Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8cWqoVRW62CDrd8zQQskJn8bSsc.roa
File: 8cWqoVRW62CDrd8zQQskJn8bSsc.roa (raw, json)
Hash identifier: hYDF8bpMafVgDnFha+xMfa24OJay0+qkyHOf5jXEf9g=
Subject key identifier: F1:C5:AA:A1:54:56:EB:60:83:AD:DF:33:41:0B:24:26:7F:1B:4A:C7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184EB357995B857E9A7BB1C55E5AB4313A1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8cWqoVRW62CDrd8zQQskJn8bSsc.roa
Signing time: Wed 07 Dec 2022 06:11:00 +0000
ROA not before: Wed 07 Dec 2022 06:11:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:eb:35:79:95:b8:57:e9:a7:bb:1c:55:e5:ab:43:13:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 7 06:11:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f1c5aaa15456eb6083addf33410b24267f1b4ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c0:0e:0f:79:2f:b1:67:59:43:a2:e5:b3:e5:
96:53:bf:af:8d:4d:8b:43:91:08:3b:fe:b8:0a:77:
0a:1d:e9:cb:7f:fc:46:1b:27:8d:90:1f:36:12:da:
3d:ed:65:94:72:b0:10:5c:c3:42:1d:7e:a3:f3:b0:
07:15:0c:4b:80:49:a0:98:8c:48:8f:15:f6:30:41:
72:89:bf:c6:57:d9:ab:ad:87:1b:3b:78:9a:0e:be:
a7:1c:1c:96:06:fa:aa:32:5b:53:32:c6:55:74:3b:
84:67:9d:72:b7:65:41:78:78:68:6e:cd:65:2e:c8:
ea:c1:2c:ac:2a:65:b3:65:3e:37:8a:ff:66:7b:f5:
51:43:18:22:9c:dd:7c:fb:ff:ba:4b:86:8a:c5:bc:
a4:aa:98:02:86:a5:b1:2b:89:83:8c:90:87:9a:1e:
c9:19:84:a4:95:86:0b:9c:63:1b:c5:cb:54:8e:eb:
66:94:ec:7b:78:d3:48:85:9f:43:d9:f2:e9:5b:2f:
a3:22:ef:d9:51:41:af:6f:a8:aa:c4:ba:2b:ca:d2:
e5:5c:55:e9:a7:52:d9:92:3b:8b:a8:c3:f8:81:18:
ac:79:8e:51:e3:a4:e9:b1:80:3b:11:09:60:1f:e2:
14:d4:6b:38:de:98:eb:74:70:bd:7f:70:2b:ca:5e:
62:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C5:AA:A1:54:56:EB:60:83:AD:DF:33:41:0B:24:26:7F:1B:4A:C7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8cWqoVRW62CDrd8zQQskJn8bSsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4b:d0:00:99:3f:84:d2:51:87:de:e0:8f:16:f8:20:e3:da:8f:
0c:c0:af:71:c4:7d:3c:44:7b:39:9e:ee:13:34:43:db:6c:2b:
37:96:7e:f1:6e:11:53:8d:fc:02:e0:cf:8c:95:02:8d:c3:bf:
1a:29:cc:5a:f9:a0:9a:13:26:30:dc:6c:e4:66:62:87:e6:40:
78:1e:36:b5:fe:9b:3c:e1:64:7a:e2:7f:41:14:81:bf:a6:7b:
97:d0:ec:56:0d:41:b5:c3:4d:c0:19:cc:fc:6a:a1:c2:97:ad:
83:10:98:ca:c7:8f:bb:e7:06:e0:90:ed:93:cc:3f:06:68:ba:
45:33:56:04:e1:9d:1c:44:a1:2c:e2:e4:d1:d3:4d:96:9e:81:
f9:81:d9:d7:91:85:ef:3b:a0:53:92:bd:75:66:99:de:aa:d0:
4b:c9:44:ef:f1:a9:47:eb:0c:e7:41:73:69:91:c4:ce:1c:0f:
5e:3e:de:21:00:9f:97:c5:e2:6b:c4:7c:86:db:ad:b7:cb:7e:
c3:5f:3a:af:df:f9:fd:df:da:ca:67:11:2c:fd:f6:27:ff:27:
00:96:8c:95:00:71:de:1e:cc:78:fb:6d:87:1d:03:6d:66:e1:
11:58:67:87:a5:d3:b4:16:49:9b:e3:e9:b9:7b:ff:57:fb:87:
ed:0e:76:cd
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYTrNXmVuFfpp7scVeWrQxOhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjA3MDYxMTAwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMWM1YWFhMTU0NTZlYjYwODNhZGRmMzM0MTBiMjQyNjdmMWI0YWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMAOD3kvsWdZQ6Lls+WWU7+vjU2L
Q5EIO/64CncKHenLf/xGGyeNkB82Eto97WWUcrAQXMNCHX6j87AHFQxLgEmgmIxI
jxX2MEFyib/GV9mrrYcbO3iaDr6nHByWBvqqMltTMsZVdDuEZ51yt2VBeHhobs1l
LsjqwSysKmWzZT43iv9me/VRQxginN18+/+6S4aKxbykqpgChqWxK4mDjJCHmh7J
GYSklYYLnGMbxctUjutmlOx7eNNIhZ9D2fLpWy+jIu/ZUUGvb6iqxLorytLlXFXp
p1LZkjuLqMP4gRiseY5R46TpsYA7EQlgH+IU1Gs43pjrdHC9f3Aryl5iJwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPHFqqFUVutgg63fM0ELJCZ/G0rHMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvOGNXcW9WUlc2MkNEcmQ4elFRc2tKbjhiU3NjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEvQAJk/hNJRh97gjxb4
IOPajwzAr3HEfTxEezme7hM0Q9tsKzeWfvFuEVON/ALgz4yVAo3DvxopzFr5oJoT
JjDcbORmYofmQHgeNrX+mzzhZHrif0EUgb+me5fQ7FYNQbXDTcAZzPxqocKXrYMQ
mMrHj7vnBuCQ7ZPMPwZoukUzVgThnRxEoSzi5NHTTZaegfmB2deRhe87oFOSvXVm
md6q0EvJRO/xqUfrDOdBc2mRxM4cD14+3iEAn5fF4mvEfIbbrbfLfsNfOq/f+f3f
2spnESz99if/JwCWjJUAcd4ezHj7bYcdA21m4RFYZ4el07QWSZvj6bl7/1f7h+0O
ds0=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:06 2025 by rpki-client