Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5V3AtYI4nqC-_Ur-TbUpZh0rjCc.roa
File: 5V3AtYI4nqC-_Ur-TbUpZh0rjCc.roa (raw, json)
Hash identifier: YXvo5Xp11B5EcK+vyUlMmDKoX24ZSBdz2LXCBmCGMYg=
Subject key identifier: E5:5D:C0:B5:82:38:9E:A0:BE:FD:4A:FE:4D:B5:29:66:1D:2B:8C:27
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185361D5E359A1826BDB0F3446F555820A6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5V3AtYI4nqC-_Ur-TbUpZh0rjCc.roa
Signing time: Wed 21 Dec 2022 19:16:12 +0000
ROA not before: Wed 21 Dec 2022 19:16:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:36:1d:5e:35:9a:18:26:bd:b0:f3:44:6f:55:58:20:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 21 19:16:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e55dc0b582389ea0befd4afe4db529661d2b8c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ad:eb:84:63:fd:d3:64:02:89:bd:23:5f:70:
81:fc:da:6a:b3:dd:9c:86:a2:cc:4f:26:e6:18:e9:
cc:e2:26:eb:a1:6e:e6:97:88:37:f6:25:4d:e0:73:
bf:f1:19:c0:f5:d7:0e:80:85:fd:a4:cb:fd:9e:e5:
69:79:e2:6b:3c:d0:56:ae:43:f7:58:10:82:b4:35:
b7:63:57:df:94:da:81:05:f4:70:ad:ba:42:76:a8:
ab:4f:6c:ac:a1:73:6f:21:9f:59:83:3b:bf:8d:6b:
6c:81:11:12:98:c6:23:cb:2f:8d:91:b0:0b:79:db:
e0:21:a3:0b:3a:87:d8:59:68:b3:3e:32:e4:d7:f4:
b1:b3:97:50:a3:cc:e2:fb:c2:b5:94:6e:67:fa:d7:
d8:2b:fd:68:f8:6d:db:85:c2:4f:59:11:d7:c8:5d:
a8:ef:30:ea:51:68:85:ee:7f:b1:74:28:24:84:e1:
5a:0d:d7:03:9c:2f:0a:81:54:22:2c:6a:05:29:46:
3c:12:81:50:97:45:44:09:c6:c1:c0:ef:e8:2f:a6:
bc:af:51:85:5b:d4:0d:1b:fe:59:ff:6e:33:fa:f5:
97:fb:10:96:38:c2:0a:2a:84:60:55:35:b2:a4:27:
29:ad:4d:dc:d3:11:bd:d7:11:25:d9:cb:e2:8c:8f:
65:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:5D:C0:B5:82:38:9E:A0:BE:FD:4A:FE:4D:B5:29:66:1D:2B:8C:27
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5V3AtYI4nqC-_Ur-TbUpZh0rjCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
20:0d:a5:80:0e:47:8b:fc:2b:ad:8a:74:e5:77:1c:9d:a2:46:
c2:03:23:e8:0d:b9:26:5c:ab:61:34:ba:7b:79:18:35:ff:54:
ac:7d:c5:36:61:92:71:0f:1d:5a:a3:8e:68:67:89:62:30:63:
69:78:e4:c0:31:7b:90:3c:d0:9e:dd:b5:33:dc:78:9d:47:20:
ce:03:c2:84:24:e4:0a:55:90:f2:92:00:79:2d:7c:f2:76:56:
ba:33:ff:be:91:c1:47:e7:1f:a2:51:4b:93:ef:4a:12:bd:99:
4a:bf:57:3d:53:a1:23:ae:03:5a:4a:75:f7:26:1b:c1:77:bb:
74:10:0d:50:2c:16:a7:8a:45:19:07:84:de:1c:21:3c:af:f1:
10:d4:d8:53:4f:17:b4:a8:1a:b8:bd:0a:4a:6c:54:1e:27:61:
44:75:f2:af:b7:78:2b:10:17:11:9c:9c:ef:05:f6:7b:60:83:
39:61:ac:49:41:d2:c8:ad:f8:82:31:82:60:9a:fc:8b:4e:e7:
44:0e:85:fc:07:24:31:18:73:6a:72:78:65:8c:a9:0a:b3:70:
44:58:d2:53:84:19:14:9d:2e:5a:d1:f6:02:28:bd:28:ac:ea:
dc:b9:e4:c1:3f:ac:9d:4b:ac:20:f5:11:8b:50:51:8b:72:dc:
79:db:0f:09
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYU2HV41mhgmvbDzRG9VWCCmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjIxMTkxNjEyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTVkYzBiNTgyMzg5ZWEwYmVmZDRhZmU0ZGI1Mjk2NjFkMmI4YzI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAga3rhGP902QCib0jX3CB/Npqs92c
hqLMTybmGOnM4ibroW7ml4g39iVN4HO/8RnA9dcOgIX9pMv9nuVpeeJrPNBWrkP3
WBCCtDW3Y1fflNqBBfRwrbpCdqirT2ysoXNvIZ9Zgzu/jWtsgRESmMYjyy+NkbAL
edvgIaMLOofYWWizPjLk1/Sxs5dQo8zi+8K1lG5n+tfYK/1o+G3bhcJPWRHXyF2o
7zDqUWiF7n+xdCgkhOFaDdcDnC8KgVQiLGoFKUY8EoFQl0VECcbBwO/oL6a8r1GF
W9QNG/5Z/24z+vWX+xCWOMIKKoRgVTWypCcprU3c0xG91xEl2cvijI9l0QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOVdwLWCOJ6gvv1K/k21KWYdK4wnMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvNVYzQXRZSTRucUMtX1VyLVRiVXBaaDByakNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACANpYAOR4v8K62KdOV3
HJ2iRsIDI+gNuSZcq2E0unt5GDX/VKx9xTZhknEPHVqjjmhniWIwY2l45MAxe5A8
0J7dtTPceJ1HIM4DwoQk5ApVkPKSAHktfPJ2Vroz/76RwUfnH6JRS5PvShK9mUq/
Vz1ToSOuA1pKdfcmG8F3u3QQDVAsFqeKRRkHhN4cITyv8RDU2FNPF7SoGri9Ckps
VB4nYUR18q+3eCsQFxGcnO8F9ntggzlhrElB0sit+IIxgmCa/ItO50QOhfwHJDEY
c2pyeGWMqQqzcERY0lOEGRSdLlrR9gIovSis6ty55ME/rJ1LrCD1EYtQUYty3Hnb
Dwk=
-----END CERTIFICATE-----
Generated at Thu May 1 09:29:51 2025 by rpki-client