Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9SIUvwkl-662vFAf8zLjLuuZe2s.roa
File: 9SIUvwkl-662vFAf8zLjLuuZe2s.roa (raw, json)
Hash identifier: fr2iv5jzbzzyf1jBvEiMIa0vz1Kq+s9DBabR3xgX6OQ=
Subject key identifier: F5:22:14:BF:09:25:FB:AE:B6:BC:50:1F:F3:32:E3:2E:EB:99:7B:6B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018638DACA8A4EC5E059DA8BB8091B89E310
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9SIUvwkl-662vFAf8zLjLuuZe2s.roa
Signing time: Fri 10 Feb 2023 01:05:08 +0000
ROA not before: Fri 10 Feb 2023 01:05:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:38d9:f7cb/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:38:da:ca:8a:4e:c5:e0:59:da:8b:b8:09:1b:89:e3:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 10 01:05:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f52214bf0925fbaeb6bc501ff332e32eeb997b6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c4:84:e9:80:fc:88:a1:d7:c5:10:46:0f:b0:
62:fa:da:e0:a0:5f:85:8c:9c:ad:85:c7:74:4e:bf:
45:de:d9:dc:e3:22:2c:ba:49:81:4e:84:97:47:7e:
7b:35:c8:99:01:9a:fc:6b:ad:08:12:7b:4f:e5:3b:
14:75:b5:80:da:9e:10:f1:27:f7:b2:71:5f:5b:56:
a5:fb:f1:d3:95:47:59:a8:f4:eb:2c:ce:f7:57:3e:
f4:ae:3d:14:13:49:5a:5d:6f:a1:31:fd:0a:70:c1:
72:c7:62:58:87:1a:57:a1:ef:b6:f7:a9:ba:1d:c5:
40:bf:79:06:7b:71:da:28:c4:b7:51:75:98:06:23:
4d:bc:99:e7:1d:29:fd:b5:b4:dc:37:af:d0:f1:96:
72:c3:f8:5e:6b:d2:d0:ed:23:27:0b:6d:b2:27:d2:
fa:b5:0f:d3:c0:a5:a4:d9:62:2d:86:c2:e8:dc:b3:
51:00:aa:a0:bc:51:7c:46:95:8f:11:7d:0a:5e:32:
e1:51:36:ef:4b:3d:26:d8:e7:2a:e3:0f:34:5e:ea:
6b:b5:9e:bf:18:0d:4a:c0:00:7d:4f:8c:cd:42:40:
8b:c4:d7:9d:50:ba:ef:2e:f8:29:7e:0f:f0:8e:f9:
06:47:9b:ce:18:0d:ed:2b:7a:b8:32:e0:cf:2e:4b:
75:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:22:14:BF:09:25:FB:AE:B6:BC:50:1F:F3:32:E3:2E:EB:99:7B:6B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9SIUvwkl-662vFAf8zLjLuuZe2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4f:e5:b2:96:fe:aa:de:20:a3:8d:60:c0:f2:22:78:7f:21:d5:
2c:de:a6:1e:c7:f1:63:a8:35:2a:99:be:60:8f:6a:e8:af:93:
ec:0c:e9:8e:e6:ea:53:04:ec:cd:9c:ba:4b:7a:c0:2e:51:9d:
9d:b2:e2:0e:95:5f:cc:66:c9:70:0f:5d:fb:8d:f0:0c:91:1b:
9c:0f:09:56:72:ac:0b:34:53:0f:0d:d6:dd:9f:c9:c9:46:5a:
db:5c:11:b9:1c:50:79:39:77:f1:81:1e:b0:b3:3c:c0:48:78:
81:5f:54:5b:e8:56:a8:bb:52:b6:c9:1f:9c:23:01:fc:ba:a5:
24:2c:82:7d:48:ff:2f:9a:78:40:6f:77:f9:7e:b6:50:df:07:
00:ef:83:e2:bb:cb:34:27:20:6d:e1:d7:62:09:47:2e:41:e1:
3a:d3:5e:5e:cb:32:43:48:0b:00:f5:bb:50:1a:07:4c:49:27:
31:33:02:71:ce:cb:50:25:26:a9:dc:e8:f8:1e:4f:93:a7:ed:
dd:13:f7:5f:5b:fd:4a:ea:d9:d0:a7:b1:d4:59:03:c2:2e:ee:
5a:34:aa:1c:aa:3b:43:98:04:bc:f8:d1:da:a5:32:c1:94:8e:
ba:b4:ad:5e:1d:14:a7:5b:09:1c:a7:15:3e:a6:5d:31:d0:ac:
29:88:46:3f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYY42sqKTsXgWdqLuAkbieMQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjEwMDEwNTA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTIyMTRiZjA5MjVmYmFlYjZiYzUwMWZmMzMyZTMyZWViOTk3YjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMSE6YD8iKHXxRBGD7Bi+trgoF+F
jJythcd0Tr9F3tnc4yIsukmBToSXR357NciZAZr8a60IEntP5TsUdbWA2p4Q8Sf3
snFfW1al+/HTlUdZqPTrLM73Vz70rj0UE0laXW+hMf0KcMFyx2JYhxpXoe+296m6
HcVAv3kGe3HaKMS3UXWYBiNNvJnnHSn9tbTcN6/Q8ZZyw/hea9LQ7SMnC22yJ9L6
tQ/TwKWk2WIthsLo3LNRAKqgvFF8RpWPEX0KXjLhUTbvSz0m2Ocq4w80XuprtZ6/
GA1KwAB9T4zNQkCLxNedULrvLvgpfg/wjvkGR5vOGA3tK3q4MuDPLkt18wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPUiFL8JJfuutrxQH/My4y7rmXtrMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvOVNJVXZ3a2wtNjYydkZBZjh6TGpMdXVaZTJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAE/lspb+qt4go41gwPIi
eH8h1Szeph7H8WOoNSqZvmCPauivk+wM6Y7m6lME7M2cukt6wC5RnZ2y4g6VX8xm
yXAPXfuN8AyRG5wPCVZyrAs0Uw8N1t2fyclGWttcEbkcUHk5d/GBHrCzPMBIeIFf
VFvoVqi7UrbJH5wjAfy6pSQsgn1I/y+aeEBvd/l+tlDfBwDvg+K7yzQnIG3h12IJ
Ry5B4TrTXl7LMkNICwD1u1AaB0xJJzEzAnHOy1AlJqnc6PgeT5On7d0T919b/Urq
2dCnsdRZA8Iu7lo0qhyqO0OYBLz40dqlMsGUjrq0rV4dFKdbCRynFT6mXTHQrCmI
Rj8=
-----END CERTIFICATE-----
Generated at Thu May 1 01:26:51 2025 by rpki-client