Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8padimrKATsZD3nEarhSKhlPKpM.roa
File: 8padimrKATsZD3nEarhSKhlPKpM.roa (raw, json)
Hash identifier: QzCVx5Vz40Ve8bp1l8x7AHHVxPgtoBynlS70v2mMH5A=
Subject key identifier: F2:96:9D:8A:6A:CA:01:3B:19:0F:79:C4:6A:B8:52:2A:19:4F:2A:93
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018526365E606D7D08F0523DDB71A934C4D4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8padimrKATsZD3nEarhSKhlPKpM.roa
Signing time: Sun 18 Dec 2022 17:09:35 +0000
ROA not before: Sun 18 Dec 2022 17:09:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:26:36:5e:60:6d:7d:08:f0:52:3d:db:71:a9:34:c4:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 18 17:09:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f2969d8a6aca013b190f79c46ab8522a194f2a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:93:8c:a5:31:e5:7a:62:4d:81:d9:9d:be:e5:
55:83:83:7f:0e:df:f7:00:0c:9e:89:a2:50:ea:0a:
14:08:a8:40:f7:65:93:bd:db:ab:5a:02:f3:9b:f3:
5c:c2:6a:90:fd:fe:40:b1:4d:d4:50:c1:58:63:38:
1e:3c:0f:03:fe:ea:bf:10:ce:94:d0:42:ad:aa:19:
25:a2:72:fa:e1:60:91:97:b5:ae:c4:9c:e6:00:8c:
cb:19:d0:d3:11:2b:75:05:04:66:5b:2c:03:42:30:
58:eb:ab:d8:58:dc:4e:07:26:50:cc:58:2c:73:52:
71:b0:da:06:38:1f:75:d9:a4:b7:21:00:c0:c4:b1:
70:64:9b:0e:e0:77:a6:cb:8e:ee:3e:76:2b:a6:55:
8b:d4:e1:fb:65:0b:ca:91:93:71:65:30:4b:48:69:
e2:44:d4:c7:96:a2:c6:19:be:0c:3b:ad:cf:16:b5:
06:a6:e5:84:9e:a4:cb:26:fa:28:e3:c0:09:14:b1:
56:07:76:5c:6e:c7:cc:bf:ef:0d:73:a4:e7:58:39:
a9:90:92:e9:1c:7b:6a:99:16:9f:43:97:74:50:21:
50:3c:b8:7c:80:dd:80:df:94:3d:44:62:ec:4a:ca:
98:ed:e0:25:57:ee:4c:c2:e1:db:70:ef:d3:1c:37:
e2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:96:9D:8A:6A:CA:01:3B:19:0F:79:C4:6A:B8:52:2A:19:4F:2A:93
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8padimrKATsZD3nEarhSKhlPKpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
16:f2:e1:52:5e:b6:77:72:7e:a0:a3:d1:a3:6a:ca:e1:18:cb:
74:33:d5:7e:36:bc:87:c9:a0:9a:7e:01:09:e1:81:60:1a:05:
eb:96:b0:71:5e:65:4e:98:33:81:68:6a:22:e1:e0:fb:23:6c:
dd:d1:3f:59:80:10:7a:e6:8f:36:49:fe:6d:b0:55:38:6e:cf:
71:4e:ca:14:75:93:e4:c9:95:8f:aa:df:0b:04:53:20:09:ea:
b1:57:2a:4c:6e:34:12:6b:55:dc:e5:93:56:6c:eb:82:6f:38:
8d:8c:05:a6:aa:c1:ad:89:e5:9b:70:fa:7f:a9:62:29:b7:a7:
fa:c2:23:02:ea:f8:f4:66:3f:7f:d5:1e:f6:d0:29:45:f0:cb:
c7:d5:0d:a5:ef:18:66:5a:20:a4:fa:1a:ce:a6:fe:19:08:38:
4a:96:65:7e:d2:23:1a:e0:97:49:a3:25:f7:57:cb:51:e6:f0:
86:13:57:10:39:1b:55:43:85:ef:96:16:b1:54:31:57:0c:36:
44:16:ae:65:87:e5:95:03:6c:de:2f:ff:f0:cb:5b:8c:eb:d2:
0a:d3:3f:a5:6e:b1:1c:1f:ad:13:8f:7e:89:30:ca:f8:cf:eb:
33:0f:02:fa:a3:da:60:47:d7:92:5f:ef:5d:6d:77:42:ca:f2:
e5:9d:4b:88
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYUmNl5gbX0I8FI923GpNMTUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjE4MTcwOTM1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMjk2OWQ4YTZhY2EwMTNiMTkwZjc5YzQ2YWI4NTIyYTE5NGYyYTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6JOMpTHlemJNgdmdvuVVg4N/Dt/3
AAyeiaJQ6goUCKhA92WTvdurWgLzm/NcwmqQ/f5AsU3UUMFYYzgePA8D/uq/EM6U
0EKtqhklonL64WCRl7WuxJzmAIzLGdDTESt1BQRmWywDQjBY66vYWNxOByZQzFgs
c1JxsNoGOB912aS3IQDAxLFwZJsO4Hemy47uPnYrplWL1OH7ZQvKkZNxZTBLSGni
RNTHlqLGGb4MO63PFrUGpuWEnqTLJvoo48AJFLFWB3ZcbsfMv+8Nc6TnWDmpkJLp
HHtqmRafQ5d0UCFQPLh8gN2A35Q9RGLsSsqY7eAlV+5MwuHbcO/THDfigwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPKWnYpqygE7GQ95xGq4UioZTyqTMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvOHBhZGltcktBVHNaRDNuRWFyaFNLaGxQS3BNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABby4VJetndyfqCj0aNq
yuEYy3Qz1X42vIfJoJp+AQnhgWAaBeuWsHFeZU6YM4FoaiLh4PsjbN3RP1mAEHrm
jzZJ/m2wVThuz3FOyhR1k+TJlY+q3wsEUyAJ6rFXKkxuNBJrVdzlk1Zs64JvOI2M
Baaqwa2J5Ztw+n+pYim3p/rCIwLq+PRmP3/VHvbQKUXwy8fVDaXvGGZaIKT6Gs6m
/hkIOEqWZX7SIxrgl0mjJfdXy1Hm8IYTVxA5G1VDhe+WFrFUMVcMNkQWrmWH5ZUD
bN4v//DLW4zr0grTP6VusRwfrROPfokwyvjP6zMPAvqj2mBH15Jf711td0LK8uWd
S4g=
-----END CERTIFICATE-----
Generated at Thu May 1 20:20:31 2025 by rpki-client