Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1dJGHTqtZga-s7HpH50LitDk9NI.roa
File: 1dJGHTqtZga-s7HpH50LitDk9NI.roa (raw, json)
Hash identifier: TmdQwzzoeLVn8fE/oO/4wmw529mtmr1Pb8fE0cIkR1Y=
Subject key identifier: D5:D2:46:1D:3A:AD:66:06:BE:B3:B1:E9:1F:9D:0B:8A:D0:E4:F4:D2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 69EBAC76
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1dJGHTqtZga-s7HpH50LitDk9NI.roa
Signing time: Sat 12 Feb 2022 08:09:22 +0000
ROA not before: Sat 12 Feb 2022 08:09:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1777052790 (0x69ebac76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 12 08:09:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d5d2461d3aad6606beb3b1e91f9d0b8ad0e4f4d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:0c:4c:29:01:0f:dc:a8:d3:bf:83:1a:6c:2a:
19:98:d0:1a:d6:97:91:1f:ec:22:1a:cf:ba:3e:10:
e1:cd:2b:81:cd:d0:88:9b:6c:1f:b7:5d:80:e7:f1:
65:9a:1c:d5:b2:d7:39:2a:90:e9:8f:72:b9:39:53:
09:9b:37:54:49:a0:f1:53:dc:1c:96:0d:cc:d9:de:
3a:67:7b:0f:1a:04:02:13:59:be:f7:a6:77:39:11:
f9:96:dd:c1:e1:01:86:17:93:de:f6:62:fc:43:32:
94:af:42:7e:6b:be:96:72:c5:96:e5:d0:8d:1e:5d:
50:f3:01:f3:6e:e9:5d:d4:4c:50:cf:0a:79:44:5d:
b0:75:26:89:9d:21:94:83:78:49:56:b3:50:c8:5d:
96:d0:f3:55:2b:32:59:35:3b:97:60:cf:84:ef:ca:
11:3d:af:83:82:32:99:ce:2a:92:26:27:8c:ef:53:
57:c6:84:6f:fe:37:c9:23:f0:86:36:35:a9:7d:c7:
44:f8:b8:2b:f8:f6:b1:5e:2b:8a:fb:fe:24:b0:39:
44:75:af:8d:62:92:0e:ed:83:fd:e8:67:f8:87:a8:
8c:bb:e0:dc:44:54:2c:d5:ed:d9:30:26:7e:be:3c:
e0:43:b6:50:95:4f:2c:f8:7c:99:85:9a:26:80:3f:
4c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D2:46:1D:3A:AD:66:06:BE:B3:B1:E9:1F:9D:0B:8A:D0:E4:F4:D2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1dJGHTqtZga-s7HpH50LitDk9NI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
08:96:35:c6:9b:b9:3c:18:5d:21:e8:11:4a:3f:c7:22:f5:46:
f8:d8:bf:fb:6c:d8:42:74:50:1e:9e:38:bb:af:9f:38:a2:b1:
89:07:94:62:55:00:25:68:be:9a:da:f0:4c:65:c9:23:00:6c:
2b:93:0a:e8:46:e1:c3:1d:ab:88:93:20:eb:95:66:9a:73:70:
78:a0:2f:41:eb:24:5f:fb:03:88:d8:55:58:af:de:a3:59:d2:
c9:68:bc:a5:f4:df:99:16:82:13:84:6b:b0:52:c4:34:0a:a7:
d0:a0:4d:61:f3:48:85:ab:e8:c8:4a:90:ac:7f:89:ca:ad:13:
7d:7f:18:84:0d:b2:8c:7e:64:0d:3c:7d:bc:98:50:97:bb:d4:
7b:16:5b:cd:3c:4b:3c:2c:fa:e6:55:19:7d:55:6c:33:4f:84:
a9:d8:66:df:01:38:b8:04:85:20:e9:59:ed:b3:ac:3e:25:ed:
d7:12:bb:88:80:73:de:6f:cd:c7:fc:0a:9e:37:3b:39:40:b5:
73:f7:5e:9c:bd:58:a7:63:de:d4:fd:79:ee:9b:3b:4a:d7:47:
15:87:f3:15:6f:ca:e9:0a:c7:7b:d4:45:aa:77:dc:a1:98:9f:
f9:01:df:79:f9:15:61:2a:b4:95:63:78:84:f7:a6:19:d9:e6:
65:a1:18:ea
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEaeusdjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDIx
MjA4MDkyMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDVkMjQ2MWQzYWFk
NjYwNmJlYjNiMWU5MWY5ZDBiOGFkMGU0ZjRkMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPEMTCkBD9yo07+DGmwqGZjQGtaXkR/sIhrPuj4Q4c0rgc3Q
iJtsH7ddgOfxZZoc1bLXOSqQ6Y9yuTlTCZs3VEmg8VPcHJYNzNneOmd7DxoEAhNZ
vvemdzkR+ZbdweEBhheT3vZi/EMylK9Cfmu+lnLFluXQjR5dUPMB827pXdRMUM8K
eURdsHUmiZ0hlIN4SVazUMhdltDzVSsyWTU7l2DPhO/KET2vg4Iymc4qkiYnjO9T
V8aEb/43ySPwhjY1qX3HRPi4K/j2sV4rivv+JLA5RHWvjWKSDu2D/ehn+IeojLvg
3ERULNXt2TAmfr484EO2UJVPLPh8mYWaJoA/TC8CAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBTV0kYdOq1mBr6zsekfnQuK0OT00jAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
LzFkSkdIVHF0WmdhLXM3SHBINTBMaXREazlOSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQAIljXGm7k8GF0h6BFKP8ci9Ub42L/7bNhCdFAe
nji7r584orGJB5RiVQAlaL6a2vBMZckjAGwrkwroRuHDHauIkyDrlWaac3B4oC9B
6yRf+wOI2FVYr96jWdLJaLyl9N+ZFoIThGuwUsQ0CqfQoE1h80iFq+jISpCsf4nK
rRN9fxiEDbKMfmQNPH28mFCXu9R7FlvNPEs8LPrmVRl9VWwzT4Sp2GbfATi4BIUg
6Vnts6w+Je3XEruIgHPeb83H/AqeNzs5QLVz916cvVinY97U/XnumztK10cVh/MV
b8rpCsd71EWqd9yhmJ/5Ad95+RVhKrSVY3iE96YZ2eZloRjq
-----END CERTIFICATE-----
Generated at Thu May 1 05:04:09 2025 by rpki-client