Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1v2aUebjaPZ6JgIek9JzpF9kpxA.roa
File: 1v2aUebjaPZ6JgIek9JzpF9kpxA.roa (raw, json)
Hash identifier: YY6sPI2EC37Rdp+gvpYz9xQeQ8zt8HacrZdOTYEe4GY=
Subject key identifier: D6:FD:9A:51:E6:E3:68:F6:7A:26:02:1E:93:D2:73:A4:5F:64:A7:10
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A12DB6F7A3C8FA0D617DE5D57BFB1E78E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1v2aUebjaPZ6JgIek9JzpF9kpxA.roa
Signing time: Sun 20 Aug 2023 12:11:25 +0000
ROA not before: Sun 20 Aug 2023 12:11:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:12:db:6f:7a:3c:8f:a0:d6:17:de:5d:57:bf:b1:e7:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 20 12:11:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6fd9a51e6e368f67a26021e93d273a45f64a710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:21:c5:f5:e8:d5:3d:25:b6:17:76:d9:c2:79:
b9:23:8a:b1:a8:f2:e0:c3:f7:d6:fc:39:72:1b:e2:
ae:04:db:1a:db:a0:e6:03:3a:2f:37:12:4f:ff:e1:
d7:ab:c2:1f:c5:4f:e1:b1:b3:f5:d2:94:b7:0d:7c:
2d:24:bb:f3:5f:80:5a:70:cb:6e:83:3e:44:25:8d:
0e:81:c8:4c:ea:96:69:92:e3:aa:b5:e7:38:a8:a7:
1e:1b:a8:85:c3:67:12:f9:8b:f3:78:41:a8:43:81:
9d:55:9d:bd:d7:af:5c:4f:24:6a:e3:6f:03:30:3a:
46:0f:49:85:b8:64:98:cf:5a:06:21:36:09:6d:47:
ee:56:db:8d:08:c0:16:4c:d4:c0:c9:d7:76:5a:89:
9d:a1:e3:04:35:29:7b:66:f9:0e:1f:2a:55:61:36:
9b:19:73:43:93:cc:99:7d:f1:74:3c:8c:7b:bf:4e:
9d:f5:91:0e:d7:e4:ca:13:ee:86:a8:71:02:96:45:
f3:4b:c1:8e:82:24:8a:36:3b:8f:9f:54:99:a0:38:
3e:87:80:82:96:61:68:b5:ed:b6:ee:d3:24:22:fc:
ed:cf:7e:bf:5c:bf:49:8b:00:0b:a7:54:0b:be:17:
c4:4f:02:e8:f0:f4:7e:de:9d:71:4d:f9:4f:a0:67:
da:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:FD:9A:51:E6:E3:68:F6:7A:26:02:1E:93:D2:73:A4:5F:64:A7:10
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1v2aUebjaPZ6JgIek9JzpF9kpxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
45:53:49:b9:8a:c8:e7:6a:ff:25:56:eb:48:47:1f:24:83:ba:
29:b3:15:40:34:da:e2:2f:cd:a6:fe:6c:95:03:73:3e:34:c8:
db:81:27:01:9d:bb:34:1e:1a:91:04:4f:d7:ef:66:fe:e0:14:
8b:23:9d:12:ee:e1:bf:cd:c6:d5:13:b3:37:d9:db:44:61:02:
80:b1:8f:12:3d:7c:36:89:a7:de:c2:d5:e6:dd:ff:0c:ca:fb:
34:ac:51:70:00:22:16:16:10:82:97:da:0d:6f:5b:f5:91:d2:
a6:65:b4:bf:4e:5a:a3:66:5b:e5:03:7f:b8:f9:45:3b:09:b4:
64:a3:a6:d8:1f:ea:64:b9:70:e5:8e:87:1a:a0:26:64:08:00:
76:32:24:6d:cf:a9:f4:30:78:96:38:cd:6f:a7:d7:44:92:61:
4a:de:62:77:1a:b1:59:e0:62:a8:bb:15:f7:b7:33:0a:b5:ac:
81:ef:0c:e1:b5:e1:dd:9e:96:f8:60:69:3b:de:f6:b3:aa:a2:
52:a0:d3:d8:28:97:61:70:16:7f:b5:a1:d8:af:57:09:3f:93:
c5:f9:d6:e3:b9:0d:d7:8e:51:c2:ee:63:34:7c:35:b7:79:36:
c1:0b:f2:3c:cb:86:00:47:df:41:b1:21:98:49:a6:b8:09:e3:
e1:33:4c:62
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYoS2296PI+g1hfeXVe/seeOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODIwMTIxMTI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNmZkOWE1MWU2ZTM2OGY2N2EyNjAyMWU5M2QyNzNhNDVmNjRhNzEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSHF9ejVPSW2F3bZwnm5I4qxqPLg
w/fW/DlyG+KuBNsa26DmAzovNxJP/+HXq8IfxU/hsbP10pS3DXwtJLvzX4BacMtu
gz5EJY0OgchM6pZpkuOqtec4qKceG6iFw2cS+YvzeEGoQ4GdVZ29169cTyRq428D
MDpGD0mFuGSYz1oGITYJbUfuVtuNCMAWTNTAydd2WomdoeMENSl7ZvkOHypVYTab
GXNDk8yZffF0PIx7v06d9ZEO1+TKE+6GqHEClkXzS8GOgiSKNjuPn1SZoDg+h4CC
lmFote227tMkIvztz36/XL9JiwALp1QLvhfETwLo8PR+3p1xTflPoGfaQQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNb9mlHm42j2eiYCHpPSc6RfZKcQMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMXYyYVVlYmphUFo2SmdJZWs5SnpwRjlrcHhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEVTSbmKyOdq/yVW60hH
HySDuimzFUA02uIvzab+bJUDcz40yNuBJwGduzQeGpEET9fvZv7gFIsjnRLu4b/N
xtUTszfZ20RhAoCxjxI9fDaJp97C1ebd/wzK+zSsUXAAIhYWEIKX2g1vW/WR0qZl
tL9OWqNmW+UDf7j5RTsJtGSjptgf6mS5cOWOhxqgJmQIAHYyJG3PqfQweJY4zW+n
10SSYUreYncasVngYqi7Ffe3Mwq1rIHvDOG14d2elvhgaTve9rOqolKg09gol2Fw
Fn+1odivVwk/k8X51uO5DdeOUcLuYzR8Nbd5NsEL8jzLhgBH30GxIZhJprgJ4+Ez
TGI=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:25 2025 by rpki-client