Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Cby1QkH5lNiyHKdiIWG_ejdVjE4.roa
File: Cby1QkH5lNiyHKdiIWG_ejdVjE4.roa (raw, json)
Hash identifier: QeR8CXt2mhKmBhl8NKXPwkUcPVxuAssAMzvUns3s8QA=
Subject key identifier: 09:BC:B5:42:41:F9:94:D8:B2:1C:A7:62:21:61:BF:7A:37:55:8C:4E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7B1AFB5B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Cby1QkH5lNiyHKdiIWG_ejdVjE4.roa
Signing time: Thu 14 Apr 2022 02:10:29 +0000
ROA not before: Thu 14 Apr 2022 02:10:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2065365851 (0x7b1afb5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 14 02:10:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=09bcb54241f994d8b21ca7622161bf7a37558c4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:02:ec:78:4c:ea:29:fa:fc:0e:6d:45:c3:68:
84:16:fe:fe:d9:c6:8c:39:a2:3c:39:4c:23:c2:62:
7f:34:ef:6a:07:93:73:c7:84:ab:95:78:fc:c9:a2:
f3:49:14:d0:3f:79:43:d1:a2:23:a1:b3:2f:b8:e7:
d6:f9:d9:1b:64:0d:ea:47:ef:2e:30:b3:6a:b3:21:
13:18:3c:30:10:fa:f9:23:63:3f:e9:fb:8b:2f:fb:
0d:d5:0a:55:fc:11:41:ba:bb:4e:8f:12:fd:eb:97:
65:5d:13:43:14:b9:b3:d5:a6:c4:3c:3a:b1:3b:52:
2e:c2:eb:3a:af:f4:b7:d8:bc:a4:61:f5:d3:17:f9:
8d:1d:c2:90:1f:44:84:3c:42:c3:65:86:fc:0e:d1:
04:af:c5:9e:60:eb:49:c5:e1:ed:56:95:c1:12:fb:
43:6b:f1:2a:bd:1e:d1:ec:a1:54:ae:e1:d3:91:f7:
2d:ff:2a:70:40:54:f9:a3:03:19:a0:bc:cf:34:67:
79:7f:42:97:c9:2f:2a:14:f6:93:b5:df:ef:15:c2:
99:cd:8e:0a:01:7a:9b:b6:41:e6:10:57:49:81:fd:
b6:26:6c:6b:30:b2:03:64:8e:0d:00:96:e8:b3:d5:
f9:48:d1:3c:94:8d:cd:38:1d:44:37:c0:7d:72:5f:
2e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:BC:B5:42:41:F9:94:D8:B2:1C:A7:62:21:61:BF:7A:37:55:8C:4E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Cby1QkH5lNiyHKdiIWG_ejdVjE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a8:12:5f:ff:cd:4a:15:ae:9c:4f:21:fb:63:1f:aa:cc:34:9e:
57:5c:80:52:d5:77:18:97:ac:78:86:7a:22:79:b2:4e:84:60:
73:92:61:d2:65:4c:d0:f9:42:4d:c9:c1:21:2b:f0:b7:7e:54:
46:86:28:46:c1:cb:ec:77:61:a0:b4:76:62:4e:a0:36:3c:6f:
2b:f7:1d:8b:f9:71:75:9e:dc:9d:69:fa:02:78:81:11:aa:3b:
d8:e8:80:48:9e:01:75:c4:1d:f1:a4:e7:b8:a6:3f:73:61:68:
9f:e4:07:f2:19:ba:79:f8:d0:d6:a1:5f:ff:d4:0a:0d:cd:c5:
7b:f6:63:89:72:4c:59:d3:bd:dd:bd:5d:de:10:38:92:dc:84:
0a:29:9b:40:ab:6d:56:3c:68:53:d2:5d:06:c9:4e:88:3c:be:
be:3e:7a:ab:09:4c:68:26:d1:42:d3:fb:e6:45:d2:8e:97:96:
b4:57:d4:a5:25:e9:50:ad:cc:3c:a3:f1:a8:3c:4d:30:a3:29:
7e:8e:b9:e3:41:bb:6d:f5:0f:9a:46:97:d1:54:e1:a0:12:cc:
10:d9:83:41:ae:9e:b9:67:da:85:35:04:02:8e:fb:0c:a0:c4:
ab:0f:35:33:9e:3e:4d:6e:0d:1f:60:c8:7c:e5:4f:44:f5:2d:
5a:46:3e:31
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEexr7WzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDQx
NDAyMTAyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDliY2I1NDI0MWY5
OTRkOGIyMWNhNzYyMjE2MWJmN2EzNzU1OGM0ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANoC7HhM6in6/A5tRcNohBb+/tnGjDmiPDlMI8JifzTvageT
c8eEq5V4/Mmi80kU0D95Q9GiI6GzL7jn1vnZG2QN6kfvLjCzarMhExg8MBD6+SNj
P+n7iy/7DdUKVfwRQbq7To8S/euXZV0TQxS5s9WmxDw6sTtSLsLrOq/0t9i8pGH1
0xf5jR3CkB9EhDxCw2WG/A7RBK/FnmDrScXh7VaVwRL7Q2vxKr0e0eyhVK7h05H3
Lf8qcEBU+aMDGaC8zzRneX9Cl8kvKhT2k7Xf7xXCmc2OCgF6m7ZB5hBXSYH9tiZs
azCyA2SODQCW6LPV+UjRPJSNzTgdRDfAfXJfLj8CAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBQJvLVCQfmU2LIcp2IhYb96N1WMTjAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L0NieTFRa0g1bE5peUhLZGlJV0dfZWpkVmpFNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQCoEl//zUoVrpxPIftjH6rMNJ5XXIBS1XcYl6x4
hnoiebJOhGBzkmHSZUzQ+UJNycEhK/C3flRGhihGwcvsd2GgtHZiTqA2PG8r9x2L
+XF1ntydafoCeIERqjvY6IBIngF1xB3xpOe4pj9zYWif5AfyGbp5+NDWoV//1AoN
zcV79mOJckxZ073dvV3eEDiS3IQKKZtAq21WPGhT0l0GyU6IPL6+PnqrCUxoJtFC
0/vmRdKOl5a0V9SlJelQrcw8o/GoPE0woyl+jrnjQbtt9Q+aRpfRVOGgEswQ2YNB
rp65Z9qFNQQCjvsMoMSrDzUznj5Nbg0fYMh85U9E9S1aRj4x
-----END CERTIFICATE-----
Generated at Wed Apr 30 20:45:41 2025 by rpki-client