Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/217M7FABKmbHMKVCWOtkG5Lx9mo.roa
File: 217M7FABKmbHMKVCWOtkG5Lx9mo.roa (raw, json)
Hash identifier: zdWi2Kx74mAqTB+bAjYOVIKP7dpqHZkA+hAW93IuZpw=
Subject key identifier: DB:5E:CC:EC:50:01:2A:66:C7:30:A5:42:58:EB:64:1B:92:F1:F6:6A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182922829BA104DF9AAD6EABEFB28B57908
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/217M7FABKmbHMKVCWOtkG5Lx9mo.roa
Signing time: Fri 12 Aug 2022 13:04:41 +0000
ROA not before: Fri 12 Aug 2022 13:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:9227:b0c1/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:92:28:29:ba:10:4d:f9:aa:d6:ea:be:fb:28:b5:79:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 12 13:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=db5eccec50012a66c730a54258eb641b92f1f66a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dd:23:bb:6f:53:65:00:76:82:d5:d6:df:be:
d3:cd:ac:88:b0:e1:3d:06:7e:6d:9d:19:c8:9d:92:
79:55:46:ed:3f:bd:81:1f:e6:02:43:e2:fb:cb:93:
4e:0e:d7:26:b6:47:e0:82:5b:d7:2e:92:a8:d6:65:
e8:4e:43:9f:3e:1f:8e:3b:48:8d:6a:74:f0:5f:1f:
13:6e:9a:15:0e:91:00:7a:dd:92:a3:90:42:5a:6a:
c8:c0:7d:2f:64:51:97:dd:a7:2d:a7:8f:99:b2:ea:
ed:6d:ce:eb:8b:d8:89:e9:89:73:26:ce:40:b5:26:
a6:26:c1:47:13:bd:5f:5f:7b:d5:65:1d:fd:1b:01:
81:07:d6:dc:b4:ff:9c:70:e6:e8:2d:7f:54:ae:33:
e7:b3:08:b4:fd:ad:0e:56:ab:fe:10:2a:46:75:0d:
5f:09:93:dc:f4:6f:22:94:b7:5f:6e:31:44:ed:98:
a8:2e:9e:22:b7:2c:e9:ef:48:f3:78:b2:de:89:9b:
d2:b4:1b:57:fe:4c:bf:68:e6:87:b1:71:ae:0e:37:
97:31:fc:0d:61:f1:eb:27:82:ee:f4:36:54:23:ad:
85:ab:62:4f:ab:d4:33:6b:34:02:7d:e2:ed:9d:8a:
00:2d:3a:20:3b:92:30:3e:2f:6f:78:2a:0c:01:3a:
b1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:5E:CC:EC:50:01:2A:66:C7:30:A5:42:58:EB:64:1B:92:F1:F6:6A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/217M7FABKmbHMKVCWOtkG5Lx9mo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
31:53:ad:84:35:ee:92:5a:e5:23:6b:76:d7:16:a2:5d:f5:ec:
d8:fb:61:d6:f3:fa:34:11:d6:44:4d:1d:28:9d:9d:b7:cf:88:
e8:38:fa:d0:1d:50:5c:a3:50:91:46:ad:05:7d:c2:69:1f:42:
bb:b0:3c:1c:42:ad:25:a8:63:76:9d:f9:26:8b:4b:81:c8:ee:
f6:a7:54:0c:1d:22:da:e1:e9:47:1e:85:da:32:9e:38:95:f3:
52:c8:73:ac:00:2f:25:94:79:d6:1a:8c:70:c4:2f:65:23:88:
7c:c1:d5:38:08:ca:a6:81:5c:bb:1c:f5:9f:92:6f:89:c2:dd:
92:63:e3:41:39:73:4f:e2:8e:cc:4c:29:c7:22:0e:ee:51:0d:
70:ff:ed:1e:1d:1e:90:95:6d:9c:3b:02:36:0c:bb:fb:a3:3b:
2d:fb:4f:ea:6b:cb:0b:62:69:af:c6:7d:db:48:7d:59:39:2b:
9a:44:0d:12:b0:f0:34:99:c5:58:f2:e5:b4:08:5f:32:b7:1e:
e7:22:b6:75:71:97:c4:82:8f:95:72:8f:5b:76:43:1c:c0:eb:
ef:84:3c:ca:fd:5b:92:c7:4d:7b:91:64:c9:ce:8a:56:c0:2e:
78:90:6c:95:e3:0c:2a:62:db:0d:2e:7f:5a:75:03:3b:0a:ff:
ed:e0:0c:4a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYKSKCm6EE35qtbqvvsotXkIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwODEyMTMwNDQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYjVlY2NlYzUwMDEyYTY2YzczMGE1NDI1OGViNjQxYjkyZjFmNjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvd0ju29TZQB2gtXW377TzayIsOE9
Bn5tnRnInZJ5VUbtP72BH+YCQ+L7y5NODtcmtkfgglvXLpKo1mXoTkOfPh+OO0iN
anTwXx8TbpoVDpEAet2So5BCWmrIwH0vZFGX3actp4+Zsurtbc7ri9iJ6YlzJs5A
tSamJsFHE71fX3vVZR39GwGBB9bctP+ccOboLX9UrjPnswi0/a0OVqv+ECpGdQ1f
CZPc9G8ilLdfbjFE7ZioLp4ityzp70jzeLLeiZvStBtX/ky/aOaHsXGuDjeXMfwN
YfHrJ4Lu9DZUI62Fq2JPq9QzazQCfeLtnYoALTogO5IwPi9veCoMATqxbwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNtezOxQASpmxzClQljrZBuS8fZqMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMjE3TTdGQUJLbWJITUtWQ1dPdGtHNUx4OW1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADFTrYQ17pJa5SNrdtcW
ol317Nj7Ydbz+jQR1kRNHSidnbfPiOg4+tAdUFyjUJFGrQV9wmkfQruwPBxCrSWo
Y3ad+SaLS4HI7vanVAwdItrh6UcehdoynjiV81LIc6wALyWUedYajHDEL2UjiHzB
1TgIyqaBXLsc9Z+Sb4nC3ZJj40E5c0/ijsxMKcciDu5RDXD/7R4dHpCVbZw7AjYM
u/ujOy37T+prywtiaa/GfdtIfVk5K5pEDRKw8DSZxVjy5bQIXzK3HucitnVxl8SC
j5Vyj1t2QxzA6++EPMr9W5LHTXuRZMnOilbALniQbJXjDCpi2w0uf1p1AzsK/+3g
DEo=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:30:45 2025 by rpki-client