Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/A432mg0LTQy5TYxmh_HZwI705zI.roa
File: A432mg0LTQy5TYxmh_HZwI705zI.roa (raw, json)
Hash identifier: i48qm0QBuM2LHIebmY6gSyi5R+SmGcr6gayHo4NDB40=
Subject key identifier: 03:8D:F6:9A:0D:0B:4D:0C:B9:4D:8C:66:87:F1:D9:C0:8E:F4:E7:32
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 807F0E4B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/A432mg0LTQy5TYxmh_HZwI705zI.roa
Signing time: Mon 02 May 2022 18:04:35 +0000
ROA not before: Mon 02 May 2022 18:04:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:85f2:f2e/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2155810379 (0x807f0e4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 2 18:04:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=038df69a0d0b4d0cb94d8c6687f1d9c08ef4e732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ab:3b:af:15:3c:13:c5:17:d6:ce:b1:3b:b5:
11:64:d4:d2:58:be:bb:20:53:0c:6f:94:33:57:75:
97:5c:a6:7e:5c:9d:98:52:ef:4d:30:1f:00:67:9e:
40:e4:41:cf:cc:cb:cf:07:93:86:af:43:b5:90:0a:
7f:71:ff:dc:5f:46:3b:70:44:5c:46:06:ed:09:34:
a9:ae:0a:76:9e:53:a8:a7:b1:6c:0c:fd:25:bf:46:
df:b7:ce:47:0a:c3:ae:d4:b3:27:96:65:94:7d:f1:
de:9b:12:05:bf:a2:f6:24:28:d5:07:fc:ce:ef:28:
6b:30:6e:f9:0f:92:c4:df:5c:7a:3c:a3:4c:92:f7:
20:09:4c:03:46:47:af:19:7c:de:19:5a:ff:56:00:
e2:c4:53:3b:c0:3e:41:37:69:0c:13:e4:f6:40:5d:
b7:52:c6:1e:84:cc:90:66:c6:f7:76:b7:a9:c6:84:
b0:1b:44:a5:f1:86:5c:7f:8e:a2:47:c5:d8:b6:34:
ad:36:d8:e3:8f:e3:b4:8a:73:82:6c:49:cc:72:46:
0c:b2:ee:ce:ac:bd:86:d4:e7:db:98:b4:90:d0:29:
d0:85:62:f9:18:e1:54:55:a9:cf:ee:83:92:9f:59:
41:13:6f:63:3a:26:b5:d2:c2:c4:e7:29:c4:14:3b:
36:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:8D:F6:9A:0D:0B:4D:0C:B9:4D:8C:66:87:F1:D9:C0:8E:F4:E7:32
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/A432mg0LTQy5TYxmh_HZwI705zI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
98:1a:e2:83:eb:0a:fa:0f:44:53:0b:7d:91:0f:22:ee:c4:73:
4a:de:1d:50:cc:77:4d:a0:2e:ae:4e:9e:08:43:89:91:aa:be:
1a:01:3a:e4:0b:54:47:d4:c3:79:90:68:e7:29:58:2b:a8:31:
a0:19:90:3a:24:0e:6b:ae:d6:d8:4b:c0:1e:2a:e6:d4:87:96:
df:8a:8f:7b:67:b0:50:49:ee:ca:4c:fe:e9:56:a0:30:da:4d:
d6:be:5f:ee:0a:e2:16:f6:44:01:4b:45:22:5c:70:3f:63:73:
24:15:9b:6b:81:1c:bf:11:de:d5:70:70:4c:e7:70:21:11:29:
55:07:63:87:28:8e:e9:be:f4:f7:4a:10:14:ea:1d:6f:cc:e0:
65:f4:f0:a1:85:07:80:b2:7b:aa:54:cb:dd:75:17:1f:f8:01:
e0:ff:c7:39:bd:86:c9:91:db:94:8b:5f:ae:e3:79:b1:56:1f:
26:99:bc:73:d5:79:15:95:4d:e4:0c:11:50:b9:63:fc:af:3d:
f1:7a:ca:9d:10:81:85:b7:7b:3b:f9:c8:77:80:bf:7f:8c:31:
28:3a:40:18:63:2e:a7:7d:4c:cb:78:5b:7b:95:c7:07:e5:6a:
d7:e3:aa:c2:15:27:15:fe:97:b3:3d:98:10:7d:b9:c5:ad:b6:
32:b3:4c:e1
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAIB/DkswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA1
MDIxODA0MzVaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDAzOGRmNjlhMGQw
YjRkMGNiOTRkOGM2Njg3ZjFkOWMwOGVmNGU3MzIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCaqzuvFTwTxRfWzrE7tRFk1NJYvrsgUwxvlDNXdZdcpn5c
nZhS700wHwBnnkDkQc/My88Hk4avQ7WQCn9x/9xfRjtwRFxGBu0JNKmuCnaeU6in
sWwM/SW/Rt+3zkcKw67UsyeWZZR98d6bEgW/ovYkKNUH/M7vKGswbvkPksTfXHo8
o0yS9yAJTANGR68ZfN4ZWv9WAOLEUzvAPkE3aQwT5PZAXbdSxh6EzJBmxvd2t6nG
hLAbRKXxhlx/jqJHxdi2NK022OOP47SKc4JsScxyRgyy7s6svYbU59uYtJDQKdCF
YvkY4VRVqc/ug5KfWUETb2M6JrXSwsTnKcQUOzbvAgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQUA432mg0LTQy5TYxmh/HZwI705zIwHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS9BNDMybWcwTFRReTVUWXhtaF9IWndJNzA1ekkucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEAmBrig+sK+g9EUwt9kQ8i7sRzSt4dUMx3TaAu
rk6eCEOJkaq+GgE65AtUR9TDeZBo5ylYK6gxoBmQOiQOa67W2EvAHirm1IeW34qP
e2ewUEnuykz+6VagMNpN1r5f7griFvZEAUtFIlxwP2NzJBWba4EcvxHe1XBwTOdw
IREpVQdjhyiO6b7090oQFOodb8zgZfTwoYUHgLJ7qlTL3XUXH/gB4P/HOb2GyZHb
lItfruN5sVYfJpm8c9V5FZVN5AwRULlj/K898XrKnRCBhbd7O/nId4C/f4wxKDpA
GGMup31My3hbe5XHB+Vq1+OqwhUnFf6Xsz2YEH25xa22MrNM4Q==
-----END CERTIFICATE-----
Generated at Sat May 3 00:40:25 2025 by rpki-client