Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CnYvMz2BesuCiyLq6RfIMvaZ9LM.roa
File: CnYvMz2BesuCiyLq6RfIMvaZ9LM.roa (raw, json)
Hash identifier: Qav4GA0CPvFQ6XGarMmZxKcxmFE/sbUeQSJs1y6cQso=
Subject key identifier: 0A:76:2F:33:3D:81:7A:CB:82:8B:22:EA:E9:17:C8:32:F6:99:F4:B3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01850DFAB879B819D847125AA641C282C93F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CnYvMz2BesuCiyLq6RfIMvaZ9LM.roa
Signing time: Wed 14 Dec 2022 00:13:33 +0000
ROA not before: Wed 14 Dec 2022 00:13:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0d:fa:b8:79:b8:19:d8:47:12:5a:a6:41:c2:82:c9:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 14 00:13:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a762f333d817acb828b22eae917c832f699f4b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e7:76:79:2f:fa:ea:4c:66:89:40:1d:8f:0c:
ca:68:11:44:31:8b:4e:75:62:f1:01:eb:61:22:6d:
eb:0f:aa:01:28:3a:50:a2:ae:15:78:a0:bf:a0:f5:
1e:60:98:12:62:7b:ec:0c:46:e1:d2:8b:7d:b6:6c:
4b:6c:28:9d:f3:ae:50:49:6c:f2:50:99:34:03:07:
25:7b:3f:05:ac:9c:24:7d:0d:d2:c0:6b:ff:0a:33:
5e:40:2d:3e:a4:0c:56:d4:1c:1f:29:8f:03:8a:8b:
81:93:16:3c:89:7f:e9:a7:03:ec:1c:52:71:f7:bb:
14:b9:27:5b:77:c9:30:a2:fb:f8:d7:a2:d4:4e:df:
77:e2:fe:e5:26:bd:36:a7:9a:ea:2b:a6:38:de:8a:
d0:b6:1c:02:e5:0d:03:fa:15:1c:ca:f9:d1:af:07:
3c:59:47:c7:c0:e1:44:e5:88:2f:1f:e8:4e:45:ae:
5f:01:3c:9b:c0:5c:53:fb:77:d9:c3:1c:6e:91:34:
32:91:d4:c2:68:94:a8:f3:bc:4e:2e:a7:9c:f1:ba:
68:a6:d1:88:34:eb:16:22:c1:19:3d:45:4c:cc:dd:
a9:50:74:a4:89:79:be:f4:e6:40:a2:26:0a:68:32:
17:b0:46:c7:0d:fc:94:19:7b:eb:21:f4:75:74:15:
1e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:76:2F:33:3D:81:7A:CB:82:8B:22:EA:E9:17:C8:32:F6:99:F4:B3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CnYvMz2BesuCiyLq6RfIMvaZ9LM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
af:89:3f:d6:9a:41:62:0e:0c:5a:5f:48:0b:1d:74:3e:33:e2:
96:b0:15:cd:47:cb:d1:e3:de:f8:c4:4c:50:a3:6d:d4:bd:37:
d3:9e:50:4b:3c:d3:4e:38:cd:62:0c:c5:eb:df:4c:29:21:fb:
3d:3b:64:96:d1:57:cd:d6:10:14:4c:56:65:ec:4d:d8:a4:1d:
01:0e:79:e7:bd:6a:92:a6:ba:42:25:72:36:e1:7b:7a:8d:10:
cf:7a:d1:1d:0d:67:0b:6c:3e:29:2c:32:0e:81:eb:f9:f5:4d:
f1:87:f7:31:b7:5a:67:d9:9e:c8:cf:36:12:c4:1b:70:4c:09:
14:29:40:fc:fb:5a:ff:43:01:88:e7:e4:1b:d4:dd:1a:3b:c2:
fa:d4:94:89:94:00:a3:66:97:89:72:dd:84:7b:75:36:4e:29:
93:45:aa:21:6e:f3:85:2d:2a:2b:c1:52:d5:1e:61:52:6e:30:
65:e9:94:0f:ca:5b:f7:f4:97:2e:df:b0:cd:e9:20:c5:7d:f3:
db:3d:86:fc:43:a9:25:d4:b2:ff:68:6d:0f:a0:1a:14:04:3c:
94:58:16:ed:ec:9a:54:66:57:18:14:a2:7e:cf:00:40:fc:5b:
76:bb:8c:2a:94:cc:99:00:bd:01:95:e6:81:87:4b:8c:1a:56:
57:a9:b8:17
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYUN+rh5uBnYRxJapkHCgsk/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjE0MDAxMzMzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTc2MmYzMzNkODE3YWNiODI4YjIyZWFlOTE3YzgzMmY2OTlmNGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhud2eS/66kxmiUAdjwzKaBFEMYtO
dWLxAethIm3rD6oBKDpQoq4VeKC/oPUeYJgSYnvsDEbh0ot9tmxLbCid865QSWzy
UJk0Awclez8FrJwkfQ3SwGv/CjNeQC0+pAxW1BwfKY8DiouBkxY8iX/ppwPsHFJx
97sUuSdbd8kwovv416LUTt934v7lJr02p5rqK6Y43orQthwC5Q0D+hUcyvnRrwc8
WUfHwOFE5YgvH+hORa5fATybwFxT+3fZwxxukTQykdTCaJSo87xOLqec8bpoptGI
NOsWIsEZPUVMzN2pUHSkiXm+9OZAoiYKaDIXsEbHDfyUGXvrIfR1dBUeewIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAp2LzM9gXrLgosi6ukXyDL2mfSzMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvQ25Zdk16MkJlc3VDaXlMcTZSZklNdmFaOUxNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAK+JP9aaQWIODFpfSAsd
dD4z4pawFc1Hy9Hj3vjETFCjbdS9N9OeUEs80044zWIMxevfTCkh+z07ZJbRV83W
EBRMVmXsTdikHQEOeee9apKmukIlcjbhe3qNEM960R0NZwtsPiksMg6B6/n1TfGH
9zG3WmfZnsjPNhLEG3BMCRQpQPz7Wv9DAYjn5BvU3Ro7wvrUlImUAKNml4ly3YR7
dTZOKZNFqiFu84UtKivBUtUeYVJuMGXplA/KW/f0ly7fsM3pIMV989s9hvxDqSXU
sv9obQ+gGhQEPJRYFu3smlRmVxgUon7PAED8W3a7jCqUzJkAvQGV5oGHS4waVlep
uBc=
-----END CERTIFICATE-----
Generated at Thu May 1 18:02:25 2025 by rpki-client