Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FIYtHf0wJ-5a09mxIvcv6drOobs.roa
File: FIYtHf0wJ-5a09mxIvcv6drOobs.roa (raw, json)
Hash identifier: 5Td7ZWBp0a/Hx2+teWfkhce6Q0fUqe79P6nr73ly1CE=
Subject key identifier: 14:86:2D:1D:FD:30:27:EE:5A:D3:D9:B1:22:F7:2F:E9:DA:CE:A1:BB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018514626EA25A21F5BD6EE2C53EE6235160
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FIYtHf0wJ-5a09mxIvcv6drOobs.roa
Signing time: Thu 15 Dec 2022 06:04:33 +0000
ROA not before: Thu 15 Dec 2022 06:04:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:185:1462:5c5f/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:14:62:6e:a2:5a:21:f5:bd:6e:e2:c5:3e:e6:23:51:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 15 06:04:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=14862d1dfd3027ee5ad3d9b122f72fe9dacea1bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:64:89:35:a4:68:60:4f:e4:88:69:56:00:03:
37:5e:95:77:60:d4:ed:ab:55:94:a9:cc:f2:b7:46:
6c:07:d6:62:71:4e:d0:c7:9f:a3:b1:d9:50:7f:4f:
23:b2:ed:26:82:b0:0c:61:c4:b7:0a:e3:1c:cd:95:
06:11:ff:61:2b:bf:43:10:af:f7:20:3a:11:b1:0a:
40:e2:80:34:84:f9:c2:af:95:8e:cb:5e:9f:34:d7:
20:07:d8:42:4f:90:2d:28:98:61:97:6f:5b:c3:87:
60:2c:7f:d0:2b:79:19:c0:e7:e2:0f:0f:2c:39:cf:
18:64:07:b3:60:f7:70:72:96:04:8b:8f:d6:93:93:
82:be:af:6c:86:47:22:0b:db:70:50:c7:73:f9:76:
8b:b2:47:89:fa:f2:b8:c2:14:9e:47:40:55:fc:42:
af:42:f4:ee:a0:e0:30:18:09:9a:40:fb:08:1d:ed:
60:32:2f:f9:62:06:31:d3:dc:0c:4a:f9:9c:7a:5d:
56:09:bf:16:a7:d2:fd:d2:f9:95:a5:64:84:a4:d7:
09:b3:ef:44:a8:a7:69:53:94:ab:15:4d:b0:f9:db:
f6:61:05:d8:86:d7:a1:6f:78:b9:cf:c1:f8:b5:4e:
83:4c:3f:34:64:5b:22:89:94:94:c9:bf:e9:1b:40:
4b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:86:2D:1D:FD:30:27:EE:5A:D3:D9:B1:22:F7:2F:E9:DA:CE:A1:BB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/FIYtHf0wJ-5a09mxIvcv6drOobs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
68:05:c7:c5:0c:0f:63:c1:e9:0f:81:e6:a3:00:0d:01:09:f9:
fe:14:5d:ca:7a:9c:f5:8a:16:5a:64:3e:a8:7e:1e:81:c8:9b:
01:2a:4f:65:37:3b:10:05:72:76:07:62:92:3f:3b:22:ad:b7:
43:fd:46:87:95:c5:4b:2c:59:d8:3f:75:17:5e:e9:5a:17:e7:
9e:bb:87:8e:ea:6c:dd:86:70:6d:06:aa:6a:84:c7:be:df:4d:
34:8b:a3:3d:85:0b:22:ee:bc:48:93:28:ef:18:d5:c2:6d:78:
49:93:a4:e1:35:94:d7:0c:8a:e3:96:0a:13:28:da:0d:78:6d:
81:a2:c8:57:08:5a:46:a8:71:2f:eb:87:1f:6f:28:14:77:e7:
2f:2b:7b:ef:21:36:86:55:99:bf:02:64:46:de:56:55:44:f4:
cb:71:74:dc:09:7f:6d:8c:3c:36:5a:f7:de:6e:ba:f9:0c:82:
2f:e7:4b:12:88:de:bc:a6:49:26:bf:e3:87:ed:23:b1:10:eb:
15:45:fc:85:a3:1e:d6:20:10:a6:40:4c:5d:e6:a6:b4:5a:80:
95:c7:1e:54:75:90:08:43:d3:a7:24:5c:1f:77:ab:3b:cc:2b:
07:0b:36:ec:84:9d:4f:08:93:a2:07:d3:aa:d4:6b:70:8a:56:
b3:7e:5a:68
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYUUYm6iWiH1vW7ixT7mI1FgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjE1MDYwNDMzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDg2MmQxZGZkMzAyN2VlNWFkM2Q5YjEyMmY3MmZlOWRhY2VhMWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGSJNaRoYE/kiGlWAAM3XpV3YNTt
q1WUqczyt0ZsB9ZicU7Qx5+jsdlQf08jsu0mgrAMYcS3CuMczZUGEf9hK79DEK/3
IDoRsQpA4oA0hPnCr5WOy16fNNcgB9hCT5AtKJhhl29bw4dgLH/QK3kZwOfiDw8s
Oc8YZAezYPdwcpYEi4/Wk5OCvq9shkciC9twUMdz+XaLskeJ+vK4whSeR0BV/EKv
QvTuoOAwGAmaQPsIHe1gMi/5YgYx09wMSvmcel1WCb8Wp9L90vmVpWSEpNcJs+9E
qKdpU5SrFU2w+dv2YQXYhtehb3i5z8H4tU6DTD80ZFsiiZSUyb/pG0BLewIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBSGLR39MCfuWtPZsSL3L+nazqG7MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvRklZdEhmMHdKLTVhMDlteEl2Y3Y2ZHJPb2JzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGgFx8UMD2PB6Q+B5qMA
DQEJ+f4UXcp6nPWKFlpkPqh+HoHImwEqT2U3OxAFcnYHYpI/OyKtt0P9RoeVxUss
Wdg/dRde6VoX5567h47qbN2GcG0GqmqEx77fTTSLoz2FCyLuvEiTKO8Y1cJteEmT
pOE1lNcMiuOWChMo2g14bYGiyFcIWkaocS/rhx9vKBR35y8re+8hNoZVmb8CZEbe
VlVE9MtxdNwJf22MPDZa995uuvkMgi/nSxKI3rymSSa/44ftI7EQ6xVF/IWjHtYg
EKZATF3mprRagJXHHlR1kAhD06ckXB93qzvMKwcLNuyEnU8Ik6IH06rUa3CKVrN+
Wmg=
-----END CERTIFICATE-----
Generated at Thu May 1 09:27:11 2025 by rpki-client