Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AcUNdgEcYlm4iCGJdIohNxcWXqk.roa
File: AcUNdgEcYlm4iCGJdIohNxcWXqk.roa (raw, json)
Hash identifier: vYYgV4kO9sYDVPnzuvCOeN0w8iWaedk3SZTR602RgW4=
Subject key identifier: 01:C5:0D:76:01:1C:62:59:B8:88:21:89:74:8A:21:37:17:16:5E:A9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184E6B749BAD194DB56196FCC6274790B7A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AcUNdgEcYlm4iCGJdIohNxcWXqk.roa
Signing time: Tue 06 Dec 2022 09:14:42 +0000
ROA not before: Tue 06 Dec 2022 09:14:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e6:b7:49:ba:d1:94:db:56:19:6f:cc:62:74:79:0b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 6 09:14:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=01c50d76011c6259b8882189748a213717165ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:46:cc:c7:79:fe:45:14:45:b6:25:e1:ce:73:
de:c7:b6:e2:ae:4a:50:cf:84:b3:e3:ad:27:89:f0:
32:0c:f6:b8:03:a2:8b:da:c0:1a:90:09:2f:0a:54:
9a:05:e2:c3:fd:2a:7f:60:18:a5:ce:a0:04:13:c3:
fa:b8:1d:f1:cf:c9:24:fa:e0:f1:30:e3:38:bc:79:
d4:90:93:39:5a:a1:c6:e2:8d:4c:01:09:0b:51:bf:
e4:eb:19:53:44:60:91:65:f8:45:f9:b1:7a:12:1f:
6d:56:cf:47:19:e0:59:c6:b3:95:cc:76:f4:a2:ea:
a8:37:c7:4b:3b:a6:82:c8:db:30:3b:82:7e:0e:69:
1f:62:d9:90:b4:05:7c:44:b4:a6:5e:d6:9a:2b:a9:
0b:bd:b0:f1:5d:e5:35:fa:02:87:04:f8:ee:a5:04:
3d:26:7f:b7:12:f9:cd:e9:dc:36:1f:81:72:07:30:
d5:76:a6:c2:27:2e:87:08:4c:06:c2:3e:49:c9:df:
d3:5c:40:cf:33:c0:69:ec:8e:1e:14:f8:fe:d1:e1:
0b:22:8d:43:58:13:ad:24:a7:38:17:4d:c8:e7:49:
98:12:57:8d:ab:15:29:a8:78:42:8b:7d:7a:76:a1:
79:4b:f2:95:8b:14:0d:e6:fc:48:89:9a:65:3f:fc:
19:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C5:0D:76:01:1C:62:59:B8:88:21:89:74:8A:21:37:17:16:5E:A9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AcUNdgEcYlm4iCGJdIohNxcWXqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
75:8a:36:8c:58:55:b2:54:59:53:25:04:f8:ec:e4:f1:03:0e:
28:1e:bf:f9:96:02:f6:a3:0d:39:e4:fd:22:29:34:27:56:95:
73:f4:d9:d2:c2:86:29:21:6a:84:d3:a7:65:d0:df:18:95:c5:
8b:bd:e9:4f:cb:e9:25:05:91:7b:11:b2:35:2e:80:05:05:9a:
d8:c6:f5:c8:4f:6c:89:c4:cb:e6:f7:38:ea:4e:c9:7f:e2:db:
44:61:c8:30:ec:a1:56:c9:18:85:6f:4e:8d:8b:62:58:42:98:
d7:5f:a1:8d:4f:cf:91:75:64:23:41:0d:7b:58:db:a0:3d:34:
b9:35:c0:57:35:6f:04:fd:fe:43:c7:bf:c8:6d:38:de:77:3b:
03:04:67:ca:73:c6:ad:ba:2b:66:3f:7b:f1:5b:17:1d:60:22:
7c:65:ab:b9:4a:fe:b5:16:78:f6:95:36:8b:77:4c:f8:54:6d:
4f:e9:ba:be:b7:47:ec:c1:fd:b0:f4:be:96:2c:e9:dd:2b:fe:
7b:ce:52:22:a1:da:5b:e0:0e:e2:91:14:80:48:d9:c6:fc:22:
fe:77:e0:eb:26:1e:8e:66:74:5c:0e:cf:28:fe:af:10:2b:52:
b4:32:3e:ba:46:a4:90:67:04:de:c3:df:2a:67:34:ef:ca:ee:
e2:06:22:34
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYTmt0m60ZTbVhlvzGJ0eQt6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjA2MDkxNDQyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMWM1MGQ3NjAxMWM2MjU5Yjg4ODIxODk3NDhhMjEzNzE3MTY1ZWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEbMx3n+RRRFtiXhznPex7birkpQ
z4Sz460nifAyDPa4A6KL2sAakAkvClSaBeLD/Sp/YBilzqAEE8P6uB3xz8kk+uDx
MOM4vHnUkJM5WqHG4o1MAQkLUb/k6xlTRGCRZfhF+bF6Eh9tVs9HGeBZxrOVzHb0
ouqoN8dLO6aCyNswO4J+DmkfYtmQtAV8RLSmXtaaK6kLvbDxXeU1+gKHBPjupQQ9
Jn+3EvnN6dw2H4FyBzDVdqbCJy6HCEwGwj5Jyd/TXEDPM8Bp7I4eFPj+0eELIo1D
WBOtJKc4F03I50mYEleNqxUpqHhCi316dqF5S/KVixQN5vxIiZplP/wZuQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAHFDXYBHGJZuIghiXSKITcXFl6pMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvQWNVTmRnRWNZbG00aUNHSmRJb2hOeGNXWHFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHWKNoxYVbJUWVMlBPjs
5PEDDigev/mWAvajDTnk/SIpNCdWlXP02dLChikhaoTTp2XQ3xiVxYu96U/L6SUF
kXsRsjUugAUFmtjG9chPbInEy+b3OOpOyX/i20RhyDDsoVbJGIVvTo2LYlhCmNdf
oY1Pz5F1ZCNBDXtY26A9NLk1wFc1bwT9/kPHv8htON53OwMEZ8pzxq26K2Y/e/Fb
Fx1gInxlq7lK/rUWePaVNot3TPhUbU/pur63R+zB/bD0vpYs6d0r/nvOUiKh2lvg
DuKRFIBI2cb8Iv534OsmHo5mdFwOzyj+rxArUrQyPrpGpJBnBN7D3ypnNO/K7uIG
IjQ=
-----END CERTIFICATE-----
Generated at Sat May 3 08:01:42 2025 by rpki-client