Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I8-vvOZQzwyqtZJPmrxlmxqLe3Q.roa
File: I8-vvOZQzwyqtZJPmrxlmxqLe3Q.roa (raw, json)
Hash identifier: WbNGiv9bVbSx8jeGaETwYuw2N/Fbn6mirquzdaWpLbc=
Subject key identifier: 23:CF:AF:BC:E6:50:CF:0C:AA:B5:92:4F:9A:BC:65:9B:1A:8B:7B:74
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01858E4851561B65259B675CC901A5F1F5A1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I8-vvOZQzwyqtZJPmrxlmxqLe3Q.roa
Signing time: Sat 07 Jan 2023 22:09:41 +0000
ROA not before: Sat 07 Jan 2023 22:09:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:8e:48:51:56:1b:65:25:9b:67:5c:c9:01:a5:f1:f5:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 7 22:09:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=23cfafbce650cf0caab5924f9abc659b1a8b7b74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:cc:77:30:2d:d3:a8:57:ec:41:3c:78:bf:52:
82:fd:54:0a:49:06:b2:cd:d6:30:b5:fe:ac:85:cc:
05:d9:87:6b:2c:c7:dd:9d:6c:eb:63:b1:5a:27:6a:
20:11:42:b4:bd:27:e1:26:91:e5:05:74:5a:66:29:
cb:dd:b9:8d:1c:a6:72:45:ef:38:87:0c:36:39:1f:
61:76:83:90:04:ee:13:7a:38:41:db:d8:3b:a2:67:
8c:eb:fa:69:1c:6e:26:9c:e5:2e:e7:78:72:05:69:
73:28:5b:be:84:60:45:ce:31:3a:7c:04:44:04:52:
11:2d:df:3e:5f:b3:b5:a9:9e:46:5b:ad:eb:e8:24:
30:7e:a5:c6:77:11:17:1d:22:f8:6c:47:65:02:11:
2d:91:e3:54:75:4e:db:7a:00:93:d8:ea:2f:67:d6:
cb:ca:36:81:48:86:a9:af:af:62:2b:9c:aa:e3:71:
6d:c1:3b:cd:16:34:ce:57:10:e1:32:2c:52:7c:2c:
c4:ef:9e:93:8a:eb:e8:89:14:47:54:42:69:7d:ec:
ef:de:47:03:a0:15:98:92:38:6c:f4:ff:01:b3:30:
29:3b:00:05:58:07:29:d6:ad:58:6f:46:d5:7f:23:
d0:61:54:24:14:c5:b7:50:f9:c4:42:10:4d:d1:a7:
fb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:CF:AF:BC:E6:50:CF:0C:AA:B5:92:4F:9A:BC:65:9B:1A:8B:7B:74
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I8-vvOZQzwyqtZJPmrxlmxqLe3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
67:c5:d5:8f:b0:5d:f8:a7:9c:de:65:2f:26:4b:78:d2:e2:38:
11:25:8a:c1:2d:29:56:00:c0:65:48:fc:13:bb:2d:c8:1d:b3:
3c:20:ce:7b:34:98:c5:cc:bf:90:13:bd:a0:e6:6c:af:85:37:
5c:50:cf:0a:35:67:85:fd:a7:b1:29:15:f9:97:48:3b:42:52:
61:15:60:1f:30:e3:a2:1a:34:82:79:c2:c1:c1:f1:38:c2:5b:
ea:7f:82:bd:8f:4e:40:29:c2:81:79:91:5e:31:8f:cb:f2:f7:
0a:bd:35:94:5e:da:41:c0:ab:17:02:40:3d:e6:d4:75:ab:a1:
c2:40:8d:0c:8b:57:eb:2f:02:49:de:57:47:bd:20:2e:db:85:
8c:29:90:7d:b8:36:25:e6:5c:d4:4e:36:82:3a:24:4a:29:e3:
3a:55:83:80:22:a6:9f:98:79:6b:38:6b:c1:48:ba:53:c8:45:
51:9f:60:0d:75:99:1a:86:f9:85:a0:56:17:ca:fe:25:db:2d:
75:0d:cc:19:7e:72:19:17:4e:1f:b2:26:ae:6d:ba:bc:4c:2e:
29:8b:74:f2:79:cc:42:fa:57:f5:f7:c5:43:7d:3f:8c:98:84:
ce:8a:5c:3f:f7:5c:87:be:b5:4e:33:03:07:70:d5:9f:9d:df:
ab:fd:85:11
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYWOSFFWG2Ulm2dcyQGl8fWhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTA3MjIwOTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyM2NmYWZiY2U2NTBjZjBjYWFiNTkyNGY5YWJjNjU5YjFhOGI3Yjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMx3MC3TqFfsQTx4v1KC/VQKSQay
zdYwtf6shcwF2YdrLMfdnWzrY7FaJ2ogEUK0vSfhJpHlBXRaZinL3bmNHKZyRe84
hww2OR9hdoOQBO4TejhB29g7omeM6/ppHG4mnOUu53hyBWlzKFu+hGBFzjE6fARE
BFIRLd8+X7O1qZ5GW63r6CQwfqXGdxEXHSL4bEdlAhEtkeNUdU7begCT2OovZ9bL
yjaBSIapr69iK5yq43FtwTvNFjTOVxDhMixSfCzE756TiuvoiRRHVEJpfezv3kcD
oBWYkjhs9P8BszApOwAFWAcp1q1Yb0bVfyPQYVQkFMW3UPnEQhBN0af7xwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCPPr7zmUM8MqrWST5q8ZZsai3t0MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvSTgtdnZPWlF6d3lxdFpKUG1yeGxteHFMZTNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGfF1Y+wXfinnN5lLyZL
eNLiOBElisEtKVYAwGVI/BO7Lcgdszwgzns0mMXMv5ATvaDmbK+FN1xQzwo1Z4X9
p7EpFfmXSDtCUmEVYB8w46IaNIJ5wsHB8TjCW+p/gr2PTkApwoF5kV4xj8vy9wq9
NZRe2kHAqxcCQD3m1HWrocJAjQyLV+svAkneV0e9IC7bhYwpkH24NiXmXNRONoI6
JEop4zpVg4Aipp+YeWs4a8FIulPIRVGfYA11mRqG+YWgVhfK/iXbLXUNzBl+chkX
Th+yJq5turxMLimLdPJ5zEL6V/X3xUN9P4yYhM6KXD/3XIe+tU4zAwdw1Z+d36v9
hRE=
-----END CERTIFICATE-----
Generated at Sat May 3 14:47:55 2025 by rpki-client