Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2bVSg0mqWJdDc2yvbS9rYU5ejjY.roa
File: 2bVSg0mqWJdDc2yvbS9rYU5ejjY.roa (raw, json)
Hash identifier: 5LYBuFx2zp1sU+L00AoZg3HxXMZuhpEeziUljiGXhzg=
Subject key identifier: D9:B5:52:83:49:AA:58:97:43:73:6C:AF:6D:2F:6B:61:4E:5E:8E:36
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186391737573A9B1ED74759EF3C4690A378
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2bVSg0mqWJdDc2yvbS9rYU5ejjY.roa
Signing time: Fri 10 Feb 2023 02:11:08 +0000
ROA not before: Fri 10 Feb 2023 02:11:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:39:17:37:57:3a:9b:1e:d7:47:59:ef:3c:46:90:a3:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 10 02:11:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d9b5528349aa589743736caf6d2f6b614e5e8e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cf:2a:8d:13:d4:8f:69:cf:a4:fd:53:8f:c8:
06:41:d1:1d:c5:d1:e7:84:62:29:c3:dc:f5:cc:bb:
bc:7a:bd:01:36:d9:9c:db:ff:75:dc:c2:8e:de:70:
eb:22:61:16:aa:b3:fa:46:c5:47:5f:aa:39:1d:cf:
5a:e6:4d:fc:b4:5c:95:69:79:57:d0:79:6f:c1:be:
b4:f1:81:75:11:1a:f4:ba:d1:2c:50:8d:21:42:c9:
cf:bd:2e:8a:5f:d8:4a:b1:4e:fc:c0:ba:96:b1:27:
eb:47:07:4d:28:90:e8:24:7f:e0:e9:55:b8:a2:2f:
50:cb:b0:e8:69:fb:4a:53:c2:dc:88:c7:cb:c3:1d:
48:8c:61:a9:b8:26:23:ab:08:41:12:ec:a5:42:60:
1f:70:92:18:ab:1e:f6:d0:7a:96:ea:6a:7a:55:fa:
b0:6f:73:62:10:0d:3b:5d:74:d2:cf:30:1d:c4:7b:
73:08:d1:f5:b4:3a:41:a2:a0:11:50:d2:b3:8f:81:
f7:3c:9f:6d:27:12:20:b6:48:85:16:7b:92:67:17:
f5:bd:33:ae:4a:35:fc:75:d3:12:ec:a5:98:25:e7:
e3:38:de:1f:54:62:45:65:03:03:25:4f:2e:01:90:
36:11:4e:3b:6c:c8:b7:ae:d5:5e:b8:7b:85:90:c1:
24:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B5:52:83:49:AA:58:97:43:73:6C:AF:6D:2F:6B:61:4E:5E:8E:36
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2bVSg0mqWJdDc2yvbS9rYU5ejjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
82:24:65:36:ef:3b:b2:51:5c:fd:91:bf:53:6d:4c:d6:69:53:
33:51:47:b2:8c:9d:76:ff:8b:15:d0:6d:c2:12:b0:b8:bc:68:
4d:26:9b:39:41:e4:26:3f:4c:6d:b3:67:8d:cc:42:1a:83:5e:
78:33:09:a1:3c:24:9b:d3:4a:92:49:7b:aa:a6:35:2f:f3:7b:
f5:4d:9c:17:a1:1e:41:bc:d8:d5:10:83:5f:3e:27:5e:6b:b3:
7b:23:55:f3:17:6b:a8:65:07:76:94:ff:62:42:d2:73:21:51:
f8:57:6f:b3:bc:eb:df:a8:19:d5:2a:86:c5:45:95:09:f6:b6:
d5:71:70:c5:2b:79:3f:bf:da:60:1d:4d:cb:76:8b:80:34:8b:
28:c4:e3:93:13:84:ff:cb:46:33:68:28:7b:e8:35:76:c3:f2:
9e:fd:f7:1d:20:8a:ef:5e:25:76:ba:30:76:c2:26:94:71:ad:
1f:37:39:df:1f:5a:0d:4f:87:4d:c9:e6:fc:f3:cf:94:13:cb:
5d:41:cb:0b:e3:c9:94:03:af:71:29:cf:5d:5f:ad:0a:c7:79:
0e:5a:2e:6d:75:1d:b6:f7:cf:e6:1a:b9:21:b0:ba:19:7a:77:
12:83:ab:1b:14:53:af:8f:1d:43:e1:d9:4b:6e:c6:a0:f5:96:
bd:cb:81:b7
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYY5FzdXOpse10dZ7zxGkKN4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjEwMDIxMTA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOWI1NTI4MzQ5YWE1ODk3NDM3MzZjYWY2ZDJmNmI2MTRlNWU4ZTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy88qjRPUj2nPpP1Tj8gGQdEdxdHn
hGIpw9z1zLu8er0BNtmc2/913MKO3nDrImEWqrP6RsVHX6o5Hc9a5k38tFyVaXlX
0Hlvwb608YF1ERr0utEsUI0hQsnPvS6KX9hKsU78wLqWsSfrRwdNKJDoJH/g6VW4
oi9Qy7DoaftKU8LciMfLwx1IjGGpuCYjqwhBEuylQmAfcJIYqx720HqW6mp6Vfqw
b3NiEA07XXTSzzAdxHtzCNH1tDpBoqARUNKzj4H3PJ9tJxIgtkiFFnuSZxf1vTOu
SjX8ddMS7KWYJefjON4fVGJFZQMDJU8uAZA2EU47bMi3rtVeuHuFkMEkkwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNm1UoNJqliXQ3Nsr20va2FOXo42MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMmJWU2cwbXFXSmREYzJ5dmJTOXJZVTVlampZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIIkZTbvO7JRXP2Rv1Nt
TNZpUzNRR7KMnXb/ixXQbcISsLi8aE0mmzlB5CY/TG2zZ43MQhqDXngzCaE8JJvT
SpJJe6qmNS/ze/VNnBehHkG82NUQg18+J15rs3sjVfMXa6hlB3aU/2JC0nMhUfhX
b7O869+oGdUqhsVFlQn2ttVxcMUreT+/2mAdTct2i4A0iyjE45MThP/LRjNoKHvo
NXbD8p799x0giu9eJXa6MHbCJpRxrR83Od8fWg1Ph03J5vzzz5QTy11BywvjyZQD
r3Epz11frQrHeQ5aLm11Hbb3z+YauSGwuhl6dxKDqxsUU6+PHUPh2UtuxqD1lr3L
gbc=
-----END CERTIFICATE-----
Generated at Thu May 1 10:03:34 2025 by rpki-client