Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/28LEe6JcxU_JvI9U_IYJKiEbjR4.roa
File: 28LEe6JcxU_JvI9U_IYJKiEbjR4.roa (raw, json)
Hash identifier: qXd2vs9Af24lVdcRKQKPj4z8Ix//pnpa6/3Sxo4B+2I=
Subject key identifier: DB:C2:C4:7B:A2:5C:C5:4F:C9:BC:8F:54:FC:86:09:2A:21:1B:8D:1E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189BD00DE37AD23AF0E3D1CE24EF5D4BF48
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/28LEe6JcxU_JvI9U_IYJKiEbjR4.roa
Signing time: Thu 03 Aug 2023 20:04:58 +0000
ROA not before: Thu 03 Aug 2023 20:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:bd00:34c5/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:bd:00:de:37:ad:23:af:0e:3d:1c:e2:4e:f5:d4:bf:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 3 20:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dbc2c47ba25cc54fc9bc8f54fc86092a211b8d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:87:09:9f:d5:c7:07:fd:10:c8:f8:ce:67:e2:
46:c2:27:13:8d:2f:f7:ae:e9:36:b5:82:d6:aa:92:
01:3e:50:d0:a7:75:c5:11:56:39:da:96:7c:be:9a:
8a:a5:e1:ec:6b:75:18:28:b1:98:e7:bb:56:2d:f8:
06:70:9a:d0:ec:57:15:f2:50:fa:a9:b1:00:f7:14:
4a:48:38:dc:1c:bc:56:52:c5:69:9a:39:80:3e:12:
67:94:0a:13:23:6d:12:07:6e:67:22:61:9a:cf:87:
17:2e:8a:6b:0c:eb:ad:68:96:79:9f:87:a5:ec:c8:
11:49:20:80:90:1e:50:52:83:69:d7:48:6a:30:d3:
2b:f2:e3:54:85:c1:86:85:5e:b6:f2:d9:8c:1f:b2:
39:0f:66:d9:9e:29:f1:41:92:1f:ba:bf:71:3e:5c:
25:94:8f:8d:66:f5:28:bd:82:1e:a9:ea:df:cf:19:
29:b6:bc:65:2e:00:9f:c7:2f:ba:b8:4c:e7:f2:2f:
14:f8:f0:8e:57:cd:bd:c5:a1:90:ed:62:16:04:f3:
29:e5:ac:ba:45:e6:72:d9:ed:e8:f0:1e:82:3b:7f:
f4:9e:a9:2a:78:5a:50:94:90:02:15:0b:40:64:b0:
84:47:a4:73:8e:64:b6:ab:6a:31:5c:f4:73:7e:4a:
f3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:C2:C4:7B:A2:5C:C5:4F:C9:BC:8F:54:FC:86:09:2A:21:1B:8D:1E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/28LEe6JcxU_JvI9U_IYJKiEbjR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a7:9f:24:83:b8:3e:c8:67:c4:3a:c2:1a:88:3c:9b:74:1e:b7:
92:70:34:89:04:e4:d2:dd:16:cd:85:53:51:c7:6c:a4:e1:54:
bd:d8:7f:f1:70:ab:a6:04:e7:10:13:53:18:a5:cb:30:60:6c:
5e:d9:03:5a:4a:32:fa:a7:fc:03:ba:15:a5:6d:c8:4a:00:06:
5e:ac:e5:e5:f9:f6:81:c6:a4:d1:84:b7:08:0b:60:e9:43:d4:
c8:16:6b:33:3f:db:b7:92:b2:5e:02:81:0c:0a:29:5f:df:4a:
73:83:c1:58:ff:c2:4e:1f:e0:1b:00:e0:48:77:15:de:e2:03:
49:56:37:2a:bc:46:00:f5:be:fa:1a:39:8e:d3:7c:32:42:1d:
86:b2:ef:e0:e9:e5:ba:db:8f:87:bf:5e:fc:4f:2f:0c:a0:f0:
e5:b8:55:02:3f:66:3d:49:cd:d9:ad:5d:34:37:ba:19:a0:c9:
ed:e4:73:77:91:79:95:c1:8e:9d:27:d8:ba:05:65:24:04:b7:
2e:8d:d4:ff:20:c4:76:12:39:f1:7d:44:58:27:b7:49:2d:0a:
5c:8b:40:c5:b3:18:ab:2c:c9:38:13:84:cd:cd:95:f5:93:54:
c6:1a:75:44:9e:1c:f3:ee:7b:a6:f3:3e:1d:fc:02:0c:ea:f7:
84:35:6f:8d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYm9AN43rSOvDj0c4k711L9IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODAzMjAwNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYmMyYzQ3YmEyNWNjNTRmYzliYzhmNTRmYzg2MDkyYTIxMWI4ZDFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIcJn9XHB/0QyPjOZ+JGwicTjS/3
ruk2tYLWqpIBPlDQp3XFEVY52pZ8vpqKpeHsa3UYKLGY57tWLfgGcJrQ7FcV8lD6
qbEA9xRKSDjcHLxWUsVpmjmAPhJnlAoTI20SB25nImGaz4cXLoprDOutaJZ5n4el
7MgRSSCAkB5QUoNp10hqMNMr8uNUhcGGhV628tmMH7I5D2bZninxQZIfur9xPlwl
lI+NZvUovYIeqerfzxkptrxlLgCfxy+6uEzn8i8U+PCOV829xaGQ7WIWBPMp5ay6
ReZy2e3o8B6CO3/0nqkqeFpQlJACFQtAZLCER6RzjmS2q2oxXPRzfkrzeQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNvCxHuiXMVPybyPVPyGCSohG40eMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMjhMRWU2SmN4VV9Kdkk5VV9JWUpLaUVialI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKefJIO4PshnxDrCGog8
m3Qet5JwNIkE5NLdFs2FU1HHbKThVL3Yf/Fwq6YE5xATUxilyzBgbF7ZA1pKMvqn
/AO6FaVtyEoABl6s5eX59oHGpNGEtwgLYOlD1MgWazM/27eSsl4CgQwKKV/fSnOD
wVj/wk4f4BsA4Eh3Fd7iA0lWNyq8RgD1vvoaOY7TfDJCHYay7+Dp5brbj4e/XvxP
Lwyg8OW4VQI/Zj1JzdmtXTQ3uhmgye3kc3eReZXBjp0n2LoFZSQEty6N1P8gxHYS
OfF9RFgnt0ktClyLQMWzGKssyTgThM3NlfWTVMYadUSeHPPue6bzPh38Agzq94Q1
b40=
-----END CERTIFICATE-----
Generated at Wed Apr 30 22:54:44 2025 by rpki-client