Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ABc6EfohD3Xq7TdBLHzKyPPB8MA.roa
File: ABc6EfohD3Xq7TdBLHzKyPPB8MA.roa (raw, json)
Hash identifier: K27R2RUQGyALQlhS2egEABZJnRkOn0Ki0LwILS1+wXE=
Subject key identifier: 00:17:3A:11:FA:21:0F:75:EA:ED:37:41:2C:7C:CA:C8:F3:C1:F0:C0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018610C159C3C2A28326F729A7300214C711
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ABc6EfohD3Xq7TdBLHzKyPPB8MA.roa
Signing time: Thu 02 Feb 2023 06:12:32 +0000
ROA not before: Thu 02 Feb 2023 06:12:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:10:c1:59:c3:c2:a2:83:26:f7:29:a7:30:02:14:c7:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 2 06:12:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=00173a11fa210f75eaed37412c7ccac8f3c1f0c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:27:ab:77:19:db:ea:7f:0d:d0:6a:d4:5e:61:
91:e7:5d:fc:06:3d:99:aa:77:1d:9a:a9:72:2b:44:
53:f4:4e:ba:77:67:01:cd:44:d1:ca:f3:36:a3:b1:
a0:2a:2e:ef:35:ef:d4:75:a3:25:12:c8:84:fc:f6:
bc:13:8c:64:ef:2e:82:09:33:c2:ad:b2:8c:c5:19:
2f:d8:65:8f:75:ac:ee:0c:d5:3e:8b:af:6c:bb:ba:
21:a6:14:a9:47:0b:85:c6:da:0e:c0:5f:4a:0f:2b:
2f:5d:8f:3d:a2:50:3e:96:c6:49:d3:ec:3a:cc:f7:
ce:8a:73:e1:8c:4b:a1:0a:99:a5:05:82:83:89:55:
4b:d5:a1:16:a1:fb:47:e2:e3:24:fc:86:09:ee:2b:
28:ee:bf:2f:bd:cf:cb:c8:5d:5b:28:31:17:46:e2:
c3:f4:94:8d:7c:08:3d:50:b1:4a:f6:d5:f6:e9:f0:
d0:9e:15:e6:02:49:4b:31:3b:8f:e0:44:a1:e3:31:
11:2d:da:e5:d7:ac:28:1d:ed:a4:47:c0:a0:f7:d7:
d3:a4:c1:ca:d7:19:71:a9:b0:44:ff:45:5e:67:2a:
16:f9:78:a0:17:5a:a1:4e:3e:2a:b6:46:df:20:ba:
73:3b:2d:cd:45:5c:0e:02:9e:5e:3b:02:54:b0:9c:
26:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:17:3A:11:FA:21:0F:75:EA:ED:37:41:2C:7C:CA:C8:F3:C1:F0:C0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ABc6EfohD3Xq7TdBLHzKyPPB8MA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
09:5e:64:31:b5:80:24:c8:d1:1b:31:8a:6e:17:0c:1d:ab:80:
14:06:15:16:e9:2b:5f:51:6b:31:86:83:8b:8f:cc:bf:d1:fa:
c2:66:90:44:a6:aa:80:2f:d6:74:a2:aa:4e:bb:b8:34:99:cd:
77:16:7c:4a:f5:c5:57:4b:34:79:6f:3a:b5:42:5d:65:38:e3:
4c:b1:88:48:cd:91:c7:1a:e4:ec:b9:2b:4b:f9:05:29:b3:31:
7d:3e:6c:87:37:8a:88:89:45:a7:61:35:27:f0:8e:0b:04:a2:
bf:86:01:e9:78:f4:6a:92:dd:0a:d1:d9:eb:36:d5:8b:3f:59:
fb:51:e6:f1:3e:37:89:a6:75:1e:17:5b:c1:11:ea:be:84:9c:
60:c4:9c:f6:7a:c7:33:33:38:ed:64:3e:c6:7b:66:4b:c1:44:
2f:c3:69:37:54:cb:e1:ff:17:25:58:e9:ad:ec:da:c4:ad:30:
e2:03:0f:cb:85:ab:70:d5:e9:6f:8e:8b:a5:93:58:a7:a8:9b:
be:bc:6d:07:0d:00:ca:ae:fb:9a:08:59:97:54:89:f2:06:84:
34:b6:5b:70:82:f4:c4:1b:86:2b:ef:92:62:48:24:e6:ca:cf:
fd:0a:77:66:48:fa:b4:0b:9d:5f:64:33:73:88:07:75:59:35:
b9:eb:6c:8f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYYQwVnDwqKDJvcppzACFMcRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjAyMDYxMjMyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDE3M2ExMWZhMjEwZjc1ZWFlZDM3NDEyYzdjY2FjOGYzYzFmMGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSerdxnb6n8N0GrUXmGR5138Bj2Z
qncdmqlyK0RT9E66d2cBzUTRyvM2o7GgKi7vNe/UdaMlEsiE/Pa8E4xk7y6CCTPC
rbKMxRkv2GWPdazuDNU+i69su7ohphSpRwuFxtoOwF9KDysvXY89olA+lsZJ0+w6
zPfOinPhjEuhCpmlBYKDiVVL1aEWoftH4uMk/IYJ7iso7r8vvc/LyF1bKDEXRuLD
9JSNfAg9ULFK9tX26fDQnhXmAklLMTuP4ESh4zERLdrl16woHe2kR8Cg99fTpMHK
1xlxqbBE/0VeZyoW+XigF1qhTj4qtkbfILpzOy3NRVwOAp5eOwJUsJwmqQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAAXOhH6IQ916u03QSx8ysjzwfDAMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvQUJjNkVmb2hEM1hxN1RkQkxIekt5UFBCOE1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAleZDG1gCTI0Rsxim4X
DB2rgBQGFRbpK19RazGGg4uPzL/R+sJmkESmqoAv1nSiqk67uDSZzXcWfEr1xVdL
NHlvOrVCXWU440yxiEjNkcca5Oy5K0v5BSmzMX0+bIc3ioiJRadhNSfwjgsEor+G
Ael49GqS3QrR2es21Ys/WftR5vE+N4mmdR4XW8ER6r6EnGDEnPZ6xzMzOO1kPsZ7
ZkvBRC/DaTdUy+H/FyVY6a3s2sStMOIDD8uFq3DV6W+Oi6WTWKeom768bQcNAMqu
+5oIWZdUifIGhDS2W3CC9MQbhivvkmJIJObKz/0Kd2ZI+rQLnV9kM3OIB3VZNbnr
bI8=
-----END CERTIFICATE-----
Generated at Thu May 1 11:16:31 2025 by rpki-client