Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/61gCnzQWES3Ds4liHFJ4nrmedBM.roa
File: 61gCnzQWES3Ds4liHFJ4nrmedBM.roa (raw, json)
Hash identifier: /nUh0QvPD5T3vgLa1NbocLcM6Kpwm3NXLwvhZxq5qLI=
Subject key identifier: EB:58:02:9F:34:16:11:2D:C3:B3:89:62:1C:52:78:9E:B9:9E:74:13
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185217FB61018991277FD8DCC9E27A71DCB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/61gCnzQWES3Ds4liHFJ4nrmedBM.roa
Signing time: Sat 17 Dec 2022 19:11:35 +0000
ROA not before: Sat 17 Dec 2022 19:11:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:21:7f:b6:10:18:99:12:77:fd:8d:cc:9e:27:a7:1d:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 17 19:11:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eb58029f3416112dc3b389621c52789eb99e7413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:61:40:98:72:8f:54:2e:a8:3c:11:32:33:35:
a9:14:3e:45:27:6d:c7:50:3b:15:f4:46:cc:9e:4f:
c5:f3:4f:4e:f3:58:63:ba:2f:cf:df:a1:56:42:e1:
e8:21:b6:36:67:cc:3a:d6:60:db:fe:cf:9c:f0:fe:
a9:22:87:ff:5d:40:60:5e:a3:59:7f:a9:34:de:76:
05:84:51:b2:0e:0a:87:8a:ad:23:ee:12:fc:14:8b:
49:45:e7:13:84:f0:0a:57:e7:67:2e:d4:70:5c:9b:
21:17:3d:42:c1:f5:b3:69:d1:42:1f:18:af:79:13:
82:67:ae:a9:99:5f:b7:f3:50:6a:88:a0:7e:24:62:
b9:04:8a:8c:d6:1a:ec:1b:32:b9:89:29:1f:3e:83:
db:9f:19:fc:5c:a2:dd:03:bb:f4:dd:8f:fe:0c:ca:
3f:9a:f3:24:4f:86:f3:1f:60:49:52:7f:66:7c:00:
a6:d7:d7:b7:2c:86:bc:5d:c7:83:24:42:74:4f:18:
d7:94:fd:12:27:86:7f:1b:b2:6b:6d:70:97:60:bd:
06:c0:33:e7:6f:43:28:38:fd:6d:22:39:22:aa:5c:
cf:d0:64:75:40:11:e1:72:4d:17:8b:be:7d:97:9e:
6a:f5:3c:7e:1b:a3:48:bf:9e:68:0b:41:f7:b2:1c:
e5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:58:02:9F:34:16:11:2D:C3:B3:89:62:1C:52:78:9E:B9:9E:74:13
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/61gCnzQWES3Ds4liHFJ4nrmedBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
13:fc:79:27:4d:bf:da:ba:0a:74:0d:af:a4:37:94:1b:38:08:
42:60:0c:0b:65:c5:b1:4e:4e:6b:b5:24:c5:36:13:21:79:51:
34:52:f9:13:34:97:2c:61:6f:25:85:16:65:ba:24:32:45:31:
da:1f:aa:26:1c:df:0a:a8:1e:99:71:be:ac:e0:d5:40:24:11:
0f:11:bd:5d:fd:b2:1c:54:87:c1:18:1a:a5:93:23:ad:1f:48:
90:01:03:54:c7:36:70:03:e0:32:8c:eb:5b:42:19:a1:30:32:
a9:1c:8f:55:c6:33:bc:8a:86:57:7e:ed:1c:f9:bc:5e:aa:0c:
6c:e6:7a:c3:c8:6b:d9:0d:ee:ec:b9:23:6e:d4:c7:bf:11:a0:
75:1f:9d:e6:77:57:c1:64:01:da:4a:31:82:2a:58:40:cd:f9:
6f:4f:47:0e:5d:45:10:ae:47:63:07:2f:c3:f3:bf:ab:66:37:
5f:16:69:14:e8:50:a3:48:e0:b5:20:d9:a6:78:43:07:07:d9:
bd:9f:2f:8e:96:36:b5:dd:f8:db:f7:fa:20:eb:d9:bc:40:41:
a5:ff:f7:a0:1d:f9:da:d4:8e:94:24:bd:3f:13:d4:a9:4c:80:
e5:cb:62:e8:bd:c8:04:e3:46:c4:45:00:c8:f9:4d:f6:a3:22:
b9:2a:70:fe
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYUhf7YQGJkSd/2NzJ4npx3LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjE3MTkxMTM1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjU4MDI5ZjM0MTYxMTJkYzNiMzg5NjIxYzUyNzg5ZWI5OWU3NDEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGFAmHKPVC6oPBEyMzWpFD5FJ23H
UDsV9EbMnk/F809O81hjui/P36FWQuHoIbY2Z8w61mDb/s+c8P6pIof/XUBgXqNZ
f6k03nYFhFGyDgqHiq0j7hL8FItJRecThPAKV+dnLtRwXJshFz1CwfWzadFCHxiv
eROCZ66pmV+381BqiKB+JGK5BIqM1hrsGzK5iSkfPoPbnxn8XKLdA7v03Y/+DMo/
mvMkT4bzH2BJUn9mfACm19e3LIa8XceDJEJ0TxjXlP0SJ4Z/G7JrbXCXYL0GwDPn
b0MoOP1tIjkiqlzP0GR1QBHhck0Xi759l55q9Tx+G6NIv55oC0H3shzlLwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOtYAp80FhEtw7OJYhxSeJ65nnQTMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvNjFnQ256UVdFUzNEczRsaUhGSjRucm1lZEJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABP8eSdNv9q6CnQNr6Q3
lBs4CEJgDAtlxbFOTmu1JMU2EyF5UTRS+RM0lyxhbyWFFmW6JDJFMdofqiYc3wqo
Hplxvqzg1UAkEQ8RvV39shxUh8EYGqWTI60fSJABA1THNnAD4DKM61tCGaEwMqkc
j1XGM7yKhld+7Rz5vF6qDGzmesPIa9kN7uy5I27Ux78RoHUfneZ3V8FkAdpKMYIq
WEDN+W9PRw5dRRCuR2MHL8Pzv6tmN18WaRToUKNI4LUg2aZ4QwcH2b2fL46WNrXd
+Nv3+iDr2bxAQaX/96Ad+drUjpQkvT8T1KlMgOXLYui9yATjRsRFAMj5TfajIrkq
cP4=
-----END CERTIFICATE-----
Generated at Wed Apr 30 19:49:30 2025 by rpki-client