Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AB9e21S1SeJHwz5Wr3P7lOTgTHY.roa
File: AB9e21S1SeJHwz5Wr3P7lOTgTHY.roa (raw, json)
Hash identifier: XvSjhObBMehQYkU7tJy5Jg/244t4fL9PVLPXu/22meU=
Subject key identifier: 00:1F:5E:DB:54:B5:49:E2:47:C3:3E:56:AF:73:FB:94:E4:E0:4C:76
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6F046A19
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AB9e21S1SeJHwz5Wr3P7lOTgTHY.roa
Signing time: Wed 02 Mar 2022 10:08:36 +0000
ROA not before: Wed 02 Mar 2022 10:08:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1862560281 (0x6f046a19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 2 10:08:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=001f5edb54b549e247c33e56af73fb94e4e04c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9d:bf:66:55:b0:9c:05:c4:a3:5c:90:47:68:
df:2e:a3:db:b3:25:89:bf:e7:82:d6:f7:21:e1:d1:
48:76:d5:9a:d2:5a:d8:db:06:b6:a2:8a:b6:3c:8b:
f2:75:08:71:86:da:7c:99:c0:c4:dd:57:54:a1:bd:
d1:d9:30:a8:ab:72:0f:f2:7a:8c:6e:4b:d3:cd:79:
f6:c6:02:3b:94:50:e9:3b:55:fe:b1:b5:c9:2c:0b:
0a:59:f8:fa:77:b5:1c:ab:49:8f:91:9e:8a:ca:81:
99:96:f5:9e:cd:f9:57:c7:fd:54:90:d6:b4:9b:4d:
08:1c:a8:c6:00:dd:9e:40:ad:51:3b:58:95:62:bd:
0e:cb:8a:92:d7:b2:96:a1:65:e6:a8:bc:f7:f4:74:
72:03:27:d4:ad:79:b7:aa:cc:6b:8b:d9:e7:22:96:
a9:d7:af:b7:1d:13:e0:60:b1:b7:d3:2b:b6:f0:f8:
07:e4:46:ba:10:19:c3:b1:50:f4:4c:12:f0:ac:4f:
c5:d1:ed:a4:a0:5e:79:fc:52:06:a5:3b:fd:d6:4d:
cd:b5:fe:a8:df:30:53:3a:41:e1:36:3b:0c:e6:05:
41:7c:95:33:14:9e:88:17:1c:21:90:12:05:73:39:
6d:b9:a3:1a:2d:10:a6:c6:de:33:3d:e9:03:cd:ad:
c5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:1F:5E:DB:54:B5:49:E2:47:C3:3E:56:AF:73:FB:94:E4:E0:4C:76
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AB9e21S1SeJHwz5Wr3P7lOTgTHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
61:6a:1d:09:cf:5a:cd:ab:cd:34:15:6e:35:12:b6:25:7e:ff:
27:4c:d5:fe:08:79:58:11:7f:7b:e8:6a:71:5d:07:49:70:52:
24:d8:ce:b3:99:15:83:2d:dd:fa:01:ff:e4:b3:ca:0e:ae:06:
70:71:93:eb:e1:b9:fa:5c:40:51:19:12:cf:66:78:28:ca:17:
cb:16:8d:64:7f:de:2d:29:a9:4f:58:19:54:99:03:db:a0:08:
b3:e0:c3:d0:c9:d1:c1:38:88:ac:d1:89:9c:19:dd:76:7d:ac:
22:da:46:ab:cb:d0:67:a6:49:ab:ce:52:79:1a:26:e7:40:9e:
4c:3d:08:b8:0f:52:11:1e:6f:6b:cf:12:82:23:43:3e:6a:a8:
8e:57:10:54:70:cd:3e:4c:8e:51:e4:8e:bc:00:9d:1f:47:c4:
a2:7f:6a:b9:f7:f6:e0:85:bd:34:96:54:75:f5:6f:d1:29:6d:
bb:99:7d:87:9b:b5:58:49:29:a2:c9:0e:c4:19:1c:36:3c:cb:
d9:14:86:a6:69:1b:af:1b:7a:9c:6c:11:bd:b4:13:80:d1:c8:
0b:27:9d:39:c0:ad:88:ad:03:15:96:28:dd:e5:25:0a:86:5f:
1d:6b:93:d4:0c:c5:d1:d9:57:8c:d0:92:a0:8d:38:e1:b0:7e:
1e:c1:03:48
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEbwRqGTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDMw
MjEwMDgzNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDAxZjVlZGI1NGI1
NDllMjQ3YzMzZTU2YWY3M2ZiOTRlNGUwNGM3NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMmdv2ZVsJwFxKNckEdo3y6j27Mlib/ngtb3IeHRSHbVmtJa
2NsGtqKKtjyL8nUIcYbafJnAxN1XVKG90dkwqKtyD/J6jG5L08159sYCO5RQ6TtV
/rG1ySwLCln4+ne1HKtJj5GeisqBmZb1ns35V8f9VJDWtJtNCByoxgDdnkCtUTtY
lWK9DsuKkteylqFl5qi89/R0cgMn1K15t6rMa4vZ5yKWqdevtx0T4GCxt9MrtvD4
B+RGuhAZw7FQ9EwS8KxPxdHtpKBeefxSBqU7/dZNzbX+qN8wUzpB4TY7DOYFQXyV
MxSeiBccIZASBXM5bbmjGi0QpsbeMz3pA82txSUCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBQAH17bVLVJ4kfDPlavc/uU5OBMdjAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L0FCOWUyMVMxU2VKSHd6NVdyM1A3bE9UZ1RIWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQBhah0Jz1rNq800FW41ErYlfv8nTNX+CHlYEX97
6GpxXQdJcFIk2M6zmRWDLd36Af/ks8oOrgZwcZPr4bn6XEBRGRLPZngoyhfLFo1k
f94tKalPWBlUmQPboAiz4MPQydHBOIis0YmcGd12fawi2kary9BnpkmrzlJ5Gibn
QJ5MPQi4D1IRHm9rzxKCI0M+aqiOVxBUcM0+TI5R5I68AJ0fR8Sif2q59/bghb00
llR19W/RKW27mX2Hm7VYSSmiyQ7EGRw2PMvZFIamaRuvG3qcbBG9tBOA0cgLJ505
wK2IrQMVlijd5SUKhl8da5PUDMXR2VeM0JKgjTjhsH4ewQNI
-----END CERTIFICATE-----
Generated at Thu May 1 03:07:35 2025 by rpki-client