Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/62cFD43CBZ5pT9PQm7SvdYJlQD8.roa
File: 62cFD43CBZ5pT9PQm7SvdYJlQD8.roa (raw, json)
Hash identifier: h1YCxTrh0K+MqSaa8esbHeu9bLV5leCcvahFOX78SrY=
Subject key identifier: EB:67:05:0F:8D:C2:05:9E:69:4F:D3:D0:9B:B4:AF:75:82:65:40:3F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184839274B1B0E331632CEB4B002DB17637
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/62cFD43CBZ5pT9PQm7SvdYJlQD8.roa
Signing time: Thu 17 Nov 2022 03:12:04 +0000
ROA not before: Thu 17 Nov 2022 03:12:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
2001:67c:64:ffff:0:184:75cf:c8d9/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:83:92:74:b1:b0:e3:31:63:2c:eb:4b:00:2d:b1:76:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 17 03:12:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eb67050f8dc2059e694fd3d09bb4af758265403f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3a:5f:60:2d:d3:15:44:08:82:9e:2e:33:68:
5c:b8:c3:28:ad:17:9e:12:ac:31:8d:fb:f7:d5:88:
77:0e:9f:d9:36:fe:a8:c5:5d:58:64:c5:4a:72:47:
ea:4d:03:d3:f6:47:c9:55:df:16:c0:b5:d9:fe:ae:
a1:1e:58:e0:a0:6c:e5:12:49:9d:c6:e8:50:74:65:
41:dc:c9:0a:18:17:58:56:6c:cc:4c:13:38:f9:75:
80:da:93:dc:5c:54:d5:cc:b0:b2:a8:be:2e:ac:f6:
3a:15:5b:4c:c9:e6:24:29:1f:7a:6f:6d:82:f2:09:
4f:66:9c:fe:a1:63:58:ce:f5:69:3e:f7:0c:2d:a3:
53:f1:47:ae:f3:d7:2b:0f:b1:13:e7:f6:6c:d8:f9:
7d:31:b2:49:27:53:27:73:c4:3d:7b:57:bc:d0:34:
67:e8:79:17:20:78:36:64:e2:76:2d:bb:2c:43:64:
49:1d:51:19:e7:01:fa:6a:81:5a:74:f1:fa:09:d9:
3c:80:1f:97:03:d2:72:51:13:13:cc:88:c3:13:25:
77:f7:c8:3a:45:7d:49:28:5b:e0:3a:6c:58:ec:a5:
95:9c:4b:01:f7:c9:e2:72:b4:f6:cb:be:44:2c:cb:
41:49:5b:32:64:59:c5:2f:66:6f:98:d1:e7:e7:c9:
31:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:67:05:0F:8D:C2:05:9E:69:4F:D3:D0:9B:B4:AF:75:82:65:40:3F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/62cFD43CBZ5pT9PQm7SvdYJlQD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
12:92:ad:aa:e1:3a:2b:6d:25:0c:47:ab:0e:dd:4d:30:9e:6b:
10:1c:87:fe:78:d2:cc:ba:c7:82:95:59:41:84:30:bf:9e:3f:
c6:33:a6:0d:02:3c:21:43:61:99:d0:ab:51:1a:1f:e0:66:53:
5d:56:03:8e:96:80:6b:67:60:b4:df:30:ef:0e:db:bc:fb:a7:
27:bf:e7:e0:40:16:63:92:bf:0b:3e:4e:06:c8:9e:7b:0c:e6:
66:cf:f7:5e:37:81:3c:ca:d0:8d:ad:d2:53:af:28:72:41:64:
7f:7d:71:0e:87:73:51:fe:67:9d:0d:e7:0f:a5:c3:fb:e0:be:
dd:bd:c0:12:55:90:56:c6:0c:55:9d:ef:5a:23:39:6f:28:d2:
17:21:b0:d7:a3:76:50:fc:cf:c9:c6:2b:fb:00:b3:3a:98:65:
fd:59:d2:dd:c5:27:98:28:d9:20:1e:73:e1:c5:b6:5a:bb:ef:
46:53:bf:0e:8b:1c:62:20:59:fd:da:96:b6:da:e8:1f:6a:7f:
d6:1e:4a:7c:1a:bf:5e:68:c8:be:f0:82:b8:0c:c2:61:02:66:
1b:5d:29:84:a0:3e:b7:c2:d4:05:53:69:9c:ad:4a:f3:d1:31:
6f:98:5d:4e:84:2c:93:72:9e:34:b4:66:95:cd:b5:67:0f:dd:
c7:2b:12:15
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYSDknSxsOMxYyzrSwAtsXY3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMTE3MDMxMjA0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjY3MDUwZjhkYzIwNTllNjk0ZmQzZDA5YmI0YWY3NTgyNjU0MDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTpfYC3TFUQIgp4uM2hcuMMorRee
Eqwxjfv31Yh3Dp/ZNv6oxV1YZMVKckfqTQPT9kfJVd8WwLXZ/q6hHljgoGzlEkmd
xuhQdGVB3MkKGBdYVmzMTBM4+XWA2pPcXFTVzLCyqL4urPY6FVtMyeYkKR96b22C
8glPZpz+oWNYzvVpPvcMLaNT8Ueu89crD7ET5/Zs2Pl9MbJJJ1Mnc8Q9e1e80DRn
6HkXIHg2ZOJ2LbssQ2RJHVEZ5wH6aoFadPH6Cdk8gB+XA9JyURMTzIjDEyV398g6
RX1JKFvgOmxY7KWVnEsB98nicrT2y75ELMtBSVsyZFnFL2ZvmNHn58kx0wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOtnBQ+NwgWeaU/T0Ju0r3WCZUA/MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvNjJjRkQ0M0NCWjVwVDlQUW03U3ZkWUpsUUQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABKSrarhOittJQxHqw7d
TTCeaxAch/540sy6x4KVWUGEML+eP8Yzpg0CPCFDYZnQq1EaH+BmU11WA46WgGtn
YLTfMO8O27z7pye/5+BAFmOSvws+TgbInnsM5mbP9143gTzK0I2t0lOvKHJBZH99
cQ6Hc1H+Z50N5w+lw/vgvt29wBJVkFbGDFWd71ojOW8o0hchsNejdlD8z8nGK/sA
szqYZf1Z0t3FJ5go2SAec+HFtlq770ZTvw6LHGIgWf3alrba6B9qf9YeSnwav15o
yL7wgrgMwmECZhtdKYSgPrfC1AVTaZytSvPRMW+YXU6ELJNynjS0ZpXNtWcP3ccr
EhU=
-----END CERTIFICATE-----
Generated at Fri May 2 16:47:36 2025 by rpki-client