Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9TmvT7aOmJpjAV_2mia8Z0zs9i4.roa
File: 9TmvT7aOmJpjAV_2mia8Z0zs9i4.roa (raw, json)
Hash identifier: LREKqUEFKrIlut+xwHyj8XwOF8AA1iXDjXTLjbTRrEg=
Subject key identifier: F5:39:AF:4F:B6:8E:98:9A:63:01:5F:F6:9A:26:BC:67:4C:EC:F6:2E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184EDC8A4DDCB849F549C281775CD7B32E4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9TmvT7aOmJpjAV_2mia8Z0zs9i4.roa
Signing time: Wed 07 Dec 2022 18:11:00 +0000
ROA not before: Wed 07 Dec 2022 18:11:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ed:c8:a4:dd:cb:84:9f:54:9c:28:17:75:cd:7b:32:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 7 18:11:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f539af4fb68e989a63015ff69a26bc674cecf62e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e0:b5:06:14:b8:56:e1:2f:c3:f6:72:95:7b:
6a:ad:f6:17:f1:7b:fe:4a:14:6e:29:b1:31:8a:4b:
34:1b:ba:d8:39:f2:fc:0a:ce:5c:ed:3c:4b:44:b8:
19:69:e8:54:15:ad:fb:66:a1:f9:eb:44:70:00:6d:
a9:b5:61:10:7a:d0:8b:6f:81:ad:55:3d:5c:f8:21:
ac:9a:c1:ce:ff:b7:91:d4:ed:08:ab:99:a5:88:4c:
92:36:ec:f7:0e:ca:01:b6:b3:1e:8c:86:35:fc:df:
3c:bc:4e:16:6f:7b:ca:a2:4f:18:a8:0d:d7:d4:53:
15:66:5b:a7:1c:b5:c0:9b:48:b7:b2:5b:9c:f5:eb:
bd:e6:cb:94:a7:e7:ae:07:60:05:c0:f5:c4:cb:4c:
36:5d:ff:88:d2:e9:05:f3:a9:48:ce:c6:ae:bf:46:
70:1b:a7:f2:86:67:8b:1c:48:1e:1a:fe:d4:40:58:
9c:3e:88:3c:ef:f7:08:27:15:25:23:cb:d1:7c:98:
ec:b5:96:c0:e5:51:ee:3f:59:8b:17:a7:3b:b9:3a:
4a:28:9c:39:99:f4:8f:26:b6:bc:c6:4f:1c:72:e5:
5f:34:4f:25:21:a5:a3:cd:bd:d0:1e:07:9c:c2:d0:
e1:6e:e8:ae:17:6c:12:72:2e:64:67:f1:4a:d2:b7:
07:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:39:AF:4F:B6:8E:98:9A:63:01:5F:F6:9A:26:BC:67:4C:EC:F6:2E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9TmvT7aOmJpjAV_2mia8Z0zs9i4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
21:f8:11:37:bc:dc:e0:d4:ac:01:99:55:84:eb:67:d5:30:b2:
8d:cf:98:34:55:64:e0:7a:3f:84:85:eb:d4:9d:f7:23:eb:dd:
e2:4c:86:ce:12:a8:a0:5a:88:e8:b3:dc:80:b3:77:09:19:f8:
22:ba:ed:d0:9d:5d:0d:d8:8a:5c:0e:48:b7:91:4e:79:91:3b:
04:e7:02:57:ce:14:e5:cc:c0:57:de:02:d9:e2:d4:b1:53:1b:
c8:69:c8:07:9a:b2:80:31:ae:8d:4d:1d:ee:73:cf:0d:bb:52:
7a:83:f7:93:5c:46:0a:1b:a0:97:0d:7a:02:7f:6f:b2:05:9c:
ed:72:3c:e0:c4:86:e2:09:8f:1f:5a:fb:62:a5:20:69:cf:69:
9a:99:5c:89:4d:3a:da:d0:e4:b7:26:5a:be:26:dd:9e:39:31:
24:8b:62:63:11:d7:dc:1b:6a:cb:05:fb:2b:4d:fb:45:33:e4:
77:79:61:af:5a:fe:a8:d7:24:9e:2d:d4:c5:90:4f:c3:f2:2a:
cf:96:50:6d:05:95:6c:d7:75:14:79:54:21:32:69:d5:52:e1:
29:88:2d:6b:2b:00:e6:0a:6a:f2:78:f5:74:c3:96:33:3d:97:
e0:c0:04:e2:c5:d3:2e:33:d3:3c:1e:9e:e1:8f:9d:c4:c7:9a:
f7:a5:c2:b7
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYTtyKTdy4SfVJwoF3XNezLkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjA3MTgxMTAwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTM5YWY0ZmI2OGU5ODlhNjMwMTVmZjY5YTI2YmM2NzRjZWNmNjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieC1BhS4VuEvw/ZylXtqrfYX8Xv+
ShRuKbExiks0G7rYOfL8Cs5c7TxLRLgZaehUFa37ZqH560RwAG2ptWEQetCLb4Gt
VT1c+CGsmsHO/7eR1O0Iq5mliEySNuz3DsoBtrMejIY1/N88vE4Wb3vKok8YqA3X
1FMVZlunHLXAm0i3sluc9eu95suUp+euB2AFwPXEy0w2Xf+I0ukF86lIzsauv0Zw
G6fyhmeLHEgeGv7UQFicPog87/cIJxUlI8vRfJjstZbA5VHuP1mLF6c7uTpKKJw5
mfSPJra8xk8ccuVfNE8lIaWjzb3QHgecwtDhbuiuF2wSci5kZ/FK0rcHlwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPU5r0+2jpiaYwFf9pomvGdM7PYuMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvOVRtdlQ3YU9tSnBqQVZfMm1pYThaMHpzOWk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACH4ETe83ODUrAGZVYTr
Z9Uwso3PmDRVZOB6P4SF69Sd9yPr3eJMhs4SqKBaiOiz3ICzdwkZ+CK67dCdXQ3Y
ilwOSLeRTnmROwTnAlfOFOXMwFfeAtni1LFTG8hpyAeasoAxro1NHe5zzw27UnqD
95NcRgoboJcNegJ/b7IFnO1yPODEhuIJjx9a+2KlIGnPaZqZXIlNOtrQ5LcmWr4m
3Z45MSSLYmMR19wbassF+ytN+0Uz5Hd5Ya9a/qjXJJ4t1MWQT8PyKs+WUG0FlWzX
dRR5VCEyadVS4SmILWsrAOYKavJ49XTDljM9l+DABOLF0y4z0zwenuGPncTHmvel
wrc=
-----END CERTIFICATE-----
Generated at Fri May 2 08:31:42 2025 by rpki-client