Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/860iOdnZ3ujd4k-Ppx5keZ7ibno.roa
File: 860iOdnZ3ujd4k-Ppx5keZ7ibno.roa (raw, json)
Hash identifier: MkmI5QVgpxKAOiDoh0j95CnujX935Ti+UcVqbkFBXe0=
Subject key identifier: F3:AD:22:39:D9:D9:DE:E8:DD:E2:4F:8F:A7:1E:64:79:9E:E2:6E:7A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185E78AD648238E3B53D35F852B37C06240
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/860iOdnZ3ujd4k-Ppx5keZ7ibno.roa
Signing time: Wed 25 Jan 2023 06:08:33 +0000
ROA not before: Wed 25 Jan 2023 06:08:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e7:8a:d6:48:23:8e:3b:53:d3:5f:85:2b:37:c0:62:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 25 06:08:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3ad2239d9d9dee8dde24f8fa71e64799ee26e7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0d:ff:49:7e:5d:20:c0:ba:eb:81:f5:6b:fc:
60:56:fa:fd:f4:24:1d:ba:dd:38:8e:27:fa:12:80:
2e:cd:a7:5a:86:3e:c8:16:53:bd:c3:ab:c4:e6:d9:
32:1a:ed:71:6c:ce:88:9d:36:33:69:14:b8:e0:2e:
1a:ed:3d:b1:18:68:c3:87:17:ae:33:70:81:0a:79:
27:24:a2:62:cd:fc:03:96:37:c1:f7:5e:c2:57:a0:
1d:d1:d2:77:70:f4:53:e5:88:9a:5b:1f:3c:44:9a:
0d:53:8b:32:26:33:c3:84:1f:e1:75:61:2d:84:ee:
21:4e:54:6d:16:fe:41:11:ec:2f:5c:67:57:a0:63:
28:d8:82:0c:3c:6d:2a:ee:7a:6f:c7:2b:7b:9b:06:
19:f0:bb:f9:29:ef:2e:36:c6:ce:c3:a1:8d:fb:19:
ea:2a:be:83:4f:4a:c7:be:bd:66:62:c3:04:b7:fa:
59:9e:44:6f:e5:e0:25:bd:5f:5c:68:9c:3a:76:5b:
94:89:6d:5e:77:51:49:96:3b:e5:fa:54:8d:e0:88:
dd:2b:0d:80:67:a8:d4:9b:03:f9:10:51:06:87:b5:
73:90:9a:9c:08:78:e1:c0:b5:c6:33:d3:1f:40:b2:
d6:93:65:9c:c0:8e:f1:b0:f2:99:4b:46:00:f4:7f:
ee:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:AD:22:39:D9:D9:DE:E8:DD:E2:4F:8F:A7:1E:64:79:9E:E2:6E:7A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/860iOdnZ3ujd4k-Ppx5keZ7ibno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
26:f1:ec:b6:58:12:bc:2a:4b:72:90:2b:d0:09:3b:10:c4:ad:
5f:85:ba:67:d4:d6:04:c2:8a:d2:0e:61:87:d4:79:5f:f3:7c:
f8:4c:a1:4f:5f:68:6c:37:ca:2a:07:0d:da:6c:f1:c9:0d:eb:
b6:e1:f5:af:59:12:2f:2f:44:ac:c8:7b:59:2d:28:14:c1:54:
10:4e:57:74:cc:ae:77:86:1e:2c:e5:8b:82:29:51:d3:84:d3:
39:ef:3f:4a:ef:90:f7:d6:7d:1b:16:f6:3b:d0:4d:14:c3:3f:
8e:42:f5:54:2d:38:b1:64:16:58:d6:d7:06:a9:10:2d:bb:b8:
1f:59:69:a2:7c:5e:44:f4:66:77:d0:89:a5:72:db:b3:5c:e5:
49:7a:2a:99:e3:76:0b:b0:9a:20:20:db:22:6f:f5:2f:ff:8f:
f8:4f:a2:d2:01:3a:34:7c:03:f4:a4:a2:5c:5d:36:68:8b:1d:
99:10:a3:be:f9:dc:33:3b:0f:f2:10:93:e4:84:ff:b8:cb:81:
f9:1e:40:bf:a1:98:20:2f:94:e7:dd:8a:da:51:c4:8a:76:a7:
88:82:0e:ed:b4:b2:fb:84:e7:24:fd:40:b9:bc:af:30:f3:d8:
c0:d7:e3:14:db:63:73:d1:ee:8d:18:d6:00:19:50:dc:c1:99:
0d:ab:9a:e8
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYXnitZII447U9NfhSs3wGJAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTI1MDYwODMzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmM2FkMjIzOWQ5ZDlkZWU4ZGRlMjRmOGZhNzFlNjQ3OTllZTI2ZTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQ3/SX5dIMC664H1a/xgVvr99CQd
ut04jif6EoAuzadahj7IFlO9w6vE5tkyGu1xbM6InTYzaRS44C4a7T2xGGjDhxeu
M3CBCnknJKJizfwDljfB917CV6Ad0dJ3cPRT5YiaWx88RJoNU4syJjPDhB/hdWEt
hO4hTlRtFv5BEewvXGdXoGMo2IIMPG0q7npvxyt7mwYZ8Lv5Ke8uNsbOw6GN+xnq
Kr6DT0rHvr1mYsMEt/pZnkRv5eAlvV9caJw6dluUiW1ed1FJljvl+lSN4IjdKw2A
Z6jUmwP5EFEGh7VzkJqcCHjhwLXGM9MfQLLWk2WcwI7xsPKZS0YA9H/uhQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPOtIjnZ2d7o3eJPj6ceZHme4m56MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvODYwaU9kblozdWpkNGstUHB4NWtlWjdpYm5vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACbx7LZYErwqS3KQK9AJ
OxDErV+FumfU1gTCitIOYYfUeV/zfPhMoU9faGw3yioHDdps8ckN67bh9a9ZEi8v
RKzIe1ktKBTBVBBOV3TMrneGHizli4IpUdOE0znvP0rvkPfWfRsW9jvQTRTDP45C
9VQtOLFkFljW1wapEC27uB9ZaaJ8XkT0ZnfQiaVy27Nc5Ul6KpnjdguwmiAg2yJv
9S//j/hPotIBOjR8A/SkolxdNmiLHZkQo7753DM7D/IQk+SE/7jLgfkeQL+hmCAv
lOfditpRxIp2p4iCDu20svuE5yT9QLm8rzDz2MDX4xTbY3PR7o0Y1gAZUNzBmQ2r
mug=
-----END CERTIFICATE-----
Generated at Fri May 2 11:58:30 2025 by rpki-client