Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/64_rxqPf2ysew9jv2FeqtNCctR8.roa
File: 64_rxqPf2ysew9jv2FeqtNCctR8.roa (raw, json)
Hash identifier: C1jsf9OslVHjUfn9gv2W7Q7+rykXa7E3xA5OteHYy/E=
Subject key identifier: EB:8F:EB:C6:A3:DF:DB:2B:1E:C3:D8:EF:D8:57:AA:B4:D0:9C:B5:1F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01882AB439E1D85B6F9C95E3CA8EE79570F2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/64_rxqPf2ysew9jv2FeqtNCctR8.roa
Signing time: Wed 17 May 2023 17:13:54 +0000
ROA not before: Wed 17 May 2023 17:13:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2a:b4:39:e1:d8:5b:6f:9c:95:e3:ca:8e:e7:95:70:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 17 17:13:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb8febc6a3dfdb2b1ec3d8efd857aab4d09cb51f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2f:97:dd:44:88:e2:fc:86:49:bb:5d:0b:ed:
e2:94:25:92:49:57:b9:dc:00:d4:f8:20:30:7e:dd:
44:4c:73:b1:48:92:84:66:28:51:69:d3:e5:a1:ea:
88:9b:2b:37:b3:f0:76:91:96:96:4c:62:ed:05:88:
55:09:19:41:9e:31:47:44:b4:4e:7b:53:0d:2e:d9:
74:5f:d0:8a:d8:0c:16:3f:c3:6d:d1:ac:92:2e:11:
fd:6f:b5:aa:7a:5d:a6:1c:ec:c2:81:3c:19:48:6f:
97:dc:13:e8:4d:00:4e:04:7f:65:a0:b9:54:0e:12:
2a:b9:1b:0a:dc:74:11:da:e7:9b:20:23:a6:cd:25:
2d:57:ec:0f:e1:ab:07:16:06:be:d9:b3:d8:ee:4b:
1a:20:9c:39:09:54:6f:cd:fd:89:04:f2:c9:03:b5:
e3:2b:c7:26:b5:1a:c3:cc:ad:d2:7c:af:19:3c:28:
f1:1c:44:b8:99:bb:f0:4e:36:07:35:b1:a0:d0:54:
17:e4:04:b2:2a:98:fb:91:43:4f:d7:6e:ce:83:7f:
ff:d3:c3:82:fb:bf:29:ad:82:84:28:2b:22:ad:94:
6e:ef:4c:26:cc:ee:0f:9c:9d:02:31:5f:9c:56:07:
98:29:9c:84:bb:06:4e:62:65:57:fc:98:a5:81:47:
7e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:8F:EB:C6:A3:DF:DB:2B:1E:C3:D8:EF:D8:57:AA:B4:D0:9C:B5:1F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/64_rxqPf2ysew9jv2FeqtNCctR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7f:b2:48:eb:a1:0b:f5:52:d3:e8:ce:5d:51:a4:f8:10:b3:a4:
fd:54:b7:be:20:d1:b8:51:4a:4f:7a:83:3c:79:ec:5f:76:73:
62:2c:5f:e9:6e:f7:be:f7:75:e8:1b:5a:fc:48:88:fa:7a:d7:
e5:6e:be:11:78:14:7a:1d:bd:ec:4d:49:96:94:83:09:e2:74:
fb:69:2d:c8:df:e2:ed:af:ae:5c:b3:4b:f0:57:87:f2:0b:0c:
3d:aa:b1:83:5b:43:e6:99:6e:53:e0:4e:95:85:fa:83:7a:bf:
6b:8e:32:91:96:a4:89:c4:bf:5d:2f:ac:a9:ea:ac:de:05:e1:
07:3a:14:45:3b:42:0f:50:47:5d:44:21:7a:60:a7:ce:b3:a3:
43:c5:a4:37:d3:c8:8d:60:d8:7f:be:d9:08:9a:8b:23:4d:3f:
52:ce:f9:32:5b:c5:7f:62:ea:e8:91:46:d2:c2:b4:2c:b9:a4:
d0:86:87:0c:5b:33:b6:e5:9f:1e:fc:d8:07:8a:b7:a3:b5:c0:
d4:dc:1d:4b:98:e5:b7:04:ae:b1:a5:ab:d3:1e:30:bb:bc:a4:
fe:f2:b8:2b:9d:67:cc:f6:6c:7f:f7:64:b2:54:06:fa:98:0d:
ba:46:2e:07:26:cb:71:2f:87:d7:f3:bb:62:a3:12:a5:e9:42:
20:6f:1d:c9
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYgqtDnh2FtvnJXjyo7nlXDyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTE3MTcxMzU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjhmZWJjNmEzZGZkYjJiMWVjM2Q4ZWZkODU3YWFiNGQwOWNiNTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqS+X3USI4vyGSbtdC+3ilCWSSVe5
3ADU+CAwft1ETHOxSJKEZihRadPloeqImys3s/B2kZaWTGLtBYhVCRlBnjFHRLRO
e1MNLtl0X9CK2AwWP8Nt0aySLhH9b7Wqel2mHOzCgTwZSG+X3BPoTQBOBH9loLlU
DhIquRsK3HQR2uebICOmzSUtV+wP4asHFga+2bPY7ksaIJw5CVRvzf2JBPLJA7Xj
K8cmtRrDzK3SfK8ZPCjxHES4mbvwTjYHNbGg0FQX5ASyKpj7kUNP127Og3//08OC
+78prYKEKCsirZRu70wmzO4PnJ0CMV+cVgeYKZyEuwZOYmVX/JilgUd+ZQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOuP68aj39srHsPY79hXqrTQnLUfMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvNjRfcnhxUGYyeXNldzlqdjJGZXF0TkNjdFI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAH+ySOuhC/VS0+jOXVGk
+BCzpP1Ut74g0bhRSk96gzx57F92c2IsX+lu9773degbWvxIiPp61+VuvhF4FHod
vexNSZaUgwnidPtpLcjf4u2vrlyzS/BXh/ILDD2qsYNbQ+aZblPgTpWF+oN6v2uO
MpGWpInEv10vrKnqrN4F4Qc6FEU7Qg9QR11EIXpgp86zo0PFpDfTyI1g2H++2Qia
iyNNP1LO+TJbxX9i6uiRRtLCtCy5pNCGhwxbM7blnx782AeKt6O1wNTcHUuY5bcE
rrGlq9MeMLu8pP7yuCudZ8z2bH/3ZLJUBvqYDbpGLgcmy3Evh9fzu2KjEqXpQiBv
Hck=
-----END CERTIFICATE-----
Generated at Sat May 3 08:09:57 2025 by rpki-client