Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9GiD7IYn9TNMG2LMXWB3aWkcwcA.roa
File: 9GiD7IYn9TNMG2LMXWB3aWkcwcA.roa (raw, json)
Hash identifier: 6DDoaRWBaj067m96EHaz+7nFAgcHbUb3x1J+Lzqu/rU=
Subject key identifier: F4:68:83:EC:86:27:F5:33:4C:1B:62:CC:5D:60:77:69:69:1C:C1:C0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018568F23604DF588A5AFB6559CCF3C2C06F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9GiD7IYn9TNMG2LMXWB3aWkcwcA.roa
Signing time: Sat 31 Dec 2022 16:09:42 +0000
ROA not before: Sat 31 Dec 2022 16:09:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:68:f2:36:04:df:58:8a:5a:fb:65:59:cc:f3:c2:c0:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 31 16:09:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f46883ec8627f5334c1b62cc5d607769691cc1c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0f:09:05:23:26:f0:9d:c3:73:79:5e:48:ce:
dd:99:72:1a:15:74:cb:fc:1d:e6:b1:e8:a7:0f:c1:
ef:e2:b2:ce:a7:62:91:b2:0b:46:6c:82:cf:6e:11:
7b:85:00:a1:52:fb:a5:43:3b:34:8b:63:db:9a:bd:
5a:4d:37:00:a6:4a:fd:51:39:80:ea:86:2f:3c:ed:
9f:73:e0:d8:18:77:28:b8:2c:a7:22:46:6e:99:9e:
58:a8:c3:23:5e:e1:3d:90:39:a5:04:54:5b:82:48:
62:ad:4d:d3:82:2d:a8:4a:ca:38:db:cf:f9:81:dd:
c8:af:cd:c4:0f:6c:fd:e4:d0:e3:23:0e:dd:f8:71:
5e:ea:96:1a:95:ae:89:bc:59:8e:5c:2f:46:2b:a3:
96:98:02:64:75:ee:68:a9:9c:a9:cd:fe:2f:62:4d:
f2:a0:00:ac:66:a2:be:f4:e0:d2:c0:6a:47:8b:22:
0d:ce:6f:a5:b7:f8:de:5a:e6:da:9e:4a:2b:e6:f1:
67:b5:3c:9e:f4:d0:f5:c4:bf:5f:b6:43:b8:18:5e:
61:5d:db:10:3b:5c:34:11:ef:22:fa:e4:99:ee:a9:
ec:ee:23:3c:a5:fc:50:e2:c1:97:5b:5b:eb:69:8f:
29:ad:5a:7c:7e:6f:00:a2:f4:da:a6:54:ab:5b:ea:
ae:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:68:83:EC:86:27:F5:33:4C:1B:62:CC:5D:60:77:69:69:1C:C1:C0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9GiD7IYn9TNMG2LMXWB3aWkcwcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
37:0c:cc:71:ab:25:f2:c6:04:e9:ab:62:7b:d4:ef:f2:f7:20:
2c:d4:13:0a:d0:d0:cd:d3:ae:73:bc:29:54:d2:fd:c1:a3:0f:
70:dc:24:29:8a:86:fb:79:60:a0:49:9d:64:40:ef:1a:54:2c:
79:c1:f3:19:12:25:22:8a:05:91:9e:45:4e:42:e1:95:e3:7b:
57:24:55:52:49:78:94:b3:98:64:5d:c9:38:6a:03:6e:99:4c:
5b:6b:f5:be:9b:b7:27:f5:3b:de:b8:11:89:9d:3f:d1:ec:5c:
d2:06:42:2e:b4:34:84:71:a3:eb:58:47:30:f4:7f:df:5b:6e:
34:03:99:01:e5:d7:7d:34:8f:0e:23:dc:bb:58:36:87:fa:5b:
5e:d0:64:31:bc:ad:f6:00:ba:74:72:22:3b:e5:20:37:c0:e7:
23:5f:e4:1c:4d:bb:4c:3a:03:d5:e0:e9:41:f9:30:87:7e:8f:
49:37:a2:5b:cb:e0:88:e2:2b:87:9f:f0:0a:7f:ba:33:f3:43:
dc:22:17:c7:bc:df:e9:3b:4b:a8:18:45:d4:12:ec:c7:da:f9:
53:04:a2:4e:a4:53:5c:91:63:ac:2c:1c:c3:65:89:9f:50:4e:
e8:5f:cf:92:5c:58:62:b6:5a:53:dd:be:59:05:70:0d:e1:94:
99:a1:8b:ab
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVo8jYE31iKWvtlWczzwsBvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjMxMTYwOTQyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDY4ODNlYzg2MjdmNTMzNGMxYjYyY2M1ZDYwNzc2OTY5MWNjMWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0w8JBSMm8J3Dc3leSM7dmXIaFXTL
/B3mseinD8Hv4rLOp2KRsgtGbILPbhF7hQChUvulQzs0i2Pbmr1aTTcApkr9UTmA
6oYvPO2fc+DYGHcouCynIkZumZ5YqMMjXuE9kDmlBFRbgkhirU3Tgi2oSso428/5
gd3Ir83ED2z95NDjIw7d+HFe6pYala6JvFmOXC9GK6OWmAJkde5oqZypzf4vYk3y
oACsZqK+9ODSwGpHiyINzm+lt/jeWubankor5vFntTye9ND1xL9ftkO4GF5hXdsQ
O1w0Ee8i+uSZ7qns7iM8pfxQ4sGXW1vraY8prVp8fm8AovTaplSrW+quvQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPRog+yGJ/UzTBtizF1gd2lpHMHAMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvOUdpRDdJWW45VE5NRzJMTVhXQjNhV2tjd2NBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADcMzHGrJfLGBOmrYnvU
7/L3ICzUEwrQ0M3TrnO8KVTS/cGjD3DcJCmKhvt5YKBJnWRA7xpULHnB8xkSJSKK
BZGeRU5C4ZXje1ckVVJJeJSzmGRdyThqA26ZTFtr9b6btyf1O964EYmdP9HsXNIG
Qi60NIRxo+tYRzD0f99bbjQDmQHl1300jw4j3LtYNof6W17QZDG8rfYAunRyIjvl
IDfA5yNf5BxNu0w6A9Xg6UH5MId+j0k3olvL4IjiK4ef8Ap/ujPzQ9wiF8e83+k7
S6gYRdQS7Mfa+VMEok6kU1yRY6wsHMNliZ9QTuhfz5JcWGK2WlPdvlkFcA3hlJmh
i6s=
-----END CERTIFICATE-----
Generated at Thu May 1 00:28:49 2025 by rpki-client