Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Dt04AaD3V1jcJQt9oSOoZ5aHomk.roa
File: Dt04AaD3V1jcJQt9oSOoZ5aHomk.roa (raw, json)
Hash identifier: JHBlscAYKL3z8wRpCOeDirgALJpWJCtokqqBZYWFuFw=
Subject key identifier: 0E:DD:38:01:A0:F7:57:58:DC:25:0B:7D:A1:23:A8:67:96:87:A2:69
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018645F80A769D43B74F42F47ED9A0C87A1C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Dt04AaD3V1jcJQt9oSOoZ5aHomk.roa
Signing time: Sun 12 Feb 2023 14:12:08 +0000
ROA not before: Sun 12 Feb 2023 14:12:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:45:f8:0a:76:9d:43:b7:4f:42:f4:7e:d9:a0:c8:7a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 12 14:12:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0edd3801a0f75758dc250b7da123a8679687a269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2a:d1:70:fa:40:c1:bf:fc:44:2d:09:de:a9:
49:58:c7:58:64:c4:11:62:96:3b:04:3c:50:3d:2f:
e4:b0:6a:7b:a7:40:2b:9c:76:34:6f:29:92:ab:17:
0a:f7:a5:e8:c4:18:13:83:38:97:64:69:7a:c4:f6:
03:ed:cd:c5:d1:da:8c:d3:e7:da:d7:dd:e4:85:7b:
c8:7d:85:a6:df:15:b1:be:e4:21:9f:90:99:ad:62:
a3:c0:87:93:db:ea:17:d2:b1:03:dc:ed:25:06:55:
46:0b:5f:ee:b1:6a:3a:a4:cf:83:ac:90:2a:97:47:
22:4f:f0:03:c3:eb:d9:c0:7e:95:95:71:07:f4:19:
1d:46:c8:87:f7:cd:31:37:a3:e9:1a:fa:55:c1:87:
56:c4:26:3b:e1:ed:4f:5a:4a:20:d8:a7:72:ca:52:
20:3c:fe:f5:a3:d3:81:57:73:cb:7e:02:e0:e1:37:
e2:c3:0e:13:c9:d5:83:8c:02:03:db:f6:45:8e:c5:
83:e3:54:8a:b7:f2:9f:26:8b:8f:fa:ee:fd:43:b1:
e6:88:32:5f:a6:dc:15:6a:c6:74:ba:5b:ff:d4:3f:
d7:c5:27:0f:d0:e8:cc:46:be:e0:43:fc:4c:a7:d5:
8e:2d:c3:6a:33:40:26:cf:6e:1a:b5:c0:69:a8:0b:
90:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:DD:38:01:A0:F7:57:58:DC:25:0B:7D:A1:23:A8:67:96:87:A2:69
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Dt04AaD3V1jcJQt9oSOoZ5aHomk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b3:f2:50:a5:87:16:a5:c2:82:08:f8:77:70:3a:c6:58:4e:eb:
44:da:56:eb:76:b6:8c:86:90:bf:ff:6a:d9:f6:88:c2:94:80:
1c:e4:ef:39:94:cf:c7:1e:fb:50:cb:64:ea:88:30:99:2c:a2:
c7:28:c5:42:ef:ed:63:a7:10:28:07:49:11:dd:ca:f3:ef:8d:
7c:2f:5c:e3:38:a6:02:59:86:d6:bc:6c:65:1d:d0:f8:e2:0f:
83:27:96:bf:a4:c6:9b:3d:93:c9:b4:5a:df:bf:42:42:28:a8:
53:38:48:13:83:1e:5b:7e:50:31:89:bf:fc:89:47:05:c2:3d:
fc:96:8a:46:29:9d:9c:64:7d:eb:53:a4:10:8d:4b:9d:e0:74:
57:98:fc:0a:92:0b:5f:38:44:4a:a4:33:01:4a:bb:40:fc:45:
39:63:1b:10:38:48:c9:06:f9:42:19:90:35:b9:96:ac:3b:9e:
c3:66:9d:1a:a1:29:4b:c5:48:30:51:40:98:10:1f:78:ec:64:
fb:6f:c9:51:60:d8:dc:1c:6e:eb:79:36:ad:60:7e:37:db:95:
d2:b1:0c:df:bf:fb:2f:15:cb:87:2d:43:7e:01:c2:4b:80:b5:
a3:d1:4f:c8:ef:40:7c:c6:e7:a3:f2:25:86:1d:84:56:d7:f5:
e1:94:b8:d2
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYZF+Ap2nUO3T0L0ftmgyHocMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjEyMTQxMjA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZWRkMzgwMWEwZjc1NzU4ZGMyNTBiN2RhMTIzYTg2Nzk2ODdhMjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSrRcPpAwb/8RC0J3qlJWMdYZMQR
YpY7BDxQPS/ksGp7p0ArnHY0bymSqxcK96XoxBgTgziXZGl6xPYD7c3F0dqM0+fa
193khXvIfYWm3xWxvuQhn5CZrWKjwIeT2+oX0rED3O0lBlVGC1/usWo6pM+DrJAq
l0ciT/ADw+vZwH6VlXEH9BkdRsiH980xN6PpGvpVwYdWxCY74e1PWkog2KdyylIg
PP71o9OBV3PLfgLg4Tfiww4TydWDjAID2/ZFjsWD41SKt/KfJouP+u79Q7HmiDJf
ptwVasZ0ulv/1D/XxScP0OjMRr7gQ/xMp9WOLcNqM0Amz24atcBpqAuQLwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFA7dOAGg91dY3CULfaEjqGeWh6JpMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvRHQwNEFhRDNWMWpjSlF0OW9TT29aNWFIb21rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBALPyUKWHFqXCggj4d3A6
xlhO60TaVut2toyGkL//atn2iMKUgBzk7zmUz8ce+1DLZOqIMJksoscoxULv7WOn
ECgHSRHdyvPvjXwvXOM4pgJZhta8bGUd0PjiD4Mnlr+kxps9k8m0Wt+/QkIoqFM4
SBODHlt+UDGJv/yJRwXCPfyWikYpnZxkfetTpBCNS53gdFeY/AqSC184REqkMwFK
u0D8RTljGxA4SMkG+UIZkDW5lqw7nsNmnRqhKUvFSDBRQJgQH3jsZPtvyVFg2Nwc
but5Nq1gfjfbldKxDN+/+y8Vy4ctQ34BwkuAtaPRT8jvQHzG56PyJYYdhFbX9eGU
uNI=
-----END CERTIFICATE-----
Generated at Thu May 1 02:53:29 2025 by rpki-client