Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/58fM88_V-snY7d6XIcCNBzwOv2o.roa
File: 58fM88_V-snY7d6XIcCNBzwOv2o.roa (raw, json)
Hash identifier: tXoiIyM1oUFuxwiPZ/OahyPx9kExf62crTWovccZeso=
Subject key identifier: E7:C7:CC:F3:CF:D5:FA:C9:D8:ED:DE:97:21:C0:8D:07:3C:0E:BF:6A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189BBF75DD629F783CBD11AC88A5EB94790
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/58fM88_V-snY7d6XIcCNBzwOv2o.roa
Signing time: Thu 03 Aug 2023 15:14:57 +0000
ROA not before: Thu 03 Aug 2023 15:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:bb:f7:5d:d6:29:f7:83:cb:d1:1a:c8:8a:5e:b9:47:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 3 15:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7c7ccf3cfd5fac9d8edde9721c08d073c0ebf6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1a:37:96:9d:44:23:c4:ed:17:a2:fc:8a:02:
f9:12:e7:b7:06:45:56:5e:19:21:d7:b4:4e:2b:60:
b8:42:23:d3:2d:a3:1c:5a:3f:7a:0d:b0:8a:9f:2a:
c6:15:10:86:ca:f3:b7:8e:54:f0:f9:da:f6:59:bc:
ac:2e:4c:13:ca:2c:e6:5e:72:17:7d:70:d5:f0:18:
33:5f:bb:55:ca:ac:cd:db:9c:ae:9a:f9:45:6f:c8:
e4:74:c7:7c:28:29:38:c2:e7:6e:3e:36:ce:de:65:
7f:90:60:61:87:d0:32:de:7a:63:cc:b6:0e:39:14:
6c:69:c8:6d:8b:52:a7:cc:f4:01:6e:92:c0:98:77:
cb:39:51:eb:da:39:6d:8b:a7:e5:91:18:10:af:9a:
65:fb:64:56:68:8f:9e:fc:76:0e:5e:54:31:57:43:
f1:c7:ec:de:21:d5:a1:98:68:54:00:72:70:55:0f:
8f:41:75:1a:5a:7a:55:02:13:f2:14:c8:d0:65:9b:
60:c7:c9:93:e9:49:c7:21:27:f7:45:d3:24:da:28:
ea:3e:9a:3a:b2:88:18:e6:38:6a:85:2e:fe:8a:2d:
31:03:80:24:4d:7a:9a:b1:09:ad:e1:0e:ca:09:6f:
a2:73:c2:23:f3:a0:aa:23:44:5b:0b:74:dd:61:1d:
d4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C7:CC:F3:CF:D5:FA:C9:D8:ED:DE:97:21:C0:8D:07:3C:0E:BF:6A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/58fM88_V-snY7d6XIcCNBzwOv2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9a:30:39:e2:a9:82:73:10:ed:41:87:2e:3a:b1:a1:e3:36:89:
62:9d:37:af:25:56:16:c4:6e:ab:f1:66:29:8a:2b:26:c4:02:
ea:cc:e4:32:0c:e9:b4:a9:a5:98:aa:8b:31:d4:64:a9:ff:27:
18:46:47:96:22:9f:c0:b1:13:fe:d2:36:2b:40:77:42:0d:ea:
3a:dc:c0:f1:97:f8:63:79:a2:e6:29:00:06:72:a4:f7:19:6d:
33:0a:1c:f4:1e:eb:4b:4b:99:90:94:fb:28:e7:c2:f5:0b:e1:
3c:d6:86:a8:02:9a:27:33:87:58:08:11:cd:01:a6:05:96:79:
6b:65:9d:c2:7c:a8:1c:ee:5d:79:60:30:8b:5e:92:e7:38:be:
de:84:db:03:82:14:42:da:3e:92:65:84:56:9d:eb:ac:52:e9:
5d:5e:0c:c4:47:1d:64:c9:25:ca:de:77:bf:04:d6:db:7e:6d:
2a:ed:23:78:23:27:8e:78:7a:0c:3a:a4:a9:95:ed:59:98:8e:
b3:1c:e6:c5:ac:4c:81:be:47:75:fe:e4:61:23:04:fc:34:bb:
83:b8:5c:6c:81:33:fe:ba:7a:41:48:e5:db:1f:38:bb:57:9a:
ed:3c:13:9e:80:0f:6e:38:35:dd:9b:a5:26:b1:76:bf:c5:8e:
96:43:cd:fe
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYm7913WKfeDy9EayIpeuUeQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODAzMTUxNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlN2M3Y2NmM2NmZDVmYWM5ZDhlZGRlOTcyMWMwOGQwNzNjMGViZjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxo3lp1EI8TtF6L8igL5Eue3BkVW
Xhkh17ROK2C4QiPTLaMcWj96DbCKnyrGFRCGyvO3jlTw+dr2WbysLkwTyizmXnIX
fXDV8BgzX7tVyqzN25yumvlFb8jkdMd8KCk4wuduPjbO3mV/kGBhh9Ay3npjzLYO
ORRsachti1KnzPQBbpLAmHfLOVHr2jlti6flkRgQr5pl+2RWaI+e/HYOXlQxV0Px
x+zeIdWhmGhUAHJwVQ+PQXUaWnpVAhPyFMjQZZtgx8mT6UnHISf3RdMk2ijqPpo6
sogY5jhqhS7+ii0xA4AkTXqasQmt4Q7KCW+ic8Ij86CqI0RbC3TdYR3UCQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOfHzPPP1frJ2O3elyHAjQc8Dr9qMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvNThmTTg4X1Ytc25ZN2Q2WEljQ05CendPdjJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJowOeKpgnMQ7UGHLjqx
oeM2iWKdN68lVhbEbqvxZimKKybEAurM5DIM6bSppZiqizHUZKn/JxhGR5Yin8Cx
E/7SNitAd0IN6jrcwPGX+GN5ouYpAAZypPcZbTMKHPQe60tLmZCU+yjnwvUL4TzW
hqgCmiczh1gIEc0BpgWWeWtlncJ8qBzuXXlgMItekuc4vt6E2wOCFELaPpJlhFad
66xS6V1eDMRHHWTJJcred78E1tt+bSrtI3gjJ454egw6pKmV7VmYjrMc5sWsTIG+
R3X+5GEjBPw0u4O4XGyBM/66ekFI5dsfOLtXmu08E56AD244Nd2bpSaxdr/FjpZD
zf4=
-----END CERTIFICATE-----
Generated at Fri May 2 06:05:51 2025 by rpki-client