Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CgG9ySntkemniDnecExMz6tuAzQ.roa
File: CgG9ySntkemniDnecExMz6tuAzQ.roa (raw, json)
Hash identifier: +1mcPeToJE6nvscJ7I1Aj9C55DWrrqeJEg2P8OvPV+4=
Subject key identifier: 0A:01:BD:C9:29:ED:91:E9:A7:88:39:DE:70:4C:4C:CF:AB:6E:03:34
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 752E4551
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CgG9ySntkemniDnecExMz6tuAzQ.roa
Signing time: Thu 24 Mar 2022 01:10:13 +0000
ROA not before: Thu 24 Mar 2022 01:10:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1965966673 (0x752e4551)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 24 01:10:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a01bdc929ed91e9a78839de704c4ccfab6e0334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:42:d3:e3:04:cd:54:8b:85:cd:91:0a:96:2d:
d0:19:e0:46:cd:ad:50:61:5f:ec:f2:9b:c1:90:28:
49:5c:ce:0d:e5:13:27:8a:34:77:ca:c4:5d:f3:4b:
6d:b3:64:6e:1a:ae:1f:2d:f2:71:50:e5:50:49:1f:
a8:26:be:e0:7d:f5:69:fb:b2:f1:27:cc:ca:25:89:
9a:aa:cf:7e:4d:b6:40:cd:68:ee:3d:07:f3:2f:d0:
87:bd:f0:5f:70:af:21:e4:5e:d4:7c:25:bc:94:f6:
2e:b6:30:07:7d:fa:fe:1b:17:e5:ea:63:34:db:1b:
23:44:2b:1a:e4:e8:e0:c6:70:ac:9b:24:bd:d9:1d:
e5:dc:da:86:8a:c5:76:9c:b6:b4:3e:85:56:fb:a2:
b6:33:10:b7:08:d7:ac:87:ad:57:17:8a:9e:cb:aa:
45:dd:7a:51:7c:60:b4:c3:e6:60:25:bb:0e:5b:6a:
f7:1d:f5:e7:77:6a:51:69:d6:c7:49:92:df:2b:75:
04:6b:7d:f6:5c:74:73:6b:1b:45:8a:35:9f:5b:36:
f0:a4:54:3b:d4:ba:27:b5:bc:98:15:ef:9a:50:da:
30:19:26:5e:33:68:10:d1:0d:b3:f3:fa:25:1f:b2:
10:33:55:db:9f:72:b7:e5:ea:23:13:65:1c:38:10:
6e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:01:BD:C9:29:ED:91:E9:A7:88:39:DE:70:4C:4C:CF:AB:6E:03:34
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CgG9ySntkemniDnecExMz6tuAzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a4:a2:44:c9:27:75:0f:35:08:14:03:48:44:d8:b6:b6:ab:d8:
c8:1e:83:d0:73:27:6b:b2:33:fe:a8:06:b6:f4:69:68:1c:04:
21:a3:c6:19:77:80:c5:4e:70:04:7b:8d:2a:bd:f6:e7:3f:cf:
31:08:ab:c2:05:cb:6c:a4:d1:ff:72:6f:31:e8:e3:c2:26:27:
42:00:a2:9c:82:c8:c9:19:7d:cf:a4:d2:64:67:f9:bc:76:65:
f4:e6:27:7e:dd:6d:c1:77:9c:f6:a4:be:ee:4b:e8:f2:9b:55:
23:28:76:78:9d:a4:82:1f:81:83:89:f5:78:d0:c1:5b:ae:9a:
40:22:2d:77:dd:9b:fc:6e:62:ef:7f:61:da:df:9e:4f:0f:ab:
57:aa:d5:ab:5c:61:8e:8f:ee:65:5f:2e:8f:22:3d:36:d4:24:
52:9f:47:12:75:b9:9f:9b:2d:6f:ba:ce:7e:b1:83:40:d2:b7:
d9:f1:f8:d8:bf:33:bb:54:d4:df:2a:a1:31:fb:90:bd:b2:ee:
64:e9:da:f1:54:c8:75:89:79:3c:d1:97:a3:ba:12:2b:66:5c:
a2:f1:61:7c:19:e2:82:96:b5:b3:6e:54:fb:c6:cd:fe:a1:0f:
13:2c:a2:36:75:0a:96:40:e4:ae:0c:47:f3:2d:e8:1f:6a:d5:
6c:7c:9f:4b
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEdS5FUTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDMy
NDAxMTAxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGEwMWJkYzkyOWVk
OTFlOWE3ODgzOWRlNzA0YzRjY2ZhYjZlMDMzNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANVC0+MEzVSLhc2RCpYt0BngRs2tUGFf7PKbwZAoSVzODeUT
J4o0d8rEXfNLbbNkbhquHy3ycVDlUEkfqCa+4H31afuy8SfMyiWJmqrPfk22QM1o
7j0H8y/Qh73wX3CvIeRe1HwlvJT2LrYwB336/hsX5epjNNsbI0QrGuTo4MZwrJsk
vdkd5dzahorFdpy2tD6FVvuitjMQtwjXrIetVxeKnsuqRd16UXxgtMPmYCW7Dltq
9x3153dqUWnWx0mS3yt1BGt99lx0c2sbRYo1n1s28KRUO9S6J7W8mBXvmlDaMBkm
XjNoENENs/P6JR+yEDNV259yt+XqIxNlHDgQbqcCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBQKAb3JKe2R6aeIOd5wTEzPq24DNDAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L0NnRzl5U250a2VtbmlEbmVjRXhNejZ0dUF6US5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQCkokTJJ3UPNQgUA0hE2La2q9jIHoPQcydrsjP+
qAa29GloHAQho8YZd4DFTnAEe40qvfbnP88xCKvCBctspNH/cm8x6OPCJidCAKKc
gsjJGX3PpNJkZ/m8dmX05id+3W3Bd5z2pL7uS+jym1UjKHZ4naSCH4GDifV40MFb
rppAIi133Zv8bmLvf2Ha355PD6tXqtWrXGGOj+5lXy6PIj021CRSn0cSdbmfmy1v
us5+sYNA0rfZ8fjYvzO7VNTfKqEx+5C9su5k6drxVMh1iXk80ZejuhIrZlyi8WF8
GeKClrWzblT7xs3+oQ8TLKI2dQqWQOSuDEfzLegfatVsfJ9L
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:08 2025 by rpki-client