:9e:3c:a5:f2:8e:96:e8:59:
1a:6d:d1:74:4e:be:0d:8a:74:5c:34:13:3b:cf:49:
ab:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C2:31:C8:5E:FC:47:F3:FA:0F:9F:6D:77:AD:51:28:57:89:EF:5D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1cIxyF78R_P6D59td61RKFeJ710.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
36:54:de:05:eb:08:40:f2:86:96:96:75:48:57:53:a9:14:0c:
12:0d:e8:1b:31:56:14:3a:ac:04:33:98:c8:d6:9b:a5:a2:89:
61:b6:61:88:a5:ec:7a:18:e0:1d:41:6c:f0:d7:d8:11:ff:75:
d9:c7:79:a3:e5:c1:61:d0:be:2f:a2:be:2a:04:f3:b3:02:23:
c5:7e:8a:7a:7e:56:de:fb:d2:5f:15:db:4d:23:22:94:18:f2:
a3:fe:98:45:99:11:18:0e:e6:47:b7:7c:b0:48:58:a5:83:73:
41:15:15:95:62:5d:da:34:6c:2c:74:46:81:2b:32:dc:24:73:
1c:3e:89:bc:31:54:54:1c:9e:4e:b7:31:c9:4a:2b:3b:ac:79:
d2:06:25:f9:f7:c2:0f:17:df:52:1c:94:7a:42:0c:b1:03:13:
d7:9a:94:c0:c2:68:1e:14:15:63:7b:53:17:f0:f1:d6:1f:2b:
cf:92:24:d8:a6:18:80:ac:c4:bf:ac:0a:4b:78:fb:ba:9f:d5:
29:ba:bf:20:6b:35:15:89:2a:5c:5a:d8:1e:b7:8d:09:ed:ab:
40:f0:5f:eb:61:d5:9c:5d:47:ed:2f:d9:a8:64:97:01:a6:4c:
db:74:46:c4:6d:26:f8:cf:1b:fb:25:65:61:53:0f:27:2c:65:
76:76:e3:f8
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEb/X6zjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDMw
NTE4MDQxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDVjMjMxYzg1ZWZj
NDdmM2ZhMGY5ZjZkNzdhZDUxMjg1Nzg5ZWY1ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKhJ9NIFAH4FFJSHhKBr5kuHnQW5zg6hRjp8cOh++5CPtZc7
YnXhXE4XFHLQ4stao/VTu8hHf7Wyuv/C6XXNNYxLZJLe5hL5KsoYgbIc5tB9UOmx
BhHST3xBJT8dNbl10krSj0B51gm8T4lyT2SmWtfudV+atJVwYyObp+zFrbsezjVN
lrplVm49ONexL2xRAFdRc+LouFN4GIFGM2cZIaB/UKYwuAHrYNuAi89NF+V/K9gD
l6nw2g06L7EonbGFLsIHJvAIM5jcVB99awXYeefYBvty0WdtIAkS5jeNS4P1Ma4a
QyhfQp48pfKOluhZGm3RdE6+DYp0XDQTO89Jq/MCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBTVwjHIXvxH8/oPn213rVEoV4nvXTAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
LzFjSXh5Rjc4Ul9QNkQ1OXRkNjFSS0ZlSjcxMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQA2VN4F6whA8oaWlnVIV1OpFAwSDegbMVYUOqwE
M5jI1puloolhtmGIpex6GOAdQWzw19gR/3XZx3mj5cFh0L4vor4qBPOzAiPFfop6
flbe+9JfFdtNIyKUGPKj/phFmREYDuZHt3ywSFilg3NBFRWVYl3aNGwsdEaBKzLc
JHMcPom8MVRUHJ5OtzHJSis7rHnSBiX598IPF99SHJR6QgyxAxPXmpTAwmgeFBVj
e1MX8PHWHyvPkiTYphiArMS/rApLePu6n9Upur8gazUViSpcWtget40J7atA8F/r
YdWcXUftL9moZJcBpkzbdEbEbSb4zxv7JWVhUw8nLGV2duP4
-----END CERTIFICATE-----
Generated at Thu May 1 04:28:48 2025 by rpki-client