Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/602yb_lBkXRl3SlG2Gax9yDHrAI.roa
File: 602yb_lBkXRl3SlG2Gax9yDHrAI.roa (raw, json)
Hash identifier: aA5IVcYmB1cY8xOX2qXSnkgYNsHAfdcJ8+sMufrusUc=
Subject key identifier: EB:4D:B2:6F:F9:41:91:74:65:DD:29:46:D8:66:B1:F7:20:C7:AC:02
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01821850C7537088B39217D106C14AEF3D4C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/602yb_lBkXRl3SlG2Gax9yDHrAI.roa
Signing time: Tue 19 Jul 2022 21:15:23 +0000
ROA not before: Tue 19 Jul 2022 21:15:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:18:50:c7:53:70:88:b3:92:17:d1:06:c1:4a:ef:3d:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 19 21:15:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eb4db26ff941917465dd2946d866b1f720c7ac02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:00:71:5b:c8:28:40:5d:94:5a:8c:68:75:be:
e9:01:91:e9:20:db:85:4a:9c:f3:7f:eb:aa:8b:2c:
dc:36:d3:11:9e:ac:0a:5a:e1:88:0e:a1:de:21:f0:
09:f9:4a:2d:8b:b6:2a:f5:b9:3c:2d:14:b2:30:b4:
80:e1:65:5b:d8:4f:ba:a9:f7:bc:dd:36:6f:68:b6:
65:1e:95:e4:9b:5e:b3:23:e3:d3:77:0a:75:00:49:
7e:07:38:e3:ca:83:53:c4:4c:d2:5c:98:6b:39:43:
4c:a0:18:6a:af:fd:87:18:e6:59:08:2a:a0:84:79:
8e:c3:ad:dc:e3:78:94:ab:ce:ba:06:4a:93:8c:98:
e1:96:1c:62:13:f1:f5:22:68:01:59:c8:c8:68:2a:
be:3e:1a:89:fc:92:3c:50:79:1e:ea:31:1f:3f:41:
82:e6:af:96:05:85:0d:d1:06:8f:26:82:5b:fd:c6:
10:ca:ca:e6:4f:ff:39:16:89:da:ac:9f:f5:c4:5c:
27:0f:ec:f6:52:1d:54:c4:6b:aa:57:0e:90:cf:31:
21:46:71:cc:a7:93:dc:85:18:e8:08:b8:0a:1d:b2:
6c:63:20:ec:64:51:d9:98:23:a3:ed:44:19:4c:f3:
5c:b3:95:e4:7c:47:6f:2b:d1:32:46:7d:25:df:af:
dd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:4D:B2:6F:F9:41:91:74:65:DD:29:46:D8:66:B1:F7:20:C7:AC:02
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/602yb_lBkXRl3SlG2Gax9yDHrAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
18:bf:fd:1a:64:9a:a8:0a:37:bf:49:4e:2f:e3:d4:5d:b3:96:
cd:1a:1c:1c:9d:11:34:53:ab:9f:7d:f5:c0:a7:09:09:d9:b6:
a1:99:70:8f:e4:89:98:18:7e:ff:16:10:5b:46:e9:29:89:2b:
c0:85:9d:02:8c:82:73:ea:46:db:96:78:08:a0:fd:0b:9e:83:
f6:b4:1b:f9:dd:ea:bc:9b:93:e2:95:91:73:de:d0:19:04:51:
d4:fc:ac:4f:35:d8:6d:3d:c7:f8:18:34:fa:ed:cc:2c:c7:f5:
f8:d6:85:c0:6f:67:6e:79:08:0d:5a:a0:49:d4:53:34:72:db:
8e:63:6f:50:5b:81:11:5d:3f:4a:05:29:45:f5:39:da:ed:d7:
f6:8b:5b:35:93:9c:10:9a:c7:89:6e:6e:60:02:f7:7a:47:81:
43:50:58:ed:8f:dc:97:52:24:34:5d:cf:87:ad:de:39:09:a8:
e1:94:62:cb:95:d1:60:b1:ff:a4:d1:70:e2:8b:a9:b0:12:59:
db:6c:d0:aa:79:26:8c:14:08:71:4b:93:85:1e:fb:8e:40:89:
f9:3d:2f:36:41:c6:e9:12:4e:06:2b:d4:84:1c:d6:0b:00:62:
1b:16:00:07:a9:33:db:98:c0:fe:c5:21:f6:54:2b:c5:8f:4c:
1c:2c:4a:cd
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYIYUMdTcIizkhfRBsFK7z1MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwNzE5MjExNTIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjRkYjI2ZmY5NDE5MTc0NjVkZDI5NDZkODY2YjFmNzIwYzdhYzAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgBxW8goQF2UWoxodb7pAZHpINuF
Spzzf+uqiyzcNtMRnqwKWuGIDqHeIfAJ+Uoti7Yq9bk8LRSyMLSA4WVb2E+6qfe8
3TZvaLZlHpXkm16zI+PTdwp1AEl+BzjjyoNTxEzSXJhrOUNMoBhqr/2HGOZZCCqg
hHmOw63c43iUq866BkqTjJjhlhxiE/H1ImgBWcjIaCq+PhqJ/JI8UHke6jEfP0GC
5q+WBYUN0QaPJoJb/cYQysrmT/85FonarJ/1xFwnD+z2Uh1UxGuqVw6QzzEhRnHM
p5PchRjoCLgKHbJsYyDsZFHZmCOj7UQZTPNcs5XkfEdvK9EyRn0l36/dZQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOtNsm/5QZF0Zd0pRthmsfcgx6wCMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvNjAyeWJfbEJrWFJsM1NsRzJHYXg5eURIckFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABi//RpkmqgKN79JTi/j
1F2zls0aHBydETRTq5999cCnCQnZtqGZcI/kiZgYfv8WEFtG6SmJK8CFnQKMgnPq
RtuWeAig/Queg/a0G/nd6rybk+KVkXPe0BkEUdT8rE812G09x/gYNPrtzCzH9fjW
hcBvZ255CA1aoEnUUzRy245jb1BbgRFdP0oFKUX1Odrt1/aLWzWTnBCax4lubmAC
93pHgUNQWO2P3JdSJDRdz4et3jkJqOGUYsuV0WCx/6TRcOKLqbASWdts0Kp5JowU
CHFLk4Ue+45Aifk9LzZBxukSTgYr1IQc1gsAYhsWAAepM9uYwP7FIfZUK8WPTBws
Ss0=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:26 2025 by rpki-client