Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9xPuKQvDSx1MikgwPFLREtrd38c.roa
File: 9xPuKQvDSx1MikgwPFLREtrd38c.roa (raw, json)
Hash identifier: tNUde810NZotflH8Rjzwnk30jOcyNG5sLr0g/gi+TVM=
Subject key identifier: F7:13:EE:29:0B:C3:4B:1D:4C:8A:48:30:3C:52:D1:12:DA:DD:DF:C7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185052D1D29FD0339F239F7E25745104E26
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9xPuKQvDSx1MikgwPFLREtrd38c.roa
Signing time: Mon 12 Dec 2022 07:12:00 +0000
ROA not before: Mon 12 Dec 2022 07:12:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:05:2d:1d:29:fd:03:39:f2:39:f7:e2:57:45:10:4e:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 12 07:12:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f713ee290bc34b1d4c8a48303c52d112dadddfc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:00:bb:83:cb:05:bc:ff:7a:d5:7f:e8:08:a6:
56:37:0f:07:99:e9:c3:a0:33:56:c5:57:bf:74:f9:
86:56:ff:ac:31:f5:a8:8e:5a:7b:2c:e1:1d:c2:fe:
d1:c5:3f:ea:ec:6b:1b:67:0d:52:40:1d:d9:83:ee:
b1:f4:bc:bb:4d:26:2d:cd:5b:18:ec:82:f2:33:c3:
72:f4:90:28:dd:81:3b:68:5e:9d:19:c3:e4:32:b5:
ad:23:4a:db:e9:4b:6a:69:c0:4c:c3:25:9c:8e:8b:
e2:02:e7:d9:4d:c4:17:d5:0b:59:f1:30:ef:40:3c:
c0:3d:0b:01:6a:00:7e:ce:59:c4:66:5e:8c:35:36:
ac:fb:00:ca:52:ac:d1:8e:67:50:b3:ac:85:7c:3d:
ed:33:67:de:9d:db:dd:96:90:41:72:11:d1:85:46:
b2:28:55:a4:3b:00:b2:c8:c3:7b:78:df:bd:a8:90:
28:45:12:37:22:25:11:0c:d0:85:42:c7:8d:68:c1:
a9:4e:84:c3:46:c6:5b:3e:64:c3:60:0b:92:75:3f:
b4:17:ce:08:52:ca:1e:bc:34:4e:c4:c9:e2:ea:20:
f3:76:24:6a:00:70:57:f1:0b:d6:2f:16:01:2f:66:
66:72:67:d2:9c:ea:72:d5:c3:10:9e:29:58:4f:7a:
a7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:13:EE:29:0B:C3:4B:1D:4C:8A:48:30:3C:52:D1:12:DA:DD:DF:C7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9xPuKQvDSx1MikgwPFLREtrd38c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2a:c6:b7:6a:ee:df:cd:ae:be:d2:50:53:64:74:eb:ef:45:86:
8b:91:f2:a0:71:1f:20:95:47:cc:47:95:50:18:85:e1:20:3e:
a1:c4:84:db:81:5b:f8:82:e8:51:d7:bc:cc:c9:0c:38:fc:1c:
cb:f2:c1:0d:25:65:36:dd:a4:12:68:2d:a8:ab:e6:e9:8e:aa:
04:e8:71:61:35:e9:91:3a:40:04:98:81:fa:65:89:dc:f4:a1:
f5:8d:56:ed:54:95:e2:0d:b1:6b:3c:c0:f1:71:0a:b5:22:4a:
bb:36:bb:66:0f:01:5a:4e:01:59:c5:95:3d:9f:11:ce:ae:04:
6d:68:67:ed:34:8a:91:ab:1f:2b:f9:04:6e:b5:fc:39:d8:9e:
61:89:1a:57:86:c3:dd:e3:6b:da:07:88:13:79:0a:6c:89:ba:
f3:6b:8d:b0:2f:45:80:b4:1d:a9:09:d9:8e:31:b9:f4:88:88:
98:5d:e7:ab:20:9d:d3:a5:b1:d6:95:fd:38:5c:b7:ee:61:ee:
a5:7d:15:1a:6a:45:55:29:c0:24:81:cf:ff:f8:e0:51:bc:1f:
ff:73:74:5f:5f:2f:d5:4d:af:d1:17:bd:5a:3a:a0:3c:75:9c:
70:7f:33:21:92:09:7e:3f:2f:34:44:2a:fa:ab:5d:6d:67:5c:
3e:7d:1b:36
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYUFLR0p/QM58jn34ldFEE4mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjEyMDcxMjAwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzEzZWUyOTBiYzM0YjFkNGM4YTQ4MzAzYzUyZDExMmRhZGRkZmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAC7g8sFvP961X/oCKZWNw8HmenD
oDNWxVe/dPmGVv+sMfWojlp7LOEdwv7RxT/q7GsbZw1SQB3Zg+6x9Ly7TSYtzVsY
7ILyM8Ny9JAo3YE7aF6dGcPkMrWtI0rb6UtqacBMwyWcjoviAufZTcQX1QtZ8TDv
QDzAPQsBagB+zlnEZl6MNTas+wDKUqzRjmdQs6yFfD3tM2fendvdlpBBchHRhUay
KFWkOwCyyMN7eN+9qJAoRRI3IiURDNCFQseNaMGpToTDRsZbPmTDYAuSdT+0F84I
UsoevDROxMni6iDzdiRqAHBX8QvWLxYBL2ZmcmfSnOpy1cMQnilYT3qnVwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPcT7ikLw0sdTIpIMDxS0RLa3d/HMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvOXhQdUtRdkRTeDFNaWtnd1BGTFJFdHJkMzhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACrGt2ru382uvtJQU2R0
6+9FhouR8qBxHyCVR8xHlVAYheEgPqHEhNuBW/iC6FHXvMzJDDj8HMvywQ0lZTbd
pBJoLair5umOqgTocWE16ZE6QASYgfplidz0ofWNVu1UleINsWs8wPFxCrUiSrs2
u2YPAVpOAVnFlT2fEc6uBG1oZ+00ipGrHyv5BG61/DnYnmGJGleGw93ja9oHiBN5
CmyJuvNrjbAvRYC0HakJ2Y4xufSIiJhd56sgndOlsdaV/Thct+5h7qV9FRpqRVUp
wCSBz//44FG8H/9zdF9fL9VNr9EXvVo6oDx1nHB/MyGSCX4/LzREKvqrXW1nXD59
GzY=
-----END CERTIFICATE-----
Generated at Thu May 1 03:39:25 2025 by rpki-client