Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8_1WwIqTZCiAUulnIu_KZ8kCpQ0.roa
File: 8_1WwIqTZCiAUulnIu_KZ8kCpQ0.roa (raw, json)
Hash identifier: VfF34NGtC/Ho/BKlBGzV26sf8AsgeZhNXHpNnxybq0s=
Subject key identifier: F3:FD:56:C0:8A:93:64:28:80:52:E9:67:22:EF:CA:67:C9:02:A5:0D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187F23D21E4F613AF853E3F95A80D774DCE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8_1WwIqTZCiAUulnIu_KZ8kCpQ0.roa
Signing time: Sat 06 May 2023 18:05:05 +0000
ROA not before: Sat 06 May 2023 18:05:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:187:f23c:512d/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:f2:3d:21:e4:f6:13:af:85:3e:3f:95:a8:0d:77:4d:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 6 18:05:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3fd56c08a9364288052e96722efca67c902a50d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:72:71:6d:27:24:00:28:35:ef:d1:be:47:b8:
8d:82:ee:11:d5:33:bc:cc:43:1e:9c:5e:60:59:de:
a8:87:5e:a6:c8:5a:88:61:c4:c8:7b:6a:a7:87:d7:
81:0c:93:86:89:48:e6:b1:99:50:2b:52:f9:a2:e9:
e3:fa:b9:56:ed:c2:df:2c:fc:71:39:b0:9b:71:58:
27:9d:d7:d2:6b:63:a5:cd:61:b1:9a:1a:99:20:54:
d3:14:64:f7:04:8e:d5:fb:e2:cb:61:a9:ba:d2:93:
6e:f3:05:4f:8b:56:b6:65:4f:cd:28:8e:3a:a5:a7:
86:17:dc:c0:7d:57:54:02:d6:44:af:53:c8:5e:37:
3f:bc:d5:67:cc:98:b4:91:d9:79:bf:60:b6:84:1d:
e3:82:80:b6:1d:f2:e5:71:78:bc:52:98:8e:80:bd:
91:78:40:05:a8:45:6f:f4:03:de:04:8b:49:3c:7c:
d0:0f:02:3a:e8:a9:36:ce:ee:3f:63:5f:4f:f5:80:
86:54:82:44:01:c1:1a:ee:5d:61:e2:4c:45:c4:a7:
88:ad:46:14:b4:b7:74:57:ee:5f:1f:35:49:c9:59:
0a:5c:13:dc:47:18:5d:c5:fc:71:b1:35:5c:67:26:
fc:34:24:4a:5b:85:05:7f:b1:71:82:cc:1b:ae:48:
d9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:FD:56:C0:8A:93:64:28:80:52:E9:67:22:EF:CA:67:C9:02:A5:0D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8_1WwIqTZCiAUulnIu_KZ8kCpQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
59:84:a5:69:17:67:bb:b8:38:fb:e2:f6:69:66:8b:0e:7f:e7:
47:76:24:bf:62:c2:36:0e:2a:8a:a3:55:94:85:26:fb:84:ec:
ad:9b:dd:8d:48:17:a4:94:12:a0:5c:c0:75:10:08:d6:6a:f8:
2b:e0:52:f6:79:6c:1d:57:de:c1:f9:16:ab:4b:07:d3:ef:ff:
db:db:21:ce:e5:19:e9:77:64:f0:5d:2a:af:b2:20:1d:12:14:
18:08:9d:04:39:12:44:fc:67:a0:53:1f:fb:33:67:29:e1:33:
ff:12:83:29:18:ea:e8:67:3a:4c:2b:82:db:21:17:d0:8d:40:
97:54:3f:3e:7f:aa:0f:a0:a6:7a:9f:5c:5b:c6:60:2b:17:15:
a8:93:46:04:ac:03:25:c6:6d:d7:98:50:2d:2a:5f:e0:2f:f9:
72:05:08:50:3d:f6:ee:a2:7b:69:4d:92:ea:97:d5:06:cb:c6:
6b:55:e9:7a:84:5b:97:c2:a9:28:e3:0d:b6:d2:f7:2b:ed:22:
ef:9c:36:6a:a4:2e:0c:32:d0:c3:85:07:93:28:48:fa:e4:56:
57:ec:1c:39:c0:00:f7:a1:51:d5:f9:ca:3c:90:3e:d6:05:0a:
8a:48:98:de:f8:df:37:73:c7:52:19:00:0a:1a:33:45:82:37:
58:4c:be:91
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYfyPSHk9hOvhT4/lagNd03OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTA2MTgwNTA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmM2ZkNTZjMDhhOTM2NDI4ODA1MmU5NjcyMmVmY2E2N2M5MDJhNTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXJxbSckACg179G+R7iNgu4R1TO8
zEMenF5gWd6oh16myFqIYcTIe2qnh9eBDJOGiUjmsZlQK1L5ounj+rlW7cLfLPxx
ObCbcVgnndfSa2OlzWGxmhqZIFTTFGT3BI7V++LLYam60pNu8wVPi1a2ZU/NKI46
paeGF9zAfVdUAtZEr1PIXjc/vNVnzJi0kdl5v2C2hB3jgoC2HfLlcXi8UpiOgL2R
eEAFqEVv9APeBItJPHzQDwI66Kk2zu4/Y19P9YCGVIJEAcEa7l1h4kxFxKeIrUYU
tLd0V+5fHzVJyVkKXBPcRxhdxfxxsTVcZyb8NCRKW4UFf7FxgswbrkjZdQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPP9VsCKk2QogFLpZyLvymfJAqUNMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvOF8xV3dJcVRaQ2lBVXVsbkl1X0taOGtDcFEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFmEpWkXZ7u4OPvi9mlm
iw5/50d2JL9iwjYOKoqjVZSFJvuE7K2b3Y1IF6SUEqBcwHUQCNZq+CvgUvZ5bB1X
3sH5FqtLB9Pv/9vbIc7lGel3ZPBdKq+yIB0SFBgInQQ5EkT8Z6BTH/szZynhM/8S
gykY6uhnOkwrgtshF9CNQJdUPz5/qg+gpnqfXFvGYCsXFaiTRgSsAyXGbdeYUC0q
X+Av+XIFCFA99u6ie2lNkuqX1QbLxmtV6XqEW5fCqSjjDbbS9yvtIu+cNmqkLgwy
0MOFB5MoSPrkVlfsHDnAAPehUdX5yjyQPtYFCopImN743zdzx1IZAAoaM0WCN1hM
vpE=
-----END CERTIFICATE-----
Generated at Fri May 2 13:13:17 2025 by rpki-client