Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2mKHBdjzz9VHbY8JpDFmO9tI9to.roa
File: 2mKHBdjzz9VHbY8JpDFmO9tI9to.roa (raw, json)
Hash identifier: 5AB6FUAdey264UzR/cpLcy5W8NUMdedwEhsH1EemtcM=
Subject key identifier: DA:62:87:05:D8:F3:CF:D5:47:6D:8F:09:A4:31:66:3B:DB:48:F6:DA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01864FD73C2720AB4D1B2AE7516612E6002F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2mKHBdjzz9VHbY8JpDFmO9tI9to.roa
Signing time: Tue 14 Feb 2023 12:12:30 +0000
ROA not before: Tue 14 Feb 2023 12:12:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4f:d7:3c:27:20:ab:4d:1b:2a:e7:51:66:12:e6:00:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 14 12:12:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=da628705d8f3cfd5476d8f09a431663bdb48f6da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9f:75:19:33:bb:17:e2:25:e1:24:af:60:b0:
aa:55:41:e0:48:5a:71:3a:f7:26:6a:87:8c:09:04:
c8:ad:40:c6:55:19:60:40:dd:ff:d1:c5:26:09:7f:
56:00:3c:80:a5:be:9b:a7:c5:37:e3:96:9b:41:2d:
46:c1:3d:dc:a9:3e:f5:d5:c4:63:b5:fb:f2:62:40:
85:8c:0a:d6:1e:43:f7:83:78:80:00:8a:f9:77:a4:
cf:4b:ac:58:81:c0:1b:2a:88:5b:51:4d:a4:91:66:
76:e6:b9:50:8c:96:57:43:b9:09:14:7f:63:16:f9:
c5:82:72:34:97:79:f6:63:04:e0:3b:ed:10:6b:45:
8d:15:d3:f1:f4:99:56:1f:b3:33:5f:c0:52:44:70:
b0:6f:6f:23:f7:a0:6b:58:36:67:68:1a:91:59:2e:
12:c4:8a:bd:bf:85:1d:00:e3:a9:e1:eb:2a:83:33:
44:f8:29:59:ca:38:9b:40:ff:ab:2c:79:53:e4:66:
42:41:37:42:51:7a:8c:3c:74:20:78:13:e8:fc:eb:
7c:ec:2b:cb:f1:36:c8:80:21:06:d3:67:5a:d3:fe:
1a:e3:41:b6:db:1c:c1:b0:6a:66:2b:dd:48:73:af:
fe:c8:88:eb:1e:fd:25:d7:24:a5:5e:40:38:a9:85:
ab:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:62:87:05:D8:F3:CF:D5:47:6D:8F:09:A4:31:66:3B:DB:48:F6:DA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2mKHBdjzz9VHbY8JpDFmO9tI9to.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
28:e6:57:0d:3e:7f:32:f2:66:7b:b3:e7:a7:e5:b6:5a:57:c1:
ac:a0:38:e9:ed:f7:18:72:1f:79:69:b7:a1:c8:9c:bb:ec:9d:
11:91:5d:96:81:73:6e:17:85:9e:3e:00:45:c9:e8:fa:df:09:
a3:e9:bc:3b:5a:5c:4a:3d:58:16:f1:20:f8:2b:80:17:c7:45:
35:9e:46:db:ec:ef:69:f9:ac:d8:34:6e:cb:bd:b9:be:9f:b8:
b3:15:06:d1:e1:7d:e6:c4:c5:20:d0:ea:e3:72:2f:3c:76:e8:
f2:a4:36:aa:9d:f8:c7:ad:d6:b1:c9:15:3c:7f:c8:1c:0c:e7:
9e:38:b8:da:96:6c:77:30:2d:27:5f:d5:02:6b:7e:36:e2:d6:
84:60:c1:71:a4:93:d3:c3:5c:85:ef:2f:b5:7b:90:ce:73:9a:
b9:36:61:2e:0a:12:ec:e1:c8:46:e2:65:3a:03:e9:46:54:1e:
3e:fb:ac:b1:7c:0f:95:eb:1d:8c:c4:15:b4:45:b6:77:4c:4f:
3c:b3:d2:95:b3:8d:2a:af:9e:ef:d2:9a:70:5a:90:5a:4d:d4:
ea:ae:1a:bb:ac:77:e3:de:9c:7c:3f:97:cd:b6:4b:c5:15:41:
71:25:d0:60:23:f5:10:3d:49:74:9c:cb:35:2f:11:cc:6f:ec:
35:c0:95:e6
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYZP1zwnIKtNGyrnUWYS5gAvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjE0MTIxMjMwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTYyODcwNWQ4ZjNjZmQ1NDc2ZDhmMDlhNDMxNjYzYmRiNDhmNmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJ91GTO7F+Il4SSvYLCqVUHgSFpx
OvcmaoeMCQTIrUDGVRlgQN3/0cUmCX9WADyApb6bp8U345abQS1GwT3cqT711cRj
tfvyYkCFjArWHkP3g3iAAIr5d6TPS6xYgcAbKohbUU2kkWZ25rlQjJZXQ7kJFH9j
FvnFgnI0l3n2YwTgO+0Qa0WNFdPx9JlWH7MzX8BSRHCwb28j96BrWDZnaBqRWS4S
xIq9v4UdAOOp4esqgzNE+ClZyjibQP+rLHlT5GZCQTdCUXqMPHQgeBPo/Ot87CvL
8TbIgCEG02da0/4a40G22xzBsGpmK91Ic6/+yIjrHv0l1ySlXkA4qYWrxwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNpihwXY88/VR22PCaQxZjvbSPbaMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMm1LSEJkanp6OVZIYlk4SnBERm1POXRJOXRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACjmVw0+fzLyZnuz56fl
tlpXwaygOOnt9xhyH3lpt6HInLvsnRGRXZaBc24XhZ4+AEXJ6PrfCaPpvDtaXEo9
WBbxIPgrgBfHRTWeRtvs72n5rNg0bsu9ub6fuLMVBtHhfebExSDQ6uNyLzx26PKk
Nqqd+Met1rHJFTx/yBwM5544uNqWbHcwLSdf1QJrfjbi1oRgwXGkk9PDXIXvL7V7
kM5zmrk2YS4KEuzhyEbiZToD6UZUHj77rLF8D5XrHYzEFbRFtndMTzyz0pWzjSqv
nu/SmnBakFpN1OquGrusd+PenHw/l822S8UVQXEl0GAj9RA9SXScyzUvEcxv7DXA
leY=
-----END CERTIFICATE-----
Generated at Thu May 1 00:45:32 2025 by rpki-client