Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8aDcHjGPFeoHFQCV9157tsCf6TQ.roa
File: 8aDcHjGPFeoHFQCV9157tsCf6TQ.roa (raw, json)
Hash identifier: OsKpt9XVunf18ZfuSED42Zkee5ghNuPllTENfyy9nyI=
Subject key identifier: F1:A0:DC:1E:31:8F:15:EA:07:15:00:95:F7:5E:7B:B6:C0:9F:E9:34
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A1F5468F2E1ADD419B743FEFBBC51EC46
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8aDcHjGPFeoHFQCV9157tsCf6TQ.roa
Signing time: Tue 22 Aug 2023 22:19:00 +0000
ROA not before: Tue 22 Aug 2023 22:19:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:178d:7ed9/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1f:54:68:f2:e1:ad:d4:19:b7:43:fe:fb:bc:51:ec:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 22 22:19:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1a0dc1e318f15ea07150095f75e7bb6c09fe934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:04:da:6b:6b:c5:6f:7e:9f:49:cb:8d:3e:f3:
ee:e3:10:ff:ea:ad:d7:2a:20:24:9c:b0:15:93:4f:
7e:5d:16:fd:9a:ae:3b:bc:09:d8:c0:fd:50:e0:20:
69:b1:85:b1:be:5c:cd:cd:c5:91:ab:27:6a:85:c0:
dd:71:c5:78:8c:d6:d7:43:76:7d:e4:13:d4:89:53:
cc:74:9d:53:9d:54:0e:37:31:8d:e8:f7:c5:d3:47:
33:4e:02:5f:d3:7b:0a:04:78:ee:a4:b0:aa:c7:d7:
5f:4e:18:36:3b:47:0c:5c:70:c2:e7:00:f7:1b:a0:
d8:c1:ee:43:d7:07:94:84:1b:59:66:ff:52:0a:31:
84:a4:30:ed:21:a2:0f:db:f4:e3:3c:e7:93:65:65:
80:20:0e:d7:b8:ab:1b:f9:39:02:64:6d:53:1e:5e:
23:8d:5d:a7:8b:31:67:a6:f2:0f:14:bb:ba:ad:f8:
24:65:90:ca:da:85:a2:bc:92:01:43:5d:27:ae:44:
6e:8d:76:37:8a:4b:a8:95:ba:a9:6a:0a:31:91:b0:
63:5a:de:71:60:2d:a0:9b:43:1b:1a:04:06:76:cf:
fc:d6:e9:42:2a:de:60:9b:83:a0:5c:64:d5:72:8d:
e4:eb:99:13:01:32:db:14:24:32:02:ce:1f:ad:c6:
f8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A0:DC:1E:31:8F:15:EA:07:15:00:95:F7:5E:7B:B6:C0:9F:E9:34
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8aDcHjGPFeoHFQCV9157tsCf6TQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ab:87:20:a6:8c:c6:be:ff:6c:55:6a:08:27:39:86:a3:5e:d5:
d7:3a:21:79:40:4c:34:b9:2d:f5:93:00:9d:6d:4d:b1:39:38:
e4:16:ad:60:62:a6:96:3a:6e:ad:8c:16:dc:50:3d:02:72:9d:
aa:45:c7:b6:df:6b:9f:92:ec:e6:1d:c8:02:3c:d1:5a:58:7b:
cc:de:e8:1e:b6:7b:45:9f:a1:88:13:e6:a1:93:18:88:61:0b:
d5:23:b9:15:53:30:ff:9b:76:85:23:d0:54:74:4b:af:d0:48:
d1:51:34:41:3c:38:7b:82:d3:9c:0a:9d:40:3a:03:f8:7a:8f:
3c:ef:cd:c1:4f:54:84:85:ce:6c:80:c2:ec:2a:20:e1:22:38:
dd:98:54:d6:e2:0a:f4:b2:19:73:a6:99:a3:c3:a2:34:57:bd:
53:fc:2e:a5:1c:89:bf:c9:6d:05:91:6c:af:a0:16:41:fd:e6:
97:0e:de:05:24:69:54:9c:53:cf:3b:c7:5d:8b:ca:0b:69:37:
dd:c8:53:b7:8a:6c:73:b2:01:04:92:39:88:4a:d0:0d:63:a8:
88:2e:e4:2f:94:ac:a7:2a:95:9c:4b:90:f0:13:c9:87:af:98:
2c:f6:09:d8:b1:c2:5f:49:63:c8:a8:57:6c:92:4f:15:7e:e6:
37:8b:7b:ba
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYofVGjy4a3UGbdD/vu8UexGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODIyMjIxOTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMWEwZGMxZTMxOGYxNWVhMDcxNTAwOTVmNzVlN2JiNmMwOWZlOTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjATaa2vFb36fScuNPvPu4xD/6q3X
KiAknLAVk09+XRb9mq47vAnYwP1Q4CBpsYWxvlzNzcWRqydqhcDdccV4jNbXQ3Z9
5BPUiVPMdJ1TnVQONzGN6PfF00czTgJf03sKBHjupLCqx9dfThg2O0cMXHDC5wD3
G6DYwe5D1weUhBtZZv9SCjGEpDDtIaIP2/TjPOeTZWWAIA7XuKsb+TkCZG1THl4j
jV2nizFnpvIPFLu6rfgkZZDK2oWivJIBQ10nrkRujXY3ikuolbqpagoxkbBjWt5x
YC2gm0MbGgQGds/81ulCKt5gm4OgXGTVco3k65kTATLbFCQyAs4frcb4QQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPGg3B4xjxXqBxUAlfdee7bAn+k0MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvOGFEY0hqR1BGZW9IRlFDVjkxNTd0c0NmNlRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKuHIKaMxr7/bFVqCCc5
hqNe1dc6IXlATDS5LfWTAJ1tTbE5OOQWrWBippY6bq2MFtxQPQJynapFx7bfa5+S
7OYdyAI80VpYe8ze6B62e0WfoYgT5qGTGIhhC9UjuRVTMP+bdoUj0FR0S6/QSNFR
NEE8OHuC05wKnUA6A/h6jzzvzcFPVISFzmyAwuwqIOEiON2YVNbiCvSyGXOmmaPD
ojRXvVP8LqUcib/JbQWRbK+gFkH95pcO3gUkaVScU887x12LygtpN93IU7eKbHOy
AQSSOYhK0A1jqIgu5C+UrKcqlZxLkPATyYevmCz2Cdixwl9JY8ioV2ySTxV+5jeL
e7o=
-----END CERTIFICATE-----
Generated at Wed Apr 30 22:02:36 2025 by rpki-client