Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1iwDqgmGEqi_eur-wIAJT0vC6_s.roa
File: 1iwDqgmGEqi_eur-wIAJT0vC6_s.roa (raw, json)
Hash identifier: 0mHSDUc1L+y8uGFLhqD1gb4HQq1khdP/OZARRuCGQww=
Subject key identifier: D6:2C:03:AA:09:86:12:A8:BF:7A:EA:FE:C0:80:09:4F:4B:C2:EB:FB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01827FBBB2546CAA97E59477B713C6EDFBBE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1iwDqgmGEqi_eur-wIAJT0vC6_s.roa
Signing time: Mon 08 Aug 2022 23:13:03 +0000
ROA not before: Mon 08 Aug 2022 23:13:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:7f:bb:b2:54:6c:aa:97:e5:94:77:b7:13:c6:ed:fb:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 8 23:13:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d62c03aa098612a8bf7aeafec080094f4bc2ebfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:54:8b:f0:f3:29:ba:12:fd:c9:fa:73:80:6e:
0c:6f:74:39:65:1b:54:f1:e9:74:9d:0c:ce:3b:4e:
b0:93:6d:54:ad:0a:50:49:23:7b:85:2d:f0:e2:3e:
53:44:34:91:e7:ae:3e:9e:1d:c8:58:05:c0:92:9a:
ac:b7:25:f6:4c:a9:51:2f:d5:d3:14:66:3d:3b:60:
4f:06:78:db:cc:a4:ea:3e:86:7f:07:6a:26:1c:9e:
37:8e:5b:73:2b:aa:5a:49:7c:c1:e0:df:e0:01:4c:
99:ce:58:e9:dc:df:c4:4a:88:48:2e:a2:b2:b4:65:
de:69:80:dc:62:ec:38:01:b3:7a:94:e4:f9:05:2b:
1d:7f:ff:01:9e:86:da:ea:b4:4e:6e:79:36:d1:d4:
b4:d5:00:5c:f5:0c:d6:01:90:01:f2:c3:13:4c:4e:
a8:8d:d2:f8:bb:4c:5d:88:97:7b:35:7e:51:08:9f:
30:83:ae:fb:c6:69:45:0a:83:ce:41:4c:a3:5f:76:
46:a3:79:9d:5b:81:2d:81:ad:78:73:b1:96:7c:c8:
40:e0:2a:43:c0:8b:38:d2:d1:be:07:b9:a2:e1:75:
93:d6:24:ad:81:67:3a:24:20:f4:f3:aa:cd:fd:d4:
08:5b:81:c5:1c:b0:44:cd:d1:ea:c2:61:31:5a:48:
71:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:2C:03:AA:09:86:12:A8:BF:7A:EA:FE:C0:80:09:4F:4B:C2:EB:FB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1iwDqgmGEqi_eur-wIAJT0vC6_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1b:85:bf:80:d6:f7:3e:e6:69:69:b2:ab:cc:89:e2:eb:4f:34:
26:ee:62:59:e6:cf:b4:b6:79:3f:0c:2e:3c:0b:c1:f6:35:d5:
57:4a:e4:d2:12:81:e7:5f:1a:fb:10:5c:58:3e:1e:80:c4:6f:
36:48:72:88:ed:90:b2:c9:31:f1:03:18:22:0c:a1:8e:20:0b:
01:3f:d4:09:f4:ba:a8:46:14:2f:aa:d3:a3:60:5e:ad:89:5e:
0a:20:d8:f9:d0:94:cc:a5:5a:24:f4:a4:50:4b:80:5b:e2:35:
38:74:20:fb:c6:06:55:b3:ab:5c:bf:4e:8a:d9:92:40:78:05:
fd:c2:22:4d:63:4d:82:76:77:89:56:05:9b:e0:d1:4b:0a:85:
16:f6:4b:d5:53:db:7f:63:e5:97:67:b1:d3:a9:66:ba:f6:8c:
87:ae:c4:14:86:d5:a8:6d:e0:ed:ef:ea:c1:9a:1c:eb:dd:55:
a3:6f:4c:9e:a8:70:90:05:74:e7:ec:17:58:f6:fb:80:ee:0f:
b0:21:7b:53:e8:b6:4e:61:f7:35:56:fc:34:80:cf:a6:c9:52:
ed:89:c2:58:8e:cf:9a:60:62:1f:c7:f2:10:04:30:bc:49:bd:
05:60:70:70:f4:2c:bd:f3:f1:78:d3:f7:70:08:55:3f:64:5e:
7a:b1:17:7d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYJ/u7JUbKqX5ZR3txPG7fu+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwODA4MjMxMzAzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNjJjMDNhYTA5ODYxMmE4YmY3YWVhZmVjMDgwMDk0ZjRiYzJlYmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1SL8PMpuhL9yfpzgG4Mb3Q5ZRtU
8el0nQzOO06wk21UrQpQSSN7hS3w4j5TRDSR564+nh3IWAXAkpqstyX2TKlRL9XT
FGY9O2BPBnjbzKTqPoZ/B2omHJ43jltzK6paSXzB4N/gAUyZzljp3N/ESohILqKy
tGXeaYDcYuw4AbN6lOT5BSsdf/8Bnoba6rRObnk20dS01QBc9QzWAZAB8sMTTE6o
jdL4u0xdiJd7NX5RCJ8wg677xmlFCoPOQUyjX3ZGo3mdW4Etga14c7GWfMhA4CpD
wIs40tG+B7mi4XWT1iStgWc6JCD086rN/dQIW4HFHLBEzdHqwmExWkhxwQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNYsA6oJhhKov3rq/sCACU9Lwuv7MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMWl3RHFnbUdFcWlfZXVyLXdJQUpUMHZDNl9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABuFv4DW9z7maWmyq8yJ
4utPNCbuYlnmz7S2eT8MLjwLwfY11VdK5NISgedfGvsQXFg+HoDEbzZIcojtkLLJ
MfEDGCIMoY4gCwE/1An0uqhGFC+q06NgXq2JXgog2PnQlMylWiT0pFBLgFviNTh0
IPvGBlWzq1y/TorZkkB4Bf3CIk1jTYJ2d4lWBZvg0UsKhRb2S9VT239j5ZdnsdOp
Zrr2jIeuxBSG1aht4O3v6sGaHOvdVaNvTJ6ocJAFdOfsF1j2+4DuD7Ahe1Potk5h
9zVW/DSAz6bJUu2JwliOz5pgYh/H8hAEMLxJvQVgcHD0LL3z8XjT93AIVT9kXnqx
F30=
-----END CERTIFICATE-----
Generated at Sun May 4 04:25:26 2025 by rpki-client