Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/99Ma-WyPNwY4Z7ko9z1AivBombM.roa
File: 99Ma-WyPNwY4Z7ko9z1AivBombM.roa (raw, json)
Hash identifier: nZjaI/TfnSEdXcvNE0IfnGGFPxaeep7IuvfUmRnWKFU=
Subject key identifier: F7:D3:1A:F9:6C:8F:37:06:38:67:B9:28:F7:3D:40:8A:F0:68:99:B3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01843EEDB2E2FC0D3813D17EE3B7D2168CFA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/99Ma-WyPNwY4Z7ko9z1AivBombM.roa
Signing time: Thu 03 Nov 2022 19:17:56 +0000
ROA not before: Thu 03 Nov 2022 19:17:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:3e:ed:b2:e2:fc:0d:38:13:d1:7e:e3:b7:d2:16:8c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 3 19:17:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f7d31af96c8f37063867b928f73d408af06899b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d6:78:03:50:38:ab:60:ee:99:ea:8b:56:a4:
a7:fd:7b:1e:fb:6f:e9:55:5a:ea:1c:f8:22:8b:0d:
07:b0:93:dd:e2:43:70:7d:2c:75:82:f5:22:d1:3e:
8e:ec:15:40:d9:3c:95:02:19:c2:74:90:a1:26:71:
e7:6e:a7:bb:01:74:66:57:3f:b4:b6:be:52:2a:1c:
ff:5d:8b:6d:b8:c9:ea:ae:d3:07:eb:33:d4:ca:7a:
0c:fc:ee:41:49:6e:2d:fc:21:f2:60:3b:d9:e0:13:
86:5b:ba:45:e1:fa:cb:a5:d1:7e:6e:b4:16:21:3c:
de:5f:ec:be:45:20:6a:98:29:15:cc:c3:04:21:cd:
d6:d7:c2:f0:1b:e6:b8:c9:02:13:42:ff:74:fb:2b:
1a:39:a7:f3:f3:61:3b:55:5c:0e:14:1e:c4:20:c4:
98:c6:bb:19:d4:37:36:7f:7b:82:83:b5:f1:7c:52:
82:33:be:34:9a:d1:ad:fb:86:68:cf:a4:24:db:27:
05:69:41:5d:fe:30:72:9c:98:a8:8f:75:f4:45:aa:
0e:d3:40:50:34:8f:c3:69:f5:8b:50:cf:6a:10:f9:
6c:f5:86:78:0f:0b:d9:e2:fb:7b:0c:77:0b:25:c5:
2b:4f:45:45:eb:b8:54:0d:04:dc:e5:bb:97:ea:fd:
64:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:D3:1A:F9:6C:8F:37:06:38:67:B9:28:F7:3D:40:8A:F0:68:99:B3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/99Ma-WyPNwY4Z7ko9z1AivBombM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
99:79:ce:fa:41:97:71:2e:ce:f0:15:e0:a6:9f:63:bf:5c:ef:
21:fe:b4:3f:e6:cc:d6:6d:e2:51:0e:09:21:08:8d:9c:1b:24:
de:73:75:6b:81:b0:69:ca:de:97:2a:2a:ef:19:d3:c9:cb:ca:
3b:62:49:00:2d:71:1c:9c:57:4d:27:dd:3e:88:77:59:d7:0f:
ee:e9:b1:eb:ae:15:0c:9e:4a:1e:78:85:91:9c:28:60:e8:5d:
37:17:22:5e:8d:45:d9:86:45:56:fe:ec:9d:09:42:06:aa:25:
77:11:b1:dc:53:09:93:7c:9b:86:b8:c2:c5:e3:a9:73:3a:c5:
4f:f3:38:0e:73:4f:fd:d6:9f:34:37:16:5b:60:e8:41:0f:9e:
d1:9e:70:79:9c:32:d6:a7:a9:e9:25:bf:6e:c1:80:8d:bb:35:
da:3f:94:f2:6e:c0:10:3f:54:5b:86:b9:4c:fe:e0:bc:d9:25:
85:b6:b8:58:f1:1d:93:ed:ed:a0:f3:c7:b7:96:e0:fc:be:00:
83:7f:09:5c:f0:55:31:91:ea:fa:5e:64:52:d5:fc:68:a7:d6:
2f:bf:05:bf:31:12:92:ad:fc:8c:56:f7:e7:f8:1a:4a:9a:74:
c2:8a:20:77:33:e3:c0:99:61:17:ee:13:b5:1b:c0:f9:95:68:
d5:8d:56:a5
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYQ+7bLi/A04E9F+47fSFoz6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMTAzMTkxNzU2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmN2QzMWFmOTZjOGYzNzA2Mzg2N2I5MjhmNzNkNDA4YWYwNjg5OWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtZ4A1A4q2DumeqLVqSn/Xse+2/p
VVrqHPgiiw0HsJPd4kNwfSx1gvUi0T6O7BVA2TyVAhnCdJChJnHnbqe7AXRmVz+0
tr5SKhz/XYttuMnqrtMH6zPUynoM/O5BSW4t/CHyYDvZ4BOGW7pF4frLpdF+brQW
ITzeX+y+RSBqmCkVzMMEIc3W18LwG+a4yQITQv90+ysaOafz82E7VVwOFB7EIMSY
xrsZ1Dc2f3uCg7XxfFKCM740mtGt+4Zoz6Qk2ycFaUFd/jBynJioj3X0RaoO00BQ
NI/DafWLUM9qEPls9YZ4DwvZ4vt7DHcLJcUrT0VF67hUDQTc5buX6v1kWwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPfTGvlsjzcGOGe5KPc9QIrwaJmzMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvOTlNYS1XeVBOd1k0Wjdrbzl6MUFpdkJvbWJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJl5zvpBl3EuzvAV4Kaf
Y79c7yH+tD/mzNZt4lEOCSEIjZwbJN5zdWuBsGnK3pcqKu8Z08nLyjtiSQAtcRyc
V00n3T6Id1nXD+7pseuuFQyeSh54hZGcKGDoXTcXIl6NRdmGRVb+7J0JQgaqJXcR
sdxTCZN8m4a4wsXjqXM6xU/zOA5zT/3WnzQ3Fltg6EEPntGecHmcMtanqeklv27B
gI27Ndo/lPJuwBA/VFuGuUz+4LzZJYW2uFjxHZPt7aDzx7eW4Py+AIN/CVzwVTGR
6vpeZFLV/Gin1i+/Bb8xEpKt/IxW9+f4GkqadMKKIHcz48CZYRfuE7UbwPmVaNWN
VqU=
-----END CERTIFICATE-----
Generated at Sat May 3 20:39:13 2025 by rpki-client