Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CxifMz3F9wgT6VQBjnxfymA5eIw.roa
File: CxifMz3F9wgT6VQBjnxfymA5eIw.roa (raw, json)
Hash identifier: 0BV+zvg4YR5FK/IOfBt0nAZFbix7WgNnl7+3G/8EJCI=
Subject key identifier: 0B:18:9F:33:3D:C5:F7:08:13:E9:54:01:8E:7C:5F:CA:60:39:78:8C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186112C78F5ED4E588E196079F6C7746F2D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CxifMz3F9wgT6VQBjnxfymA5eIw.roa
Signing time: Thu 02 Feb 2023 08:09:32 +0000
ROA not before: Thu 02 Feb 2023 08:09:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:11:2c:78:f5:ed:4e:58:8e:19:60:79:f6:c7:74:6f:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 2 08:09:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b189f333dc5f70813e954018e7c5fca6039788c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:53:2c:34:e8:7b:c0:88:cb:70:39:d8:a6:9a:
3e:1b:47:55:af:bb:46:93:3b:47:0c:63:a1:0f:7c:
39:57:f2:72:17:c2:7b:32:94:6c:cf:61:c7:53:0c:
b0:62:82:e8:f8:f7:4f:48:3c:f4:ad:7e:66:a4:d0:
c6:02:18:79:c3:8c:e9:be:62:a8:34:8a:e7:eb:a6:
8d:af:a5:b2:11:43:00:1b:f0:e0:9f:ba:8d:fc:b7:
f5:29:b2:9c:cc:20:e8:ee:98:01:5d:ab:2b:68:3d:
7a:ba:f6:f8:7c:7a:c4:be:9e:a1:52:50:6a:4e:0e:
b7:81:d9:58:ad:61:07:6c:f8:0d:b3:a6:eb:5c:fd:
22:6b:e9:b0:ba:99:b9:b4:5d:b3:94:c2:1c:53:1b:
9d:8f:20:d7:84:ae:cd:3b:5d:58:9c:ad:f4:bb:24:
ed:b3:4f:85:1a:02:d7:cd:5e:8f:39:69:e5:05:b6:
f2:ae:09:91:c3:3f:79:20:3c:ba:b0:94:5a:6a:76:
58:b8:89:db:45:71:8c:a0:c5:52:86:d3:a1:3f:0a:
7f:87:e9:f6:ce:80:bd:51:f6:81:9c:73:4b:8b:f1:
26:9a:54:8f:be:be:ec:b2:ee:90:be:4f:c2:ac:38:
42:3a:f2:f9:a7:16:8f:84:fd:6b:c4:fc:39:eb:98:
3e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:18:9F:33:3D:C5:F7:08:13:E9:54:01:8E:7C:5F:CA:60:39:78:8C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CxifMz3F9wgT6VQBjnxfymA5eIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
54:53:d4:59:13:9c:23:3b:c1:7c:f5:2d:5d:24:2a:55:5d:bd:
03:57:2a:05:17:23:7d:bf:dc:8b:8e:c0:b4:b4:91:65:a9:fd:
2e:4b:40:09:11:8b:53:fb:0a:d8:5a:8f:c4:d8:cd:ac:72:ac:
4e:58:b6:df:a1:ce:08:a9:33:86:1b:25:56:ef:7d:82:76:1d:
f9:8c:01:03:bd:45:f7:b6:23:a8:5a:6d:f1:22:30:fb:10:9e:
9c:c8:ca:ba:ca:65:58:4a:c9:b6:cc:ab:3e:a4:34:20:90:b6:
ac:71:b6:8e:11:50:96:ea:7f:ed:19:9b:c5:27:e9:3f:5c:2e:
d8:e5:ee:97:e8:77:a5:47:9d:f3:30:62:5a:32:01:96:e7:7b:
ee:38:0d:5c:01:94:21:22:c3:f8:3a:40:72:06:3a:c4:ca:eb:
e0:3c:6a:a5:cf:7d:b4:61:94:0d:3d:eb:e2:7f:14:b4:18:43:
a6:50:c7:86:63:ac:f0:21:a5:c2:12:50:3c:9f:50:29:52:ef:
49:52:1c:9d:40:c0:9c:76:ef:ba:e3:cd:6d:ab:d2:62:8e:8b:
0f:e2:47:cf:30:85:67:bd:b9:75:e5:a3:f4:1c:0b:81:72:4f:
4b:75:27:c3:de:f1:b1:77:02:29:f8:88:58:c8:c4:db:06:72:
bf:cc:64:c1
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYYRLHj17U5YjhlgefbHdG8tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjAyMDgwOTMyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjE4OWYzMzNkYzVmNzA4MTNlOTU0MDE4ZTdjNWZjYTYwMzk3ODhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1MsNOh7wIjLcDnYppo+G0dVr7tG
kztHDGOhD3w5V/JyF8J7MpRsz2HHUwywYoLo+PdPSDz0rX5mpNDGAhh5w4zpvmKo
NIrn66aNr6WyEUMAG/Dgn7qN/Lf1KbKczCDo7pgBXasraD16uvb4fHrEvp6hUlBq
Tg63gdlYrWEHbPgNs6brXP0ia+mwupm5tF2zlMIcUxudjyDXhK7NO11YnK30uyTt
s0+FGgLXzV6POWnlBbbyrgmRwz95IDy6sJRaanZYuInbRXGMoMVShtOhPwp/h+n2
zoC9UfaBnHNLi/EmmlSPvr7ssu6Qvk/CrDhCOvL5pxaPhP1rxPw565g+eQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAsYnzM9xfcIE+lUAY58X8pgOXiMMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvQ3hpZk16M0Y5d2dUNlZRQmpueGZ5bUE1ZUl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFRT1FkTnCM7wXz1LV0k
KlVdvQNXKgUXI32/3IuOwLS0kWWp/S5LQAkRi1P7Cthaj8TYzaxyrE5Ytt+hzgip
M4YbJVbvfYJ2HfmMAQO9Rfe2I6habfEiMPsQnpzIyrrKZVhKybbMqz6kNCCQtqxx
to4RUJbqf+0Zm8Un6T9cLtjl7pfod6VHnfMwYloyAZbne+44DVwBlCEiw/g6QHIG
OsTK6+A8aqXPfbRhlA096+J/FLQYQ6ZQx4ZjrPAhpcISUDyfUClS70lSHJ1AwJx2
77rjzW2r0mKOiw/iR88whWe9uXXlo/QcC4FyT0t1J8Pe8bF3Ain4iFjIxNsGcr/M
ZME=
-----END CERTIFICATE-----
Generated at Fri May 2 13:52:46 2025 by rpki-client