Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8yfQaBWDIdHZNFVV7xQGgeknReA.roa
File: 8yfQaBWDIdHZNFVV7xQGgeknReA.roa (raw, json)
Hash identifier: 49WXXl9I8+NAfMSASlRoDOZivWi+uYRr0M/DRgNrenA=
Subject key identifier: F3:27:D0:68:15:83:21:D1:D9:34:55:55:EF:14:06:81:E9:27:45:E0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018779A57FF758A5DB8D11296AFAFF5D14A0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8yfQaBWDIdHZNFVV7xQGgeknReA.roa
Signing time: Thu 13 Apr 2023 08:05:01 +0000
ROA not before: Thu 13 Apr 2023 08:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:187:79a5:49fc/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:79:a5:7f:f7:58:a5:db:8d:11:29:6a:fa:ff:5d:14:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 13 08:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f327d068158321d1d9345555ef140681e92745e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4e:48:a8:53:ce:f4:ac:71:c8:11:6a:d0:1f:
e9:10:65:b4:eb:90:09:47:f3:40:75:7e:68:76:35:
08:4b:cf:25:b5:a6:fc:d0:47:57:80:5e:e3:a6:f4:
b1:f0:21:09:9f:36:51:6e:a8:8a:02:f5:10:fb:cb:
6b:79:2f:e5:ed:09:17:21:55:59:0a:69:b5:e0:be:
c5:57:9b:43:a8:01:3a:b3:34:df:8f:21:e3:7b:15:
d3:39:49:4b:03:6b:1a:a0:d4:83:fe:10:49:be:cb:
69:c2:da:4c:1e:e6:7a:67:c9:9a:7d:c9:30:45:ba:
8e:b4:5b:23:68:50:7f:85:00:ef:9e:b9:35:70:39:
7f:bf:dd:63:80:de:3c:22:74:92:d2:5d:27:73:9d:
03:f6:3b:14:ea:d3:06:d9:a5:bb:e9:15:8a:c7:15:
29:bc:81:d2:71:c6:38:c1:0a:6e:4b:b8:e9:9d:c3:
b8:f6:d4:20:9a:03:37:8e:56:a9:92:99:2c:e7:b1:
47:65:7e:1c:52:a2:a5:18:23:b7:cb:7a:7f:36:dc:
07:cc:7b:8e:65:5e:c6:37:bf:08:36:51:e8:7b:bb:
07:bb:2d:2a:ba:a4:7c:71:47:50:2a:83:b4:3f:c5:
d4:50:fa:2f:72:44:0b:d8:35:2f:37:92:24:46:9d:
64:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:27:D0:68:15:83:21:D1:D9:34:55:55:EF:14:06:81:E9:27:45:E0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8yfQaBWDIdHZNFVV7xQGgeknReA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
93:07:b7:79:64:cd:00:a7:8c:8c:0e:c3:02:23:fe:6a:43:2d:
10:99:9a:a5:7f:df:07:d7:61:46:fb:dd:e3:f9:59:b8:c8:c0:
6d:4d:02:65:9d:c9:e3:a1:b7:8f:2a:b9:49:b1:09:be:cf:ac:
29:d2:39:69:f6:0f:a7:06:7e:cb:64:40:8f:94:f5:19:eb:65:
3a:96:09:05:47:5e:80:ff:4c:cb:91:17:4f:38:eb:7e:53:71:
cc:69:ce:67:53:0d:c9:28:66:f6:46:9d:33:48:8b:27:c8:71:
bc:e1:37:86:da:8e:9c:07:37:7b:62:87:ee:5e:79:dd:51:82:
a8:a1:75:a8:66:35:d0:65:ef:9d:04:1e:c7:94:61:4d:a2:37:
28:de:88:02:31:00:a0:01:46:23:66:2d:75:ce:d5:6d:a7:0c:
77:c6:42:b0:be:a6:c0:6c:d6:bf:49:d1:c0:3d:41:97:df:cc:
ee:dd:62:6e:73:a6:7b:19:cd:5d:6f:9c:6b:6d:d4:1a:ee:b3:
1e:5c:db:d7:af:7b:31:7e:4a:ab:2d:66:b3:0f:1f:35:a2:dc:
6a:d3:6d:c1:4b:86:48:32:b2:2d:2b:f0:ef:f4:4f:5e:38:15:
94:ab:17:f9:d0:b2:79:ef:f6:e4:49:ad:76:c1:4b:63:10:0e:
b3:25:75:34
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYd5pX/3WKXbjREpavr/XRSgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDEzMDgwNTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzI3ZDA2ODE1ODMyMWQxZDkzNDU1NTVlZjE0MDY4MWU5Mjc0NWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnk5IqFPO9KxxyBFq0B/pEGW065AJ
R/NAdX5odjUIS88ltab80EdXgF7jpvSx8CEJnzZRbqiKAvUQ+8treS/l7QkXIVVZ
Cmm14L7FV5tDqAE6szTfjyHjexXTOUlLA2saoNSD/hBJvstpwtpMHuZ6Z8mafckw
RbqOtFsjaFB/hQDvnrk1cDl/v91jgN48InSS0l0nc50D9jsU6tMG2aW76RWKxxUp
vIHSccY4wQpuS7jpncO49tQgmgM3jlapkpks57FHZX4cUqKlGCO3y3p/NtwHzHuO
ZV7GN78INlHoe7sHuy0quqR8cUdQKoO0P8XUUPovckQL2DUvN5IkRp1kZwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPMn0GgVgyHR2TRVVe8UBoHpJ0XgMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvOHlmUWFCV0RJZEhaTkZWVjd4UUdnZWtuUmVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJMHt3lkzQCnjIwOwwIj
/mpDLRCZmqV/3wfXYUb73eP5WbjIwG1NAmWdyeOht48quUmxCb7PrCnSOWn2D6cG
fstkQI+U9RnrZTqWCQVHXoD/TMuRF084635TccxpzmdTDckoZvZGnTNIiyfIcbzh
N4bajpwHN3tih+5eed1RgqihdahmNdBl750EHseUYU2iNyjeiAIxAKABRiNmLXXO
1W2nDHfGQrC+psBs1r9J0cA9QZffzO7dYm5zpnsZzV1vnGtt1Brusx5c29evezF+
SqstZrMPHzWi3GrTbcFLhkgysi0r8O/0T144FZSrF/nQsnnv9uRJrXbBS2MQDrMl
dTQ=
-----END CERTIFICATE-----
Generated at Wed Apr 30 18:00:10 2025 by rpki-client