Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AkjY_hUFpi7AdhAvDEwR9T3GYsk.roa
File: AkjY_hUFpi7AdhAvDEwR9T3GYsk.roa (raw, json)
Hash identifier: 932Uu7E35FcYk60mdtRszzH/D8Rg0SKByq8wnR8T0zg=
Subject key identifier: 02:48:D8:FE:15:05:A6:2E:C0:76:10:2F:0C:4C:11:F5:3D:C6:62:C9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018529702C0F240BF56A5C906DE667DB9747
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AkjY_hUFpi7AdhAvDEwR9T3GYsk.roa
Signing time: Mon 19 Dec 2022 08:11:35 +0000
ROA not before: Mon 19 Dec 2022 08:11:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:29:70:2c:0f:24:0b:f5:6a:5c:90:6d:e6:67:db:97:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 19 08:11:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0248d8fe1505a62ec076102f0c4c11f53dc662c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c5:0b:9c:dc:9a:a2:da:d7:f1:2f:07:6d:e0:
d2:86:af:e4:cb:5f:34:76:d1:4a:0c:c7:6c:2e:53:
f0:46:13:b1:7f:e5:b6:f2:d0:ba:fa:69:fd:46:c6:
ab:5a:6d:a2:56:63:c7:21:b5:dc:95:98:53:af:e8:
90:16:f4:6e:63:df:c2:fe:7d:00:9f:c8:d8:19:36:
9a:38:ae:ca:f3:86:0e:b5:88:bb:db:8a:ad:c4:f5:
8c:e5:cf:93:8a:7a:f7:2e:a4:3e:3c:d7:73:bd:53:
30:ed:71:cc:b1:9a:63:f5:ec:16:a0:b0:c6:83:4d:
2c:1a:1f:9c:af:0a:36:38:b6:83:f4:c6:de:cd:3f:
f2:2f:0c:0d:78:a6:f2:11:64:47:77:4d:7c:4c:9e:
2f:3e:34:2f:58:d7:80:34:2d:08:05:60:eb:61:d1:
3a:4e:2c:67:47:3b:cb:42:24:7a:6d:75:15:00:fa:
7b:2d:98:c7:ed:74:07:19:c2:c4:ef:a8:6f:6d:fc:
be:97:2d:a7:1c:c3:4d:0b:e3:0f:f9:6f:02:33:f7:
52:70:3b:80:e4:28:bb:d5:6f:37:dc:4b:4d:a7:50:
d3:6e:76:26:86:b3:a3:fa:56:b7:50:11:63:df:d8:
e6:fb:e1:57:2c:a8:82:0f:53:0c:c2:f3:34:9e:df:
30:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:48:D8:FE:15:05:A6:2E:C0:76:10:2F:0C:4C:11:F5:3D:C6:62:C9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AkjY_hUFpi7AdhAvDEwR9T3GYsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
75:a2:a2:be:9f:aa:8d:47:ea:d7:16:37:e7:8a:76:db:27:f2:
fa:7d:89:04:cc:1d:a4:00:30:e3:64:5b:07:36:19:2d:4f:f1:
b8:a1:0f:3d:79:c3:e0:cc:3a:be:5b:8d:e5:e3:47:08:27:c2:
36:01:4c:b5:b9:09:5d:e7:0a:6e:e5:b4:4c:1b:e1:d9:74:00:
af:67:79:e9:3b:41:be:b6:ff:24:d7:a5:4a:61:c1:1b:10:0a:
99:a2:1a:96:3e:ff:ca:0b:cd:b9:69:b0:cc:dc:a6:83:53:23:
f6:19:d0:68:59:90:71:96:1a:94:fd:82:06:87:62:49:89:b9:
87:12:63:aa:09:ba:1c:18:70:0b:2d:d4:25:da:c4:a3:26:5b:
8c:dc:09:82:d4:f8:d7:ef:5e:2c:1a:94:1b:bf:d8:9b:7e:74:
1c:cf:81:de:c3:11:4a:77:f4:46:76:56:4c:10:0a:20:25:be:
14:ee:92:43:79:0c:2c:eb:4c:a8:ea:67:6f:2e:70:78:65:ca:
ea:f5:ed:28:0f:6c:d1:76:3b:c9:6a:0c:70:81:d9:4d:41:84:
b2:4c:d8:d8:c6:1c:fe:dd:a5:27:3b:0d:27:c8:27:98:ce:93:
01:f8:10:73:e0:60:3b:88:0f:70:a0:11:90:50:0a:05:e3:d4:
bc:21:ff:4d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYUpcCwPJAv1alyQbeZn25dHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjE5MDgxMTM1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjQ4ZDhmZTE1MDVhNjJlYzA3NjEwMmYwYzRjMTFmNTNkYzY2MmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcULnNyaotrX8S8HbeDShq/ky180
dtFKDMdsLlPwRhOxf+W28tC6+mn9RsarWm2iVmPHIbXclZhTr+iQFvRuY9/C/n0A
n8jYGTaaOK7K84YOtYi724qtxPWM5c+Tinr3LqQ+PNdzvVMw7XHMsZpj9ewWoLDG
g00sGh+crwo2OLaD9MbezT/yLwwNeKbyEWRHd018TJ4vPjQvWNeANC0IBWDrYdE6
TixnRzvLQiR6bXUVAPp7LZjH7XQHGcLE76hvbfy+ly2nHMNNC+MP+W8CM/dScDuA
5Ci71W833EtNp1DTbnYmhrOj+la3UBFj39jm++FXLKiCD1MMwvM0nt8w+wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAJI2P4VBaYuwHYQLwxMEfU9xmLJMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvQWtqWV9oVUZwaTdBZGhBdkRFd1I5VDNHWXNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHWior6fqo1H6tcWN+eK
dtsn8vp9iQTMHaQAMONkWwc2GS1P8bihDz15w+DMOr5bjeXjRwgnwjYBTLW5CV3n
Cm7ltEwb4dl0AK9neek7Qb62/yTXpUphwRsQCpmiGpY+/8oLzblpsMzcpoNTI/YZ
0GhZkHGWGpT9ggaHYkmJuYcSY6oJuhwYcAst1CXaxKMmW4zcCYLU+NfvXiwalBu/
2Jt+dBzPgd7DEUp39EZ2VkwQCiAlvhTukkN5DCzrTKjqZ28ucHhlyur17SgPbNF2
O8lqDHCB2U1BhLJM2NjGHP7dpSc7DSfIJ5jOkwH4EHPgYDuID3CgEZBQCgXj1Lwh
/00=
-----END CERTIFICATE-----
Generated at Thu May 1 22:27:55 2025 by rpki-client