Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8bc79fww4m6j7dYIwDVSJKschpo.roa
File: 8bc79fww4m6j7dYIwDVSJKschpo.roa (raw, json)
Hash identifier: nqLussVUgAjIh1Hol2BqjTNamAOSKVnj+KvXCtcXVsc=
Subject key identifier: F1:B7:3B:F5:FC:30:E2:6E:A3:ED:D6:08:C0:35:52:24:AB:1C:86:9A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184BBC43E36E1E692C200B9248FB74CC94B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8bc79fww4m6j7dYIwDVSJKschpo.roa
Signing time: Mon 28 Nov 2022 01:05:11 +0000
ROA not before: Mon 28 Nov 2022 01:05:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:ae77:4719/128 maxlen: 128
2001:67c:64:ffff:0:184:9f03:9814/128 maxlen: 128
2001:67c:64:ffff:0:184:bbc3:beb2/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:bb:c4:3e:36:e1:e6:92:c2:00:b9:24:8f:b7:4c:c9:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 28 01:05:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f1b73bf5fc30e26ea3edd608c0355224ab1c869a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:79:21:43:a0:f2:ac:38:29:41:91:37:d7:7f:
4b:f9:91:3f:0c:02:04:d7:85:00:e0:6a:2c:8d:ff:
b5:fa:8f:cf:a6:74:15:4c:fe:d4:0b:0b:60:45:5a:
1f:a3:c2:e9:56:89:cf:ff:5c:10:44:f1:22:b1:36:
fe:84:73:59:98:bf:3b:a2:9d:d5:14:48:49:a7:6b:
2a:bc:b4:88:22:98:19:21:d6:16:23:dc:2f:09:d5:
41:11:9f:b9:13:20:48:58:a2:d8:1c:2d:d5:cb:55:
20:14:14:30:cc:31:44:df:70:4c:6e:5b:20:21:c0:
3c:b3:20:05:37:dc:55:9a:b5:55:b7:e1:cd:e7:2e:
5d:2a:46:3a:63:d0:97:a2:15:1d:84:0c:60:86:03:
38:55:64:1f:83:d2:53:d0:99:36:cf:5c:4c:fa:c9:
2f:c6:ff:f6:1f:02:94:61:3e:3d:2f:c6:32:4d:d0:
e4:6c:41:8b:ab:63:5b:6e:29:30:c0:a1:08:12:b1:
27:15:d0:93:cb:f4:fc:5b:ac:77:e4:3d:db:d7:de:
10:45:57:97:10:3e:81:b1:0e:1f:92:0c:13:e9:66:
ed:54:7f:29:ff:65:d4:0d:23:db:fc:b0:bc:4f:fc:
f6:16:c2:45:1c:fc:3f:22:dc:87:7f:32:4c:66:51:
70:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B7:3B:F5:FC:30:E2:6E:A3:ED:D6:08:C0:35:52:24:AB:1C:86:9A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8bc79fww4m6j7dYIwDVSJKschpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
77:31:78:6a:87:db:d6:3a:df:41:25:98:0d:4d:f9:a5:24:85:
b0:6b:82:61:08:09:b7:bc:6f:ac:84:75:f9:77:b9:c0:95:70:
32:f6:d2:c3:87:70:3e:8b:11:18:0b:09:0b:6e:ae:8f:1f:3f:
80:46:14:38:ad:47:1c:a6:c1:6d:66:18:4b:2b:14:85:14:f4:
42:ff:af:f0:0c:37:70:fd:68:5e:c9:c9:fc:dc:55:b0:ee:70:
ca:a8:83:77:d0:69:c5:1e:7e:c2:2c:cf:94:79:48:1d:07:e7:
0d:14:f1:65:80:5b:3d:cc:71:09:47:cf:76:fa:8a:e7:82:12:
55:9e:b2:51:87:23:62:7d:63:51:69:6a:79:70:58:d5:de:ed:
7d:fa:fa:11:37:cc:b9:79:18:7f:da:38:9b:cf:c3:a9:20:57:
24:c8:d1:d1:ef:92:6c:9c:b5:de:c9:81:67:82:53:66:23:d4:
c5:e2:ea:d4:75:33:11:8e:57:43:7f:67:2f:77:d5:f4:1a:1c:
16:f2:66:0a:8a:16:f8:6d:74:41:a5:f3:8b:98:3b:a5:74:d7:
3d:b5:cf:62:ee:e3:a9:48:da:6a:4e:59:67:64:2e:1d:32:af:
07:24:3f:63:38:83:be:ed:22:8b:a1:18:5e:60:4c:5b:36:46:
70:3e:7f:c8
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYS7xD424eaSwgC5JI+3TMlLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMTI4MDEwNTExWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMWI3M2JmNWZjMzBlMjZlYTNlZGQ2MDhjMDM1NTIyNGFiMWM4NjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnkhQ6DyrDgpQZE3139L+ZE/DAIE
14UA4Gosjf+1+o/PpnQVTP7UCwtgRVofo8LpVonP/1wQRPEisTb+hHNZmL87op3V
FEhJp2sqvLSIIpgZIdYWI9wvCdVBEZ+5EyBIWKLYHC3Vy1UgFBQwzDFE33BMblsg
IcA8syAFN9xVmrVVt+HN5y5dKkY6Y9CXohUdhAxghgM4VWQfg9JT0Jk2z1xM+skv
xv/2HwKUYT49L8YyTdDkbEGLq2NbbikwwKEIErEnFdCTy/T8W6x35D3b194QRVeX
ED6BsQ4fkgwT6WbtVH8p/2XUDSPb/LC8T/z2FsJFHPw/ItyHfzJMZlFwcwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPG3O/X8MOJuo+3WCMA1UiSrHIaaMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvOGJjNzlmd3c0bTZqN2RZSXdEVlNKS3NjaHBvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHcxeGqH29Y630ElmA1N
+aUkhbBrgmEICbe8b6yEdfl3ucCVcDL20sOHcD6LERgLCQturo8fP4BGFDitRxym
wW1mGEsrFIUU9EL/r/AMN3D9aF7JyfzcVbDucMqog3fQacUefsIsz5R5SB0H5w0U
8WWAWz3McQlHz3b6iueCElWeslGHI2J9Y1FpanlwWNXe7X36+hE3zLl5GH/aOJvP
w6kgVyTI0dHvkmyctd7JgWeCU2Yj1MXi6tR1MxGOV0N/Zy931fQaHBbyZgqKFvht
dEGl84uYO6V01z21z2Lu46lI2mpOWWdkLh0yrwckP2M4g77tIouhGF5gTFs2RnA+
f8g=
-----END CERTIFICATE-----
Generated at Thu May 1 00:42:05 2025 by rpki-client