Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4dF8cvyq1U4CugxCyDpf5M7wBEI.roa
File: 4dF8cvyq1U4CugxCyDpf5M7wBEI.roa (raw, json)
Hash identifier: zpXOOcimTwnjVpxpu0buqQqvvwymdz4I04Boo/2OGdM=
Subject key identifier: E1:D1:7C:72:FC:AA:D5:4E:02:BA:0C:42:C8:3A:5F:E4:CE:F0:04:42
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6A43AB51
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4dF8cvyq1U4CugxCyDpf5M7wBEI.roa
Signing time: Sun 13 Feb 2022 13:08:30 +0000
ROA not before: Sun 13 Feb 2022 13:08:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1782819665 (0x6a43ab51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 13 13:08:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e1d17c72fcaad54e02ba0c42c83a5fe4cef00442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1f:c7:16:d8:3f:0b:81:85:4b:c8:99:14:d4:
42:b2:b3:06:01:ef:5a:9b:98:1b:84:ec:26:25:9b:
17:36:7c:97:4a:96:95:a2:2f:5e:d1:7b:2a:cf:07:
80:4a:74:0a:57:b3:99:fb:88:d0:3e:38:73:fb:3f:
0c:61:36:8e:28:b1:5f:11:5e:00:77:1a:19:ec:8c:
cd:b3:c9:20:91:ad:20:c1:80:9d:09:11:64:62:cc:
97:e6:34:70:70:94:9d:c3:6d:a9:87:20:e0:f4:7c:
bd:35:8d:c7:c2:30:62:68:91:09:a3:97:48:b2:98:
7f:40:0e:f9:6a:0e:29:d8:8f:8a:77:04:f4:fb:4c:
ab:ad:99:ce:c1:0c:c0:db:f1:74:80:9c:fa:ef:1e:
eb:f8:47:f2:27:b2:5e:51:3c:13:e2:8b:8b:5b:15:
fe:d8:96:42:9b:80:36:f1:1b:0f:d4:ff:be:fa:70:
a1:6c:85:9a:b8:8e:c2:e1:94:94:44:1a:54:93:69:
96:6d:62:bf:0f:5b:12:fc:1a:24:27:60:36:d3:b9:
76:4b:d8:f3:25:e3:c1:ee:1e:a4:1d:e5:63:dc:fe:
99:78:43:be:c8:89:e6:a8:a5:e2:67:03:5c:ea:79:
51:cb:c5:5e:44:f5:cd:27:da:a8:31:ea:ec:c6:e2:
ae:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D1:7C:72:FC:AA:D5:4E:02:BA:0C:42:C8:3A:5F:E4:CE:F0:04:42
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4dF8cvyq1U4CugxCyDpf5M7wBEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b4:08:e4:7a:bc:03:1c:09:ab:9f:d3:45:75:06:d0:f7:40:43:
94:b7:1f:c7:20:19:d7:38:b1:76:2b:52:61:8c:f3:39:e1:87:
23:17:3c:ff:4d:5d:2b:21:37:b7:05:3c:38:fa:5f:4d:ae:37:
ec:33:75:ec:10:2a:54:12:b5:d7:b2:53:ec:6d:c9:67:2f:c5:
e6:5e:ee:4c:a3:cd:4b:10:25:aa:65:de:bf:e5:05:32:48:99:
64:ba:0f:fb:11:b6:25:ef:b0:3f:22:f8:07:f1:ce:a3:7a:94:
67:4c:5b:38:4c:e6:4a:10:6b:b8:26:62:8b:ec:5a:0f:8c:90:
df:41:5c:65:01:98:db:76:c3:b5:63:ac:05:b3:b5:b3:b4:77:
be:56:eb:52:a4:cf:18:67:f2:ca:2d:53:bf:d0:81:cd:ca:54:
b9:72:21:fe:84:0c:32:51:9f:40:21:c1:88:e5:bb:16:57:35:
14:6e:48:05:3e:e3:52:e7:52:a2:e0:0a:5d:94:1c:67:2c:bc:
da:a8:ea:05:8c:88:2f:84:32:13:70:0c:9c:35:71:32:6e:e4:
e4:68:02:8d:a9:ca:a3:fd:76:21:1f:fc:36:ac:b8:fb:59:7b:
75:2f:bc:4d:76:94:2b:62:17:d9:8e:cf:9c:6d:00:69:5f:fb:
4e:7b:9e:53
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEakOrUTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDIx
MzEzMDgzMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTFkMTdjNzJmY2Fh
ZDU0ZTAyYmEwYzQyYzgzYTVmZTRjZWYwMDQ0MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL0fxxbYPwuBhUvImRTUQrKzBgHvWpuYG4TsJiWbFzZ8l0qW
laIvXtF7Ks8HgEp0ClezmfuI0D44c/s/DGE2jiixXxFeAHcaGeyMzbPJIJGtIMGA
nQkRZGLMl+Y0cHCUncNtqYcg4PR8vTWNx8IwYmiRCaOXSLKYf0AO+WoOKdiPincE
9PtMq62ZzsEMwNvxdICc+u8e6/hH8ieyXlE8E+KLi1sV/tiWQpuANvEbD9T/vvpw
oWyFmriOwuGUlEQaVJNplm1ivw9bEvwaJCdgNtO5dkvY8yXjwe4epB3lY9z+mXhD
vsiJ5qil4mcDXOp5UcvFXkT1zSfaqDHq7MbirhkCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBTh0Xxy/KrVTgK6DELIOl/kzvAEQjAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
LzRkRjhjdnlxMVU0Q3VneEN5RHBmNU03d0JFSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQC0COR6vAMcCauf00V1BtD3QEOUtx/HIBnXOLF2
K1JhjPM54YcjFzz/TV0rITe3BTw4+l9NrjfsM3XsECpUErXXslPsbclnL8XmXu5M
o81LECWqZd6/5QUySJlkug/7EbYl77A/IvgH8c6jepRnTFs4TOZKEGu4JmKL7FoP
jJDfQVxlAZjbdsO1Y6wFs7WztHe+VutSpM8YZ/LKLVO/0IHNylS5ciH+hAwyUZ9A
IcGI5bsWVzUUbkgFPuNS51Ki4ApdlBxnLLzaqOoFjIgvhDITcAycNXEybuTkaAKN
qcqj/XYhH/w2rLj7WXt1L7xNdpQrYhfZjs+cbQBpX/tOe55T
-----END CERTIFICATE-----
Generated at Wed Apr 30 18:47:43 2025 by rpki-client