Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CVtFqRZDdl4RDmPU0XJYyPaUkjw.roa
File: CVtFqRZDdl4RDmPU0XJYyPaUkjw.roa (raw, json)
Hash identifier: 7pgUVOPF4jWqb1n0Lmdsc9hW6VCXEKhvA9bzZHDxD08=
Subject key identifier: 09:5B:45:A9:16:43:76:5E:11:0E:63:D4:D1:72:58:C8:F6:94:92:3C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184089F5A7A516C0E8BC16000500A68C14F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CVtFqRZDdl4RDmPU0XJYyPaUkjw.roa
Signing time: Mon 24 Oct 2022 06:12:51 +0000
ROA not before: Mon 24 Oct 2022 06:12:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:08:9f:5a:7a:51:6c:0e:8b:c1:60:00:50:0a:68:c1:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 24 06:12:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=095b45a91643765e110e63d4d17258c8f694923c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:27:7e:5b:d7:3c:48:5a:7f:9d:9a:53:2a:37:
37:ab:ef:2f:d9:0e:f3:12:34:3b:37:03:a7:e7:cc:
0a:6e:47:bb:b5:e4:2c:4a:0a:0f:93:33:0f:87:37:
6b:d8:29:8b:d8:d5:e2:9b:03:4a:79:a4:31:95:ea:
19:02:09:7e:4a:10:d3:9e:37:69:77:c0:e4:fc:06:
48:65:5b:75:b2:13:0a:fe:07:6f:3d:80:6d:23:98:
a7:04:de:df:45:09:61:0e:b7:54:52:4a:26:21:f4:
83:2d:e5:8d:49:1a:91:51:af:b9:ae:25:77:76:e8:
23:74:9d:f1:a0:68:7a:b2:fb:c7:5e:35:b8:08:d3:
01:1b:06:b0:4c:9d:d7:1a:65:59:fa:98:a9:89:23:
67:70:73:39:02:8e:e5:c1:40:9d:a8:98:54:24:df:
84:b2:3d:11:85:05:63:e1:27:35:0e:cd:2a:5d:c3:
01:cc:03:d3:c9:6a:f9:c7:67:d3:d9:28:b7:0b:db:
80:0d:7d:e4:84:e8:52:08:b6:1b:00:ea:a0:b2:8e:
33:92:6c:6e:1b:52:c2:93:0b:9f:27:07:ed:0f:c5:
19:e1:0a:c8:86:dc:92:b0:af:82:5e:68:8e:79:0e:
56:49:dc:de:46:67:1c:9c:d6:96:d6:1a:e9:32:01:
f1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:5B:45:A9:16:43:76:5E:11:0E:63:D4:D1:72:58:C8:F6:94:92:3C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CVtFqRZDdl4RDmPU0XJYyPaUkjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
90:14:85:80:6c:27:7a:40:51:e8:6f:44:42:bc:2b:db:a0:f0:
ac:5b:57:51:1e:f7:4b:2e:0b:e4:00:ed:90:9c:98:42:94:06:
04:b7:19:e3:c9:a6:21:00:fb:b8:23:a1:4a:cd:67:eb:ac:92:
e0:87:07:43:d5:f1:75:f1:84:54:c0:90:72:16:40:90:09:69:
76:0c:b6:1e:7e:be:45:70:96:6d:a5:b2:92:5e:3f:11:e5:57:
4f:01:af:83:38:06:33:a2:7e:0e:05:72:d7:93:e3:04:fa:20:
79:c5:f5:e4:a1:4f:74:db:a8:76:e2:45:2e:4a:58:65:e3:87:
41:bf:0a:d7:3d:e3:6e:d6:76:bb:cc:0c:ad:2b:5b:cc:e5:02:
16:c0:9b:cb:75:4a:41:cc:94:cd:bf:79:dc:25:55:bf:e6:12:
09:c2:33:1c:bc:e7:be:c4:1f:c7:4a:fb:94:c5:70:59:38:44:
fa:0f:0b:de:9e:37:55:f7:c4:82:09:d7:bd:8a:6b:60:74:54:
2c:a6:dc:33:53:cc:45:23:d8:47:6c:01:85:80:32:d8:f2:4f:
68:ad:83:3f:8e:09:d7:88:15:e5:5f:8d:82:11:3f:07:1e:a9:
52:20:d0:f9:c4:d6:bc:7f:81:c9:20:78:d0:b1:a3:b4:e0:35:
14:4d:1a:e5
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYQIn1p6UWwOi8FgAFAKaMFPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMDI0MDYxMjUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOTViNDVhOTE2NDM3NjVlMTEwZTYzZDRkMTcyNThjOGY2OTQ5MjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyd+W9c8SFp/nZpTKjc3q+8v2Q7z
EjQ7NwOn58wKbke7teQsSgoPkzMPhzdr2CmL2NXimwNKeaQxleoZAgl+ShDTnjdp
d8Dk/AZIZVt1shMK/gdvPYBtI5inBN7fRQlhDrdUUkomIfSDLeWNSRqRUa+5riV3
dugjdJ3xoGh6svvHXjW4CNMBGwawTJ3XGmVZ+pipiSNncHM5Ao7lwUCdqJhUJN+E
sj0RhQVj4Sc1Ds0qXcMBzAPTyWr5x2fT2Si3C9uADX3khOhSCLYbAOqgso4zkmxu
G1LCkwufJwftD8UZ4QrIhtySsK+CXmiOeQ5WSdzeRmccnNaW1hrpMgHxdQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAlbRakWQ3ZeEQ5j1NFyWMj2lJI8MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvQ1Z0RnFSWkRkbDRSRG1QVTBYSll5UGFVa2p3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJAUhYBsJ3pAUehvREK8
K9ug8KxbV1Ee90suC+QA7ZCcmEKUBgS3GePJpiEA+7gjoUrNZ+uskuCHB0PV8XXx
hFTAkHIWQJAJaXYMth5+vkVwlm2lspJePxHlV08Br4M4BjOifg4FcteT4wT6IHnF
9eShT3TbqHbiRS5KWGXjh0G/Ctc9427WdrvMDK0rW8zlAhbAm8t1SkHMlM2/edwl
Vb/mEgnCMxy8577EH8dK+5TFcFk4RPoPC96eN1X3xIIJ172Ka2B0VCym3DNTzEUj
2EdsAYWAMtjyT2itgz+OCdeIFeVfjYIRPwceqVIg0PnE1rx/gckgeNCxo7TgNRRN
GuU=
-----END CERTIFICATE-----
Generated at Fri May 2 13:45:28 2025 by rpki-client