Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AfQ0Kk5oZ3xvKaZAXQYeZCSimwo.roa
File: AfQ0Kk5oZ3xvKaZAXQYeZCSimwo.roa (raw, json)
Hash identifier: 8yfK4rKT9mJ6sjpXh0L3K4sbhjaEWE18xl7KN/VdO+8=
Subject key identifier: 01:F4:34:2A:4E:68:67:7C:6F:29:A6:40:5D:06:1E:64:24:A2:9B:0A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018547E5D061007FFB43DA1EB4750A742D29
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AfQ0Kk5oZ3xvKaZAXQYeZCSimwo.roa
Signing time: Sun 25 Dec 2022 06:08:41 +0000
ROA not before: Sun 25 Dec 2022 06:08:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:47:e5:d0:61:00:7f:fb:43:da:1e:b4:75:0a:74:2d:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 25 06:08:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=01f4342a4e68677c6f29a6405d061e6424a29b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:34:ba:20:b2:ec:ab:c5:08:2d:51:58:57:ee:
02:d2:79:ec:5c:4a:5f:26:c5:c4:c6:f8:bd:d3:ad:
6c:47:b5:64:d6:aa:c8:22:87:5c:09:3c:13:6a:4b:
29:55:3a:a8:dc:0c:11:2d:23:35:e8:fa:26:2b:45:
69:f3:cd:01:86:52:32:ca:3a:5e:22:ac:57:73:97:
e7:cd:12:9d:c3:83:65:80:bb:25:7b:aa:84:cb:6a:
c6:2c:b2:a2:b3:e2:01:da:1c:38:3c:19:a3:71:20:
37:a3:78:46:b1:7b:dd:1e:af:fe:2d:d5:7c:83:89:
39:49:ad:cb:6f:6c:53:e8:12:b7:59:c0:20:77:bc:
df:56:0e:7f:6d:a8:3c:d4:a1:5e:09:76:95:89:b1:
9c:6a:8d:14:f9:6d:ea:62:2f:ff:88:48:64:20:9a:
f7:d5:6f:84:ef:f6:9e:5c:dd:62:3a:78:d8:09:fd:
86:c9:93:68:56:1d:d5:80:d7:0c:dc:ca:55:7a:0f:
9f:c3:67:51:5e:4a:57:8c:2b:a0:fe:1a:f8:a7:50:
6d:51:00:aa:12:f2:f9:02:c7:51:6d:43:b2:7a:94:
4e:ea:fa:6f:d7:6c:95:61:54:2a:0f:a8:78:25:59:
6b:8c:29:7a:38:5a:5e:3e:e3:5f:6d:cc:75:34:98:
39:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F4:34:2A:4E:68:67:7C:6F:29:A6:40:5D:06:1E:64:24:A2:9B:0A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AfQ0Kk5oZ3xvKaZAXQYeZCSimwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1b:aa:6e:86:1d:1f:4c:56:c5:03:07:ac:f7:34:21:b5:4a:b8:
29:9a:83:50:84:d4:63:ab:c0:3c:26:6a:6f:e5:c9:f6:d0:8e:
d8:d0:8f:22:07:d5:62:90:4a:d8:2b:66:48:bb:6d:9d:a6:50:
a1:20:02:06:17:13:60:3d:b8:4c:b7:23:3c:f5:a0:d8:ff:42:
dc:e0:fe:05:22:18:d3:bd:43:18:68:9a:4a:21:f4:0b:8a:ce:
bf:51:f9:f6:eb:86:8b:ea:22:40:3c:c4:e0:0f:dc:45:82:1d:
eb:42:5c:29:3c:58:02:27:e1:25:94:a0:16:89:44:70:f8:c0:
76:dd:de:9f:12:1c:c3:20:4e:bd:bb:c2:f8:1a:c3:59:b1:a8:
6b:75:d9:36:bd:7c:86:6c:29:cc:b0:48:8d:d8:91:90:df:20:
b1:c9:e4:c6:6e:84:74:a8:1f:55:99:ff:4d:76:14:b1:9e:89:
5f:3c:49:30:c6:44:09:0a:cd:91:99:bd:07:02:f7:ee:cc:57:
a8:e5:16:27:5e:f9:2e:b8:23:6c:be:06:fc:1e:b8:30:85:4f:
b7:82:bc:d2:52:07:f7:9b:4a:39:1f:cb:ca:6b:03:33:24:84:
8a:d2:2c:a4:d1:83:64:69:ad:20:e9:78:30:69:d7:2b:00:08:
e8:7e:a5:1f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVH5dBhAH/7Q9oetHUKdC0pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjI1MDYwODQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMWY0MzQyYTRlNjg2NzdjNmYyOWE2NDA1ZDA2MWU2NDI0YTI5YjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjS6ILLsq8UILVFYV+4C0nnsXEpf
JsXExvi9061sR7Vk1qrIIodcCTwTakspVTqo3AwRLSM16PomK0Vp880BhlIyyjpe
IqxXc5fnzRKdw4NlgLsle6qEy2rGLLKis+IB2hw4PBmjcSA3o3hGsXvdHq/+LdV8
g4k5Sa3Lb2xT6BK3WcAgd7zfVg5/bag81KFeCXaVibGcao0U+W3qYi//iEhkIJr3
1W+E7/aeXN1iOnjYCf2GyZNoVh3VgNcM3MpVeg+fw2dRXkpXjCug/hr4p1BtUQCq
EvL5AsdRbUOyepRO6vpv12yVYVQqD6h4JVlrjCl6OFpePuNfbcx1NJg5zwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAH0NCpOaGd8bymmQF0GHmQkopsKMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvQWZRMEtrNW9aM3h2S2FaQVhRWWVaQ1NpbXdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABuqboYdH0xWxQMHrPc0
IbVKuCmag1CE1GOrwDwmam/lyfbQjtjQjyIH1WKQStgrZki7bZ2mUKEgAgYXE2A9
uEy3Izz1oNj/Qtzg/gUiGNO9Qxhomkoh9AuKzr9R+fbrhovqIkA8xOAP3EWCHetC
XCk8WAIn4SWUoBaJRHD4wHbd3p8SHMMgTr27wvgaw1mxqGt12Ta9fIZsKcywSI3Y
kZDfILHJ5MZuhHSoH1WZ/012FLGeiV88STDGRAkKzZGZvQcC9+7MV6jlFide+S64
I2y+BvweuDCFT7eCvNJSB/ebSjkfy8prAzMkhIrSLKTRg2RprSDpeDBp1ysACOh+
pR8=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:08 2025 by rpki-client