Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8pkGUHYCQm4aalmI5vTzK1B9p8Y.roa
File: 8pkGUHYCQm4aalmI5vTzK1B9p8Y.roa (raw, json)
Hash identifier: H5cdN/FVzlY/zRs9gNNR95diDMTOfvUeTZ1Duj6U2O8=
Subject key identifier: F2:99:06:50:76:02:42:6E:1A:6A:59:88:E6:F4:F3:2B:50:7D:A7:C6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7CF1E644
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8pkGUHYCQm4aalmI5vTzK1B9p8Y.roa
Signing time: Wed 20 Apr 2022 12:11:30 +0000
ROA not before: Wed 20 Apr 2022 12:11:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2096227908 (0x7cf1e644)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 20 12:11:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f29906507602426e1a6a5988e6f4f32b507da7c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d8:b6:ff:6b:38:e7:a5:31:9b:82:a3:ff:84:
c7:17:5c:68:0d:05:19:dc:d1:1c:eb:ca:55:50:80:
67:0e:7b:fb:6e:12:86:e2:90:a5:f0:1a:2c:51:0d:
da:4c:e0:7b:2b:d5:9e:a1:dd:6c:dc:ba:96:88:aa:
90:6c:50:33:5d:c5:02:40:53:07:cc:a6:d1:88:c1:
64:37:86:c2:a8:30:32:a8:68:6a:12:47:3f:7c:50:
e4:24:5c:76:71:ad:e4:01:51:c2:6e:01:86:ed:3e:
d7:ec:4d:30:1b:e9:a0:32:5e:af:44:f0:ec:74:41:
68:d5:39:b1:81:64:01:86:13:fe:22:e2:b1:58:6b:
28:07:e6:6f:dd:86:7f:4f:41:f8:2a:f0:f5:1a:c5:
6f:3f:9a:5e:c3:3b:62:c1:36:19:fd:26:81:4c:86:
de:9b:70:53:44:db:71:ff:45:49:54:92:79:de:f6:
69:1a:37:d5:57:20:35:79:1f:02:d5:a3:00:c6:ea:
a5:43:71:82:92:e5:7f:49:45:0a:87:be:3d:c6:31:
62:84:29:43:8c:5a:07:eb:8e:96:b5:40:d2:ad:ec:
99:19:3e:67:1f:e3:a3:91:93:fc:9b:8a:ce:7c:3f:
75:b2:95:a6:6d:37:f1:be:7b:8c:7a:bc:0f:ab:cc:
dd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:99:06:50:76:02:42:6E:1A:6A:59:88:E6:F4:F3:2B:50:7D:A7:C6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8pkGUHYCQm4aalmI5vTzK1B9p8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:30:79:9f:fd:e9:62:47:52:51:b4:fa:b7:0b:28:1d:ce:10:
a1:b8:f0:d2:e3:e3:1b:2b:02:80:53:0d:79:6e:c9:dd:61:71:
63:61:eb:d6:6a:1c:d6:78:04:3f:b6:e3:c3:a7:b2:7b:c5:2d:
88:ab:28:2e:67:07:47:db:ff:b9:83:18:ad:f9:1b:35:84:70:
3f:c4:c2:33:fc:16:ad:f1:7e:95:72:d7:66:a2:94:be:0a:cc:
bf:a0:6f:52:05:9e:03:fc:c4:3b:f3:e8:f4:16:fb:70:79:39:
da:6c:07:80:5a:54:5b:32:85:32:d8:fc:15:f1:1a:c5:84:b2:
26:ad:f6:94:41:31:ec:52:c0:b3:f7:96:1f:c8:24:cf:5d:d1:
bc:5d:06:56:c6:f4:be:bd:3a:25:f3:2b:6d:79:0b:f7:67:2c:
35:63:b4:9d:a5:0d:37:c3:4f:7f:f4:42:b2:ca:52:15:e0:ba:
ef:85:3f:f4:62:d2:88:5f:e3:28:e7:fe:a1:b5:56:fa:ee:05:
ed:76:d2:ca:f7:6d:b0:a5:3d:6a:93:47:38:e9:07:4b:43:29:
c5:ee:7d:76:d5:2c:06:c3:30:bd:8b:15:99:02:03:95:3a:48:
e2:2c:b6:4a:93:20:35:7e:2b:01:c6:c0:d7:83:f2:bd:02:7a:
68:54:c5:8b
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEfPHmRDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDQy
MDEyMTEzMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjI5OTA2NTA3NjAy
NDI2ZTFhNmE1OTg4ZTZmNGYzMmI1MDdkYTdjNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKTYtv9rOOelMZuCo/+ExxdcaA0FGdzRHOvKVVCAZw57+24S
huKQpfAaLFEN2kzgeyvVnqHdbNy6loiqkGxQM13FAkBTB8ym0YjBZDeGwqgwMqho
ahJHP3xQ5CRcdnGt5AFRwm4Bhu0+1+xNMBvpoDJer0Tw7HRBaNU5sYFkAYYT/iLi
sVhrKAfmb92Gf09B+Crw9RrFbz+aXsM7YsE2Gf0mgUyG3ptwU0Tbcf9FSVSSed72
aRo31VcgNXkfAtWjAMbqpUNxgpLlf0lFCoe+PcYxYoQpQ4xaB+uOlrVA0q3smRk+
Zx/jo5GT/JuKznw/dbKVpm038b57jHq8D6vM3TUCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBTymQZQdgJCbhpqWYjm9PMrUH2nxjAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
Lzhwa0dVSFlDUW00YWFsbUk1dlR6SzFCOXA4WS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQAnMHmf/eliR1JRtPq3CygdzhChuPDS4+MbKwKA
Uw15bsndYXFjYevWahzWeAQ/tuPDp7J7xS2IqyguZwdH2/+5gxit+Rs1hHA/xMIz
/Bat8X6VctdmopS+Csy/oG9SBZ4D/MQ78+j0FvtweTnabAeAWlRbMoUy2PwV8RrF
hLImrfaUQTHsUsCz95YfyCTPXdG8XQZWxvS+vTol8ytteQv3Zyw1Y7SdpQ03w09/
9EKyylIV4LrvhT/0YtKIX+Mo5/6htVb67gXtdtLK922wpT1qk0c46QdLQynF7n12
1SwGwzC9ixWZAgOVOkjiLLZKkyA1fisBxsDXg/K9AnpoVMWL
-----END CERTIFICATE-----
Generated at Sun May 4 16:51:54 2025 by rpki-client