Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1s8JFBUR7GgA0VDVs6MWk9kLuIk.roa
File: 1s8JFBUR7GgA0VDVs6MWk9kLuIk.roa (raw, json)
Hash identifier: TqPuO8mFLax/1iRgJXsKgRfDHDYSkzGvUrv8fCZVI7M=
Subject key identifier: D6:CF:09:14:15:11:EC:68:00:D1:50:D5:B3:A3:16:93:D9:0B:B8:89
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018691F0AF762311D90B3CBF2E7CB0A94238
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1s8JFBUR7GgA0VDVs6MWk9kLuIk.roa
Signing time: Mon 27 Feb 2023 08:15:15 +0000
ROA not before: Mon 27 Feb 2023 08:15:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:91:f0:af:76:23:11:d9:0b:3c:bf:2e:7c:b0:a9:42:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 27 08:15:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6cf09141511ec6800d150d5b3a31693d90bb889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5a:00:16:4f:1d:04:5c:ef:30:58:6f:00:7b:
b9:60:e3:57:40:ec:6c:43:34:19:20:4f:90:e1:fe:
dd:92:21:ae:e7:d5:00:08:14:71:ca:4d:a2:f4:3c:
aa:c9:b1:fb:a2:4d:19:d3:63:3a:bb:0c:e7:17:1c:
29:d0:29:de:23:d6:fb:ed:38:12:f2:2f:10:9b:8c:
1c:cc:f5:fb:85:d3:37:f0:58:e5:df:90:24:6f:29:
b8:7e:40:fc:65:c6:62:9b:86:b9:60:bb:36:d2:95:
8b:54:fa:0d:8e:40:06:e4:18:dc:d1:46:0e:c2:27:
58:eb:e1:00:85:b2:bb:1d:20:5b:40:ed:de:a9:4a:
09:e7:3e:3c:99:76:b8:7e:f8:a4:45:71:14:6b:56:
15:8d:21:15:59:65:5b:06:13:d6:8a:a7:1c:9c:58:
c7:e3:95:b0:89:8b:d0:a2:aa:e7:09:bf:a5:2e:30:
72:bd:42:6c:0d:5a:46:67:47:ae:57:30:c6:09:e8:
2a:cf:26:10:ec:0a:6c:43:98:9d:98:b4:57:19:60:
e4:b8:1d:7d:28:89:b2:dd:5c:8d:84:2f:1a:2b:0b:
50:0e:82:51:96:5b:65:da:7b:57:ab:e7:06:30:aa:
4d:fc:f2:80:1b:af:51:ad:9f:2d:00:d6:2c:93:f8:
60:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:CF:09:14:15:11:EC:68:00:D1:50:D5:B3:A3:16:93:D9:0B:B8:89
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1s8JFBUR7GgA0VDVs6MWk9kLuIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
60:9a:eb:9d:7d:5e:09:49:b1:f5:6d:95:b3:94:ed:c5:2f:78:
88:d3:dd:a8:74:78:18:32:2b:59:7b:80:b1:60:35:9a:e8:a1:
ea:82:31:d0:6a:f1:dc:7b:e8:8e:95:93:76:3f:f2:7a:f5:15:
79:f4:24:68:61:85:e1:ed:87:e9:9b:30:df:03:db:06:cc:86:
d5:87:cb:ef:2f:0d:36:ae:e7:9d:d7:90:a7:53:ec:52:d3:ed:
98:bc:90:76:8b:47:5a:37:7b:d0:7e:a1:e7:b6:9e:bc:9f:72:
66:62:ab:4c:17:62:8b:3c:fc:b8:55:d4:2c:cf:5e:e9:9c:17:
83:f3:89:1d:56:67:80:38:e9:22:91:29:17:5c:37:a3:60:af:
03:b0:6f:65:09:16:63:29:e6:e8:55:c3:c7:93:ea:26:f8:17:
90:c2:19:f7:52:e2:85:b5:d6:1e:03:15:ec:27:96:79:16:55:
a1:3c:a1:d9:d1:9f:c2:5d:8a:f9:0d:13:de:42:47:e7:d8:aa:
16:fb:02:d7:8b:d2:a9:0b:4a:f8:ec:5b:4c:23:f7:07:ac:b2:
a1:7c:c2:40:bc:82:a4:b9:2e:e3:e9:e2:38:17:ec:28:af:79:
a7:c4:65:d9:95:ed:30:a6:8f:cb:41:d5:b0:74:e0:ef:46:31:
cb:31:dc:1d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYaR8K92IxHZCzy/LnywqUI4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjI3MDgxNTE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNmNmMDkxNDE1MTFlYzY4MDBkMTUwZDViM2EzMTY5M2Q5MGJiODg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1oAFk8dBFzvMFhvAHu5YONXQOxs
QzQZIE+Q4f7dkiGu59UACBRxyk2i9DyqybH7ok0Z02M6uwznFxwp0CneI9b77TgS
8i8Qm4wczPX7hdM38Fjl35Akbym4fkD8ZcZim4a5YLs20pWLVPoNjkAG5Bjc0UYO
widY6+EAhbK7HSBbQO3eqUoJ5z48mXa4fvikRXEUa1YVjSEVWWVbBhPWiqccnFjH
45WwiYvQoqrnCb+lLjByvUJsDVpGZ0euVzDGCegqzyYQ7ApsQ5idmLRXGWDkuB19
KImy3VyNhC8aKwtQDoJRlltl2ntXq+cGMKpN/PKAG69RrZ8tANYsk/hgWwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNbPCRQVEexoANFQ1bOjFpPZC7iJMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMXM4SkZCVVI3R2dBMFZEVnM2TVdrOWtMdUlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGCa6519XglJsfVtlbOU
7cUveIjT3ah0eBgyK1l7gLFgNZrooeqCMdBq8dx76I6Vk3Y/8nr1FXn0JGhhheHt
h+mbMN8D2wbMhtWHy+8vDTau553XkKdT7FLT7Zi8kHaLR1o3e9B+oee2nryfcmZi
q0wXYos8/LhV1CzPXumcF4PziR1WZ4A46SKRKRdcN6NgrwOwb2UJFmMp5uhVw8eT
6ib4F5DCGfdS4oW11h4DFewnlnkWVaE8odnRn8JdivkNE95CR+fYqhb7AteL0qkL
SvjsW0wj9wessqF8wkC8gqS5LuPp4jgX7CiveafEZdmV7TCmj8tB1bB04O9GMcsx
3B0=
-----END CERTIFICATE-----
Generated at Thu May 1 10:23:28 2025 by rpki-client