Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DG9bIiqzZuQUnf2Sy-eTCDLepFs.roa
File: DG9bIiqzZuQUnf2Sy-eTCDLepFs.roa (raw, json)
Hash identifier: 7AbhS4YAi7R75DqDl0H+4ZUS6sBxoDB2KQ01Ia/zcsE=
Subject key identifier: 0C:6F:5B:22:2A:B3:66:E4:14:9D:FD:92:CB:E7:93:08:32:DE:A4:5B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01839FEC4A1ABE9D8C7AD8D1A7C71C56B69F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DG9bIiqzZuQUnf2Sy-eTCDLepFs.roa
Signing time: Mon 03 Oct 2022 22:16:46 +0000
ROA not before: Mon 03 Oct 2022 22:16:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:183:5f81:ab13/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:9f:ec:4a:1a:be:9d:8c:7a:d8:d1:a7:c7:1c:56:b6:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 3 22:16:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0c6f5b222ab366e4149dfd92cbe7930832dea45b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a9:7c:96:99:24:b0:4c:80:9b:f4:9c:1e:97:
96:1d:5a:82:15:fa:85:0c:07:5e:93:05:90:9b:c7:
54:a6:75:70:5a:71:aa:74:e4:c4:e2:0c:8e:cd:61:
55:30:b7:52:3a:c2:3e:08:ce:9c:22:a1:66:dd:50:
a5:08:de:14:d7:98:c3:56:1a:99:b6:d6:46:96:ce:
63:4b:ec:c4:cd:f8:fb:ca:b0:42:9b:ce:89:3e:d0:
e3:ec:e9:b9:8a:56:d6:4a:96:1d:b4:6b:9c:d0:6a:
46:be:37:90:fe:66:37:8b:2e:2f:6b:49:d4:e8:07:
fe:5a:59:de:a9:08:39:8b:eb:30:e7:1e:f7:cd:5a:
c0:84:2d:e1:b4:05:c0:79:ad:94:10:0e:59:bb:83:
51:37:2c:6d:43:f6:60:c3:51:82:97:9f:fc:be:a5:
80:87:ac:14:ce:6b:ba:ea:27:cb:cd:cf:2f:6b:8c:
71:2a:f2:75:8c:de:24:90:5a:82:55:36:fe:53:85:
47:cb:0f:eb:3b:df:77:a3:c6:63:b6:a5:ec:c1:f0:
56:2e:93:48:9a:f5:c7:87:fb:87:ae:7d:2f:90:ae:
7a:e9:f8:9c:fa:aa:50:f6:41:41:d5:16:5b:5a:12:
4c:17:10:32:31:09:dd:ed:ae:ba:ac:3e:bb:45:43:
ab:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:6F:5B:22:2A:B3:66:E4:14:9D:FD:92:CB:E7:93:08:32:DE:A4:5B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DG9bIiqzZuQUnf2Sy-eTCDLepFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
49:3d:5a:3b:40:60:e1:14:22:86:6e:34:34:c3:f1:2b:d4:46:
30:f4:65:b1:17:39:8d:2a:c0:2f:bf:59:d1:67:df:d7:a4:15:
aa:f4:18:b7:e7:8c:96:c0:ee:20:4e:7f:0c:ad:3e:1f:9f:43:
22:0f:3e:9e:62:25:80:84:51:be:8a:1c:6d:29:36:8d:c4:ef:
4b:ea:5e:60:94:90:65:47:19:47:da:83:15:c1:1d:93:ff:44:
b6:31:3c:7a:30:13:47:07:79:73:23:f5:9a:e8:1c:3f:99:a1:
3f:b5:f8:01:48:c7:cd:61:5b:98:3c:94:33:49:d8:2d:28:81:
fc:ce:da:2a:78:ff:e4:67:47:7e:1c:96:0d:c8:cc:8e:19:14:
79:6c:a6:e9:ec:32:bc:02:7b:0d:10:db:aa:a9:3f:5f:da:67:
c6:14:63:58:e8:e7:4a:89:96:7b:4a:5b:e3:8e:36:51:f2:a8:
75:51:7c:b3:98:57:55:de:91:4f:4b:d1:92:70:20:b0:73:23:
d3:34:4e:2d:95:79:70:5a:83:b2:69:d1:bb:f1:71:19:1a:9d:
82:1e:96:ff:1f:bd:38:78:3c:91:d4:7d:33:35:2c:b4:f5:31:
4a:6e:a0:d8:99:6c:f1:17:fa:81:c1:bf:74:9d:53:d5:a1:a4:
17:62:c2:33
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYOf7Eoavp2MetjRp8ccVrafMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMDAzMjIxNjQ2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzZmNWIyMjJhYjM2NmU0MTQ5ZGZkOTJjYmU3OTMwODMyZGVhNDViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKl8lpkksEyAm/ScHpeWHVqCFfqF
DAdekwWQm8dUpnVwWnGqdOTE4gyOzWFVMLdSOsI+CM6cIqFm3VClCN4U15jDVhqZ
ttZGls5jS+zEzfj7yrBCm86JPtDj7Om5ilbWSpYdtGuc0GpGvjeQ/mY3iy4va0nU
6Af+WlneqQg5i+sw5x73zVrAhC3htAXAea2UEA5Zu4NRNyxtQ/Zgw1GCl5/8vqWA
h6wUzmu66ifLzc8va4xxKvJ1jN4kkFqCVTb+U4VHyw/rO993o8ZjtqXswfBWLpNI
mvXHh/uHrn0vkK566fic+qpQ9kFB1RZbWhJMFxAyMQnd7a66rD67RUOrBwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAxvWyIqs2bkFJ39ksvnkwgy3qRbMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvREc5YklpcXpadVFVbmYyU3ktZVRDRExlcEZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEk9WjtAYOEUIoZuNDTD
8SvURjD0ZbEXOY0qwC+/WdFn39ekFar0GLfnjJbA7iBOfwytPh+fQyIPPp5iJYCE
Ub6KHG0pNo3E70vqXmCUkGVHGUfagxXBHZP/RLYxPHowE0cHeXMj9ZroHD+ZoT+1
+AFIx81hW5g8lDNJ2C0ogfzO2ip4/+RnR34clg3IzI4ZFHlspunsMrwCew0Q26qp
P1/aZ8YUY1jo50qJlntKW+OONlHyqHVRfLOYV1XekU9L0ZJwILBzI9M0Ti2VeXBa
g7Jp0bvxcRkanYIelv8fvTh4PJHUfTM1LLT1MUpuoNiZbPEX+oHBv3SdU9WhpBdi
wjM=
-----END CERTIFICATE-----
Generated at Wed Apr 30 20:01:06 2025 by rpki-client