Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/654xOp0EE9-B9K796-fnbK_Xchw.roa
File: 654xOp0EE9-B9K796-fnbK_Xchw.roa (raw, json)
Hash identifier: yjPcGEyn1MuzesV3LLu7M+gwKnWHI63Mjj/7A4/MsrU=
Subject key identifier: EB:9E:31:3A:9D:04:13:DF:81:F4:AE:FD:EB:E7:E7:6C:AF:D7:72:1C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183C985819C2937538422A31596DD7D4E81
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/654xOp0EE9-B9K796-fnbK_Xchw.roa
Signing time: Wed 12 Oct 2022 00:08:33 +0000
ROA not before: Wed 12 Oct 2022 00:08:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:183:c981:b739/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c9:85:81:9c:29:37:53:84:22:a3:15:96:dd:7d:4e:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 12 00:08:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eb9e313a9d0413df81f4aefdebe7e76cafd7721c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a1:5b:b3:57:a7:44:a6:9a:9a:01:b2:d7:8b:
9c:d8:15:33:14:9e:c5:b3:8f:c3:32:6e:90:ab:1b:
a6:92:47:7d:d6:69:79:b4:e1:66:94:b5:4e:d1:34:
6d:4e:b5:bc:19:95:19:a4:7c:34:8d:f3:a2:c3:c6:
eb:05:d6:5d:b4:3e:d3:2f:83:23:20:a1:64:0a:2a:
60:1b:f5:36:ec:1e:92:4f:c4:0e:93:8b:ad:76:1d:
3b:f2:d2:59:60:12:c9:bc:f9:78:af:98:42:87:a7:
8c:43:62:31:ef:e3:b1:08:ec:51:92:69:42:58:ef:
48:89:6b:fb:9f:45:a9:6b:2d:44:6e:ca:0a:32:23:
dc:c4:cf:bd:2e:f9:74:72:6f:eb:d4:c4:f1:29:af:
68:7e:c5:aa:ef:b3:43:ea:e2:d7:82:fb:11:d2:ff:
7a:45:a5:a8:90:ed:e0:1b:09:43:b0:be:0d:00:0f:
23:84:13:07:07:b8:d0:7b:5a:3c:f5:76:a6:81:8f:
cc:04:45:c4:ac:bf:6a:02:9c:a1:86:4f:6e:5d:9d:
7b:e9:02:02:de:56:9a:e6:56:7e:bc:40:d2:1b:e5:
ad:70:3f:0c:22:12:62:0e:f3:3c:04:87:d1:fa:7f:
cd:b5:d1:a3:69:66:8b:af:dc:1a:35:8e:1c:f4:36:
e2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:9E:31:3A:9D:04:13:DF:81:F4:AE:FD:EB:E7:E7:6C:AF:D7:72:1C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/654xOp0EE9-B9K796-fnbK_Xchw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b4:51:b3:b9:9e:d6:46:55:5c:54:1d:be:6f:79:03:14:51:e2:
f6:52:04:21:b9:27:f0:6a:10:62:3d:fb:03:90:87:f5:76:99:
48:16:da:80:ab:26:b7:90:7f:20:1a:63:cb:44:78:b8:82:38:
19:1b:0f:63:20:16:af:cb:00:dc:54:a6:f7:c2:71:00:3b:85:
a6:f0:8b:60:c5:a6:d8:aa:37:04:c9:02:6e:1f:78:3d:bc:de:
4c:67:da:88:df:1d:5f:b3:9b:08:90:5a:d7:58:58:92:b7:6d:
08:f8:93:ce:c1:d2:27:1c:d1:c3:83:1f:85:f1:8c:e8:5f:b8:
8b:37:01:b8:b3:d3:05:46:00:1c:3f:7d:08:06:39:74:31:3a:
12:90:d3:05:68:5e:c1:27:ba:1e:a6:0a:38:2d:62:a4:e6:a0:
85:69:5a:1c:f7:ff:39:76:45:78:ad:c4:0d:b8:fc:8a:eb:65:
ce:cd:19:2e:de:7f:f5:bb:04:c7:74:6a:4d:1d:51:fa:b7:c3:
1f:7e:77:64:64:d2:fa:54:21:17:4d:e4:aa:71:4c:6b:92:d9:
f6:d8:ae:91:e2:38:fa:a9:1e:a7:af:2b:da:d1:e4:a7:0f:73:
4b:d2:68:6f:e2:5f:30:74:f3:88:2d:83:8c:d5:3c:0f:8f:08:
47:a1:28:c9
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYPJhYGcKTdThCKjFZbdfU6BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMDEyMDAwODMzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjllMzEzYTlkMDQxM2RmODFmNGFlZmRlYmU3ZTc2Y2FmZDc3MjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6Fbs1enRKaamgGy14uc2BUzFJ7F
s4/DMm6Qqxumkkd91ml5tOFmlLVO0TRtTrW8GZUZpHw0jfOiw8brBdZdtD7TL4Mj
IKFkCipgG/U27B6ST8QOk4utdh078tJZYBLJvPl4r5hCh6eMQ2Ix7+OxCOxRkmlC
WO9IiWv7n0Wpay1EbsoKMiPcxM+9Lvl0cm/r1MTxKa9ofsWq77ND6uLXgvsR0v96
RaWokO3gGwlDsL4NAA8jhBMHB7jQe1o89XamgY/MBEXErL9qApyhhk9uXZ176QIC
3laa5lZ+vEDSG+WtcD8MIhJiDvM8BIfR+n/NtdGjaWaLr9waNY4c9DbiNwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOueMTqdBBPfgfSu/evn52yv13IcMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvNjU0eE9wMEVFOS1COUs3OTYtZm5iS19YY2h3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBALRRs7me1kZVXFQdvm95
AxRR4vZSBCG5J/BqEGI9+wOQh/V2mUgW2oCrJreQfyAaY8tEeLiCOBkbD2MgFq/L
ANxUpvfCcQA7habwi2DFptiqNwTJAm4feD283kxn2ojfHV+zmwiQWtdYWJK3bQj4
k87B0icc0cODH4XxjOhfuIs3Abiz0wVGABw/fQgGOXQxOhKQ0wVoXsEnuh6mCjgt
YqTmoIVpWhz3/zl2RXitxA24/IrrZc7NGS7ef/W7BMd0ak0dUfq3wx9+d2Rk0vpU
IRdN5KpxTGuS2fbYrpHiOPqpHqevK9rR5KcPc0vSaG/iXzB084gtg4zVPA+PCEeh
KMk=
-----END CERTIFICATE-----
Generated at Fri May 2 03:58:49 2025 by rpki-client