Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/F9il4V5GZm2iMEOUvZcQKwk_U78.roa
File: F9il4V5GZm2iMEOUvZcQKwk_U78.roa (raw, json)
Hash identifier: oK0DxeMmET/z0Y6JNEC92hL3HK1bHjQBu9AuFVKIOfA=
Subject key identifier: 17:D8:A5:E1:5E:46:66:6D:A2:30:43:94:BD:97:10:2B:09:3F:53:BF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183BE9864E1DFE6CB0B3D392B751A9F2074
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/F9il4V5GZm2iMEOUvZcQKwk_U78.roa
Signing time: Sun 09 Oct 2022 21:13:21 +0000
ROA not before: Sun 09 Oct 2022 21:13:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:be:98:64:e1:df:e6:cb:0b:3d:39:2b:75:1a:9f:20:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 9 21:13:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=17d8a5e15e46666da2304394bd97102b093f53bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:04:57:27:6a:f0:85:52:dc:25:86:9a:ff:7d:
d2:72:20:d1:a2:d1:6f:65:44:5b:7d:50:be:f9:57:
68:70:96:82:4a:0f:cd:cc:4e:6e:cb:a8:33:ce:74:
fd:a4:9f:4e:83:40:f0:a2:7a:a5:32:79:0f:b9:cb:
9a:06:b9:7c:f4:fb:e9:2b:20:09:84:d3:f4:b9:d5:
3f:7e:33:fc:9e:5e:29:88:30:43:ad:eb:c7:c7:a0:
98:18:9d:df:55:aa:f9:d8:7b:b8:82:38:b6:7a:d2:
36:d6:0f:b2:06:33:c8:0d:ad:3f:96:ef:44:3b:c3:
53:46:64:5b:e3:3c:79:25:be:10:dd:61:29:5a:85:
ed:31:1f:39:81:f7:08:e0:08:6f:60:90:10:71:bb:
65:28:f2:dc:e6:7d:bf:cc:21:33:50:9e:50:36:b8:
a1:6f:7b:e9:5a:b7:29:55:54:ce:95:4a:00:77:9a:
f2:10:87:cd:2e:08:8a:86:0e:f3:ee:40:82:76:83:
20:8f:9d:e4:0c:56:a7:dd:4c:de:3e:e6:25:26:97:
be:46:c3:46:ca:ec:07:81:d6:87:e5:6e:1e:0e:44:
40:0d:e2:16:20:3a:de:48:95:a3:bb:59:f8:05:2f:
da:ef:a5:e8:c5:b2:65:df:21:dd:81:36:82:22:98:
71:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D8:A5:E1:5E:46:66:6D:A2:30:43:94:BD:97:10:2B:09:3F:53:BF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/F9il4V5GZm2iMEOUvZcQKwk_U78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
69:a6:08:74:39:04:1c:9d:89:aa:5d:83:41:b7:4c:d1:ae:06:
dd:54:58:6a:12:18:a8:f9:12:66:27:c6:49:31:2c:20:a3:8d:
19:d7:42:29:64:48:57:fa:1e:2d:c4:a3:1c:b4:2e:fc:97:cb:
ea:ca:ba:ac:f4:05:0a:f0:26:fb:ad:bc:3c:9e:17:4a:0c:71:
45:ed:54:81:ff:db:4f:39:1f:e3:6e:a8:b8:f6:64:b7:70:57:
76:f9:1d:f0:08:1c:fa:43:4b:9f:c3:87:79:45:04:7a:12:bd:
85:1d:9d:e3:14:8e:71:0d:4d:29:44:c5:31:73:75:ac:26:15:
1d:f7:61:e3:a1:e2:fb:a0:b2:a2:16:92:ea:2e:f5:29:b8:cb:
e0:cc:93:60:e6:7f:8a:4b:5e:4a:0c:99:be:72:b7:04:e3:f7:
2f:70:bf:c6:f1:ee:f1:1d:02:06:29:79:db:8c:2b:7f:da:07:
bb:83:6d:5f:17:5a:88:08:e5:f1:07:ac:f0:c2:12:7c:8a:1a:
cb:5b:a3:e9:6c:08:97:dc:f6:20:ed:bc:a3:41:71:df:5f:1e:
99:40:9b:9f:cb:7c:31:35:91:5d:c2:6a:96:b0:69:4f:d3:b3:
29:67:90:3b:a9:f0:44:33:06:3c:9c:b1:96:a3:97:b4:d6:45:
f9:9c:fd:e4
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYO+mGTh3+bLCz05K3UanyB0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMDA5MjExMzIxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxN2Q4YTVlMTVlNDY2NjZkYTIzMDQzOTRiZDk3MTAyYjA5M2Y1M2JmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQRXJ2rwhVLcJYaa/33SciDRotFv
ZURbfVC++VdocJaCSg/NzE5uy6gzznT9pJ9Og0DwonqlMnkPucuaBrl89PvpKyAJ
hNP0udU/fjP8nl4piDBDrevHx6CYGJ3fVar52Hu4gji2etI21g+yBjPIDa0/lu9E
O8NTRmRb4zx5Jb4Q3WEpWoXtMR85gfcI4AhvYJAQcbtlKPLc5n2/zCEzUJ5QNrih
b3vpWrcpVVTOlUoAd5ryEIfNLgiKhg7z7kCCdoMgj53kDFan3UzePuYlJpe+RsNG
yuwHgdaH5W4eDkRADeIWIDreSJWju1n4BS/a76XoxbJl3yHdgTaCIphxUwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBfYpeFeRmZtojBDlL2XECsJP1O/MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvRjlpbDRWNUdabTJpTUVPVXZaY1FLd2tfVTc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGmmCHQ5BBydiapdg0G3
TNGuBt1UWGoSGKj5EmYnxkkxLCCjjRnXQilkSFf6Hi3Eoxy0LvyXy+rKuqz0BQrw
JvutvDyeF0oMcUXtVIH/2085H+NuqLj2ZLdwV3b5HfAIHPpDS5/Dh3lFBHoSvYUd
neMUjnENTSlExTFzdawmFR33YeOh4vugsqIWkuou9Sm4y+DMk2Dmf4pLXkoMmb5y
twTj9y9wv8bx7vEdAgYpeduMK3/aB7uDbV8XWogI5fEHrPDCEnyKGstbo+lsCJfc
9iDtvKNBcd9fHplAm5/LfDE1kV3CapawaU/TsylnkDup8EQzBjycsZajl7TWRfmc
/eQ=
-----END CERTIFICATE-----
Generated at Thu May 1 11:25:34 2025 by rpki-client