Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I7TG5rU2EBwh6sD2pBsVlje9bMA.roa
File: I7TG5rU2EBwh6sD2pBsVlje9bMA.roa (raw, json)
Hash identifier: z8yLbApTrkwtPpafJHOEbU8hHYeZnOIf8cxo0jbCCTc=
Subject key identifier: 23:B4:C6:E6:B5:36:10:1C:21:EA:C0:F6:A4:1B:15:96:37:BD:6C:C0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01824526BE751C02669B5A18C12093024FF6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I7TG5rU2EBwh6sD2pBsVlje9bMA.roa
Signing time: Thu 28 Jul 2022 14:12:23 +0000
ROA not before: Thu 28 Jul 2022 14:12:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:45:26:be:75:1c:02:66:9b:5a:18:c1:20:93:02:4f:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 28 14:12:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=23b4c6e6b536101c21eac0f6a41b159637bd6cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:5b:0d:1c:a9:ab:40:64:6e:31:c4:d2:6e:79:
1e:74:82:4e:50:d0:c9:b9:21:12:b7:da:a1:19:a8:
66:01:2a:18:c9:f1:6c:fd:ae:07:06:31:35:d6:8b:
85:e9:a8:01:9a:05:2c:2a:f9:09:c7:3d:7e:82:7b:
7a:48:17:49:dc:dc:26:72:e2:72:8b:a6:b5:ea:ec:
90:a0:10:0a:8a:73:18:da:2f:83:a0:bb:f5:2f:bf:
74:ae:82:e1:57:b3:eb:a1:21:d4:7d:50:e3:9b:37:
d6:42:f4:ce:bd:f7:13:a9:68:67:b8:a6:e5:54:87:
68:3c:14:a0:83:1c:25:88:8e:43:3f:b4:7c:24:8f:
bb:15:b6:c4:f1:d3:6b:94:e0:ff:71:34:d5:96:5d:
41:17:17:75:d8:b8:d3:79:1a:33:a9:b2:2c:2e:0c:
37:97:af:20:61:23:6b:d5:c3:2f:ab:e8:1c:0a:85:
6c:6f:44:c4:31:dc:be:69:6b:f0:df:d6:8d:95:ee:
3d:0e:81:18:43:8d:f2:1b:a5:dd:94:25:12:71:18:
07:3a:7f:66:56:e1:e1:da:33:f8:27:79:3e:99:1e:
38:dc:6d:6a:d8:c1:30:69:55:39:5a:00:32:6c:58:
28:b2:ae:a8:33:15:41:c2:85:17:ce:fc:6f:5d:76:
65:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B4:C6:E6:B5:36:10:1C:21:EA:C0:F6:A4:1B:15:96:37:BD:6C:C0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I7TG5rU2EBwh6sD2pBsVlje9bMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
07:29:4d:60:8e:5d:17:fc:64:71:e9:2b:33:a7:7e:95:99:8e:
12:cf:e8:77:88:7a:9e:00:6a:2f:e9:39:d8:d8:5f:8f:3f:79:
5a:6f:e0:ce:97:f9:5d:64:02:2f:28:08:09:ca:52:ce:0f:ca:
29:1a:ec:ba:bd:ac:ba:d1:43:d5:f4:37:f0:fc:46:e4:a6:b2:
07:69:00:08:67:40:4d:d0:36:fe:a1:8e:7e:3d:d3:a0:1f:f9:
47:10:ff:a1:ef:45:b0:2d:52:e4:cb:02:51:50:ff:72:9f:2f:
0f:15:a3:a8:b8:99:8a:0a:13:a5:49:28:50:36:8f:3e:13:d3:
0e:dd:fa:cf:ae:48:8f:e6:0e:3d:04:24:f6:ad:d7:78:47:2d:
00:29:ac:51:a7:67:af:e4:4d:e6:ca:01:d5:06:96:23:d0:48:
e0:0a:99:7b:34:ce:d1:61:a9:00:36:e2:44:5b:6a:cd:18:4e:
97:2d:ee:1f:ad:91:e6:7d:f0:19:30:02:bb:41:ba:31:06:75:
13:6c:61:49:c0:db:e3:71:30:59:86:13:f5:ec:ab:24:30:9c:
4f:03:b4:c6:33:b6:d5:60:50:72:95:58:84:fc:32:87:ce:9d:
52:3f:f7:a1:9d:cc:f8:80:8d:2d:20:74:b7:91:fd:6c:e3:89:
14:f6:c2:ae
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYJFJr51HAJmm1oYwSCTAk/2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwNzI4MTQxMjIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyM2I0YzZlNmI1MzYxMDFjMjFlYWMwZjZhNDFiMTU5NjM3YmQ2Y2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglsNHKmrQGRuMcTSbnkedIJOUNDJ
uSESt9qhGahmASoYyfFs/a4HBjE11ouF6agBmgUsKvkJxz1+gnt6SBdJ3NwmcuJy
i6a16uyQoBAKinMY2i+DoLv1L790roLhV7ProSHUfVDjmzfWQvTOvfcTqWhnuKbl
VIdoPBSggxwliI5DP7R8JI+7FbbE8dNrlOD/cTTVll1BFxd12LjTeRozqbIsLgw3
l68gYSNr1cMvq+gcCoVsb0TEMdy+aWvw39aNle49DoEYQ43yG6XdlCUScRgHOn9m
VuHh2jP4J3k+mR443G1q2MEwaVU5WgAybFgosq6oMxVBwoUXzvxvXXZl2wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCO0xua1NhAcIerA9qQbFZY3vWzAMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvSTdURzVyVTJFQndoNnNEMnBCc1ZsamU5Yk1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAcpTWCOXRf8ZHHpKzOn
fpWZjhLP6HeIep4Aai/pOdjYX48/eVpv4M6X+V1kAi8oCAnKUs4Pyika7Lq9rLrR
Q9X0N/D8RuSmsgdpAAhnQE3QNv6hjn4906Af+UcQ/6HvRbAtUuTLAlFQ/3KfLw8V
o6i4mYoKE6VJKFA2jz4T0w7d+s+uSI/mDj0EJPat13hHLQAprFGnZ6/kTebKAdUG
liPQSOAKmXs0ztFhqQA24kRbas0YTpct7h+tkeZ98BkwArtBujEGdRNsYUnA2+Nx
MFmGE/XsqyQwnE8DtMYzttVgUHKVWIT8MofOnVI/96GdzPiAjS0gdLeR/WzjiRT2
wq4=
-----END CERTIFICATE-----
Generated at Sat May 3 01:30:38 2025 by rpki-client