Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9ZvQDdpPgX9yp1Uleg-vKdiK7D0.roa
File: 9ZvQDdpPgX9yp1Uleg-vKdiK7D0.roa (raw, json)
Hash identifier: 1eciMO+RIzkO1eW6C65yYR0jjWOm6Qrikk92nUvjQOw=
Subject key identifier: F5:9B:D0:0D:DA:4F:81:7F:72:A7:55:25:7A:0F:AF:29:D8:8A:EC:3D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018529376821F54F2B7E8767A6601A889414
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9ZvQDdpPgX9yp1Uleg-vKdiK7D0.roa
Signing time: Mon 19 Dec 2022 07:09:35 +0000
ROA not before: Mon 19 Dec 2022 07:09:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:29:37:68:21:f5:4f:2b:7e:87:67:a6:60:1a:88:94:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 19 07:09:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f59bd00dda4f817f72a755257a0faf29d88aec3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:39:2d:30:e0:10:06:6f:87:41:6d:97:eb:85:
cb:b2:0e:96:70:ff:40:52:74:92:83:6c:d8:00:8a:
67:f8:da:4c:77:36:c5:1d:f5:f8:78:db:01:9b:0f:
0a:c8:01:48:2a:d8:b2:ed:ae:41:1d:56:b1:1f:3e:
d9:55:01:cc:c6:1d:7b:b3:2e:c3:65:26:9f:df:d7:
82:ea:4f:31:67:87:7d:91:31:96:07:76:f9:fb:8c:
0f:99:e3:07:76:ed:5b:7a:56:0e:7f:4e:1a:45:91:
e0:eb:ac:81:4b:60:0d:49:6d:95:9e:60:f8:a8:de:
fc:79:aa:b0:17:4c:94:f6:0e:42:50:c8:f2:67:a4:
5e:01:67:3a:a7:99:e3:21:5d:b0:c2:d4:b3:66:77:
1a:fb:21:f4:0c:39:28:28:a6:61:94:a7:b7:0c:06:
b2:f1:0d:00:9d:b1:ae:80:f8:08:13:6c:1b:b3:d8:
d0:86:0b:ae:11:58:49:6b:59:44:ca:f6:93:e8:86:
37:53:fd:f0:11:5c:c4:ac:dd:8a:69:fc:e3:df:95:
c3:c7:c9:9b:f2:60:a3:0f:ab:73:f2:9b:cc:ca:54:
d0:60:a2:0c:f6:31:ea:5c:79:55:ce:e5:d9:fc:63:
c5:8a:b7:7f:21:13:0b:d3:b0:fd:b6:a5:0a:07:9d:
a9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:9B:D0:0D:DA:4F:81:7F:72:A7:55:25:7A:0F:AF:29:D8:8A:EC:3D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9ZvQDdpPgX9yp1Uleg-vKdiK7D0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
69:ed:e2:e2:27:f5:e8:a1:59:78:ed:cb:06:14:5b:43:82:0a:
7d:52:19:d5:b2:04:d8:cd:83:80:ab:20:27:a9:50:8c:18:42:
ad:fe:82:84:18:99:6a:a6:19:7a:7d:8b:38:a9:6a:c4:9c:e5:
df:b4:94:a4:80:6c:1c:0c:03:65:1c:78:35:cc:bc:bd:50:03:
3d:1a:e5:ce:36:b7:0d:a4:aa:d2:db:ee:f1:ce:10:cb:66:ff:
d3:26:60:68:bb:5f:d7:a8:74:16:e3:00:96:bf:d8:19:8c:b6:
7b:f3:56:46:16:0b:d2:fb:5d:e0:72:5b:5d:40:c0:e9:6c:5c:
65:eb:19:60:48:7e:8e:09:20:73:9e:f1:d4:ff:d1:c7:c8:27:
f0:dd:21:51:17:3e:26:0a:ef:e3:09:74:a0:7e:db:66:fb:2d:
3e:55:8d:c1:87:36:63:b0:97:51:fb:01:9e:56:73:9a:a0:84:
4b:58:3f:75:9a:8b:27:4a:84:bf:fe:b1:03:f2:90:f9:e4:b8:
e0:d3:d7:30:ae:46:c7:34:3c:3b:36:f3:9a:6b:e2:0a:61:24:
eb:87:6e:2a:3e:41:97:b9:02:46:f0:0d:07:c9:87:82:46:cc:
5f:9e:93:ee:29:68:b3:3d:06:c6:75:11:d4:aa:b7:2f:6f:50:
e1:6d:f8:4b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYUpN2gh9U8rfodnpmAaiJQUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjE5MDcwOTM1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTliZDAwZGRhNGY4MTdmNzJhNzU1MjU3YTBmYWYyOWQ4OGFlYzNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDktMOAQBm+HQW2X64XLsg6WcP9A
UnSSg2zYAIpn+NpMdzbFHfX4eNsBmw8KyAFIKtiy7a5BHVaxHz7ZVQHMxh17sy7D
ZSaf39eC6k8xZ4d9kTGWB3b5+4wPmeMHdu1belYOf04aRZHg66yBS2ANSW2VnmD4
qN78eaqwF0yU9g5CUMjyZ6ReAWc6p5njIV2wwtSzZnca+yH0DDkoKKZhlKe3DAay
8Q0AnbGugPgIE2wbs9jQhguuEVhJa1lEyvaT6IY3U/3wEVzErN2Kafzj35XDx8mb
8mCjD6tz8pvMylTQYKIM9jHqXHlVzuXZ/GPFird/IRML07D9tqUKB52pQwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPWb0A3aT4F/cqdVJXoPrynYiuw9MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvOVp2UURkcFBnWDl5cDFVbGVnLXZLZGlLN0QwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGnt4uIn9eihWXjtywYU
W0OCCn1SGdWyBNjNg4CrICepUIwYQq3+goQYmWqmGXp9izipasSc5d+0lKSAbBwM
A2UceDXMvL1QAz0a5c42tw2kqtLb7vHOEMtm/9MmYGi7X9eodBbjAJa/2BmMtnvz
VkYWC9L7XeByW11AwOlsXGXrGWBIfo4JIHOe8dT/0cfIJ/DdIVEXPiYK7+MJdKB+
22b7LT5VjcGHNmOwl1H7AZ5Wc5qghEtYP3WaiydKhL/+sQPykPnkuODT1zCuRsc0
PDs285pr4gphJOuHbio+QZe5AkbwDQfJh4JGzF+ek+4paLM9BsZ1EdSqty9vUOFt
+Es=
-----END CERTIFICATE-----
Generated at Thu May 1 11:27:32 2025 by rpki-client