Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2WJ4V2LrqGkwfTtJ_I0JUg3E_YM.roa
File: 2WJ4V2LrqGkwfTtJ_I0JUg3E_YM.roa (raw, json)
Hash identifier: xNk/vQNXal9B5/D687XLq7EYibCQdMcbQTikviTmkyw=
Subject key identifier: D9:62:78:57:62:EB:A8:69:30:7D:3B:49:FC:8D:09:52:0D:C4:FD:83
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185E5D35FD732AE3CB9B840706C22A0EBF6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2WJ4V2LrqGkwfTtJ_I0JUg3E_YM.roa
Signing time: Tue 24 Jan 2023 22:08:33 +0000
ROA not before: Tue 24 Jan 2023 22:08:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e5:d3:5f:d7:32:ae:3c:b9:b8:40:70:6c:22:a0:eb:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 24 22:08:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d962785762eba869307d3b49fc8d09520dc4fd83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a4:d5:83:86:a6:a9:4c:d7:02:ca:ae:00:9f:
af:77:a3:f1:42:a0:65:3e:eb:b7:df:85:de:a4:55:
c6:cb:14:3c:71:ec:61:a8:ac:31:a7:61:a5:fd:af:
1b:58:66:f8:55:cc:51:ff:69:c5:be:0b:9f:c2:75:
b4:93:de:63:f3:5c:40:df:ba:02:e6:bb:bc:58:f2:
16:9c:8e:02:1d:2d:82:19:16:64:7c:4a:6d:be:f6:
1f:9e:4f:6c:6e:bd:b6:f2:82:ce:e2:be:69:f7:e4:
bf:62:57:99:6f:ed:57:b8:b4:2f:e2:41:3d:4f:2f:
b1:52:83:14:12:b0:99:d6:f6:f3:d2:4b:84:ee:85:
36:71:5f:27:e9:f8:4e:a2:5d:8c:b2:32:27:ab:35:
ee:cd:10:d5:d5:bf:64:4b:0a:ad:57:e4:cc:f0:39:
32:d9:ce:cc:d7:2a:bc:ea:fe:be:00:7b:e1:69:3d:
ed:f8:10:b7:f0:30:5b:3c:14:23:14:40:6e:24:f1:
c9:e8:ba:5a:96:79:04:76:49:50:72:95:31:8e:14:
38:03:24:e9:09:0d:09:b3:bb:d1:99:a5:06:d8:4f:
5b:d9:a2:f5:0e:42:46:84:d4:c0:30:6b:7e:fc:40:
51:b5:13:95:b9:b0:99:8d:fa:c9:be:ef:6c:02:b0:
7f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:62:78:57:62:EB:A8:69:30:7D:3B:49:FC:8D:09:52:0D:C4:FD:83
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2WJ4V2LrqGkwfTtJ_I0JUg3E_YM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b3:c5:39:90:ec:6c:8d:df:a0:e5:53:a6:59:fd:6d:30:99:0f:
c9:31:b1:d8:e8:79:d6:0f:99:4d:01:86:44:d0:3f:8e:d1:e5:
12:0f:42:b1:a3:b1:d6:48:bd:01:b1:63:95:de:26:c3:ae:8e:
2d:13:8c:54:3d:e1:49:e6:ac:27:ac:67:bc:30:c3:f7:6d:0c:
17:be:aa:cb:d4:7e:bd:41:15:f8:27:68:93:f6:d3:85:ac:79:
e1:fe:1b:28:35:88:a0:5f:35:21:a4:6e:b5:d7:e2:1b:53:4d:
84:0a:76:ce:29:92:6c:52:8e:6f:76:25:6c:1f:c5:14:b9:b3:
39:8f:11:21:06:b8:bc:01:d0:58:5b:be:8f:5a:c8:93:3e:c1:
3b:0f:27:26:39:e6:95:2d:0a:15:ba:e6:73:1b:14:7c:a7:12:
3c:20:28:fb:11:d1:c0:82:ad:81:09:71:10:68:b1:cc:ca:cd:
80:d6:9b:41:72:f3:5e:ac:c7:7a:a9:7d:5d:ad:29:55:71:90:
1a:87:88:bd:34:2f:91:2a:02:33:19:3e:c0:e6:3d:48:69:52:
83:7d:b5:c1:a0:9b:5c:48:61:29:c3:34:e2:df:e9:78:01:8a:
8b:f3:7a:1c:db:72:2c:9b:16:bd:9b:df:c0:24:bd:36:74:9d:
7f:10:60:0b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYXl01/XMq48ubhAcGwioOv2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTI0MjIwODMzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOTYyNzg1NzYyZWJhODY5MzA3ZDNiNDlmYzhkMDk1MjBkYzRmZDgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6TVg4amqUzXAsquAJ+vd6PxQqBl
Puu334XepFXGyxQ8cexhqKwxp2Gl/a8bWGb4VcxR/2nFvgufwnW0k95j81xA37oC
5ru8WPIWnI4CHS2CGRZkfEptvvYfnk9sbr228oLO4r5p9+S/YleZb+1XuLQv4kE9
Ty+xUoMUErCZ1vbz0kuE7oU2cV8n6fhOol2MsjInqzXuzRDV1b9kSwqtV+TM8Dky
2c7M1yq86v6+AHvhaT3t+BC38DBbPBQjFEBuJPHJ6LpalnkEdklQcpUxjhQ4AyTp
CQ0Js7vRmaUG2E9b2aL1DkJGhNTAMGt+/EBRtROVubCZjfrJvu9sArB/+QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNlieFdi66hpMH07SfyNCVINxP2DMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMldKNFYyTHJxR2t3ZlR0Sl9JMEpVZzNFX1lNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBALPFOZDsbI3foOVTpln9
bTCZD8kxsdjoedYPmU0BhkTQP47R5RIPQrGjsdZIvQGxY5XeJsOuji0TjFQ94Unm
rCesZ7www/dtDBe+qsvUfr1BFfgnaJP204WseeH+Gyg1iKBfNSGkbrXX4htTTYQK
ds4pkmxSjm92JWwfxRS5szmPESEGuLwB0Fhbvo9ayJM+wTsPJyY55pUtChW65nMb
FHynEjwgKPsR0cCCrYEJcRBosczKzYDWm0Fy816sx3qpfV2tKVVxkBqHiL00L5Eq
AjMZPsDmPUhpUoN9tcGgm1xIYSnDNOLf6XgBiovzehzbciybFr2b38AkvTZ0nX8Q
YAs=
-----END CERTIFICATE-----
Generated at Sat May 3 16:01:10 2025 by rpki-client