Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IHjxG-7i-QJUkqR_-M342KMbsbI.roa
File: IHjxG-7i-QJUkqR_-M342KMbsbI.roa (raw, json)
Hash identifier: 2PKrcUmCtIam5dnJtrn49gpvIkr/+XAqRJnB1s3bChY=
Subject key identifier: 20:78:F1:1B:EE:E2:F9:02:54:92:A4:7F:F8:CD:F8:D8:A3:1B:B1:B2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018300B2D1F5D06B8BED06E27C7BEEF6EE45
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IHjxG-7i-QJUkqR_-M342KMbsbI.roa
Signing time: Sat 03 Sep 2022 00:14:22 +0000
ROA not before: Sat 03 Sep 2022 00:14:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:00:b2:d1:f5:d0:6b:8b:ed:06:e2:7c:7b:ee:f6:ee:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 3 00:14:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2078f11beee2f9025492a47ff8cdf8d8a31bb1b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ff:04:af:1c:49:0a:f8:85:cd:45:3b:61:b4:
5b:1c:d9:9c:f1:46:fa:d3:00:11:92:20:24:0f:8d:
77:38:ae:90:66:6e:d9:ff:5e:05:2a:b6:92:1b:92:
1c:8f:22:c8:0c:17:9c:99:dc:53:a4:ec:a7:61:d7:
64:d5:f2:4e:80:c8:73:f5:83:f4:35:ad:43:99:3d:
63:32:ff:da:ef:3f:b9:43:75:5f:ed:bd:9b:0d:55:
0e:a9:88:37:08:d4:a2:c3:3e:6e:f2:61:8a:44:8c:
9f:c3:f7:f1:d6:dd:2b:04:2b:00:11:a1:58:94:84:
78:10:9a:31:32:af:5c:03:66:10:25:61:d6:c5:3e:
ed:50:38:5c:c2:fa:62:ec:3f:1d:5b:59:e9:7c:52:
14:45:9f:8e:b8:cc:51:6d:09:0e:74:8a:0d:6a:80:
b5:ab:4f:6f:a7:56:6d:43:6a:d6:60:eb:d6:ac:4a:
79:e9:83:96:a5:d4:9e:6c:ea:4a:2f:7a:be:57:38:
d3:bb:03:35:be:59:f9:c9:a7:2c:b1:19:e8:9e:e0:
2e:87:67:e7:ca:20:36:c0:2a:31:ba:62:91:dd:bb:
28:12:92:53:fb:0e:fd:5d:34:6c:86:71:7a:1a:f6:
6a:5c:82:01:40:53:68:9d:55:6d:1e:41:15:58:cf:
30:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:78:F1:1B:EE:E2:F9:02:54:92:A4:7F:F8:CD:F8:D8:A3:1B:B1:B2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IHjxG-7i-QJUkqR_-M342KMbsbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5e:e3:9a:94:f5:76:00:03:9e:b5:0a:f1:3d:c5:46:47:f1:43:
51:53:d4:cb:90:bc:66:e3:ee:d8:b0:85:30:71:de:f3:4e:d9:
6c:2c:2e:df:57:5e:2c:60:00:2c:6a:aa:4e:14:c7:1f:90:6d:
4a:40:6a:2c:6c:a5:e5:15:f6:a9:54:6e:89:34:93:e1:d0:5b:
d4:9d:e5:e1:6a:c9:a3:37:e2:c4:aa:60:bb:db:96:89:c8:e9:
38:98:86:a3:05:4b:a9:4f:18:03:80:56:4c:a0:c3:74:aa:80:
ae:b9:c5:74:18:a3:26:d7:b3:4b:01:10:02:ae:30:b1:9f:6c:
30:51:32:27:1c:28:0b:12:be:37:a6:9c:e5:e1:48:a1:1e:a7:
de:f8:7f:9d:63:4a:ad:21:12:47:a5:5e:e8:2b:2d:ab:8b:f9:
be:65:91:b1:bc:8e:28:4c:5c:7c:38:8f:a3:b5:ac:b5:5a:0e:
df:eb:a0:46:10:0f:7e:63:cf:f4:0c:ca:fd:09:75:f7:90:b5:
9c:fe:ff:b8:0c:31:ea:1d:cd:8f:5d:57:c6:03:85:46:18:ed:
91:98:e8:79:07:db:94:e2:83:d5:78:8c:b9:eb:48:8f:38:cb:
c3:14:96:49:c9:8e:59:b5:78:29:36:f5:8e:ad:d4:49:86:9b:
9c:de:ac:2b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYMAstH10GuL7QbifHvu9u5FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwOTAzMDAxNDIyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDc4ZjExYmVlZTJmOTAyNTQ5MmE0N2ZmOGNkZjhkOGEzMWJiMWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjP8ErxxJCviFzUU7YbRbHNmc8Ub6
0wARkiAkD413OK6QZm7Z/14FKraSG5IcjyLIDBecmdxTpOynYddk1fJOgMhz9YP0
Na1DmT1jMv/a7z+5Q3Vf7b2bDVUOqYg3CNSiwz5u8mGKRIyfw/fx1t0rBCsAEaFY
lIR4EJoxMq9cA2YQJWHWxT7tUDhcwvpi7D8dW1npfFIURZ+OuMxRbQkOdIoNaoC1
q09vp1ZtQ2rWYOvWrEp56YOWpdSebOpKL3q+VzjTuwM1vln5yacssRnonuAuh2fn
yiA2wCoxumKR3bsoEpJT+w79XTRshnF6GvZqXIIBQFNonVVtHkEVWM8wwQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCB48Rvu4vkCVJKkf/jN+NijG7GyMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvSUhqeEctN2ktUUpVa3FSXy1NMzQyS01ic2JJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAF7jmpT1dgADnrUK8T3F
RkfxQ1FT1MuQvGbj7tiwhTBx3vNO2WwsLt9XXixgACxqqk4Uxx+QbUpAaixspeUV
9qlUbok0k+HQW9Sd5eFqyaM34sSqYLvblonI6TiYhqMFS6lPGAOAVkygw3SqgK65
xXQYoybXs0sBEAKuMLGfbDBRMiccKAsSvjemnOXhSKEep974f51jSq0hEkelXugr
LauL+b5lkbG8jihMXHw4j6O1rLVaDt/roEYQD35jz/QMyv0JdfeQtZz+/7gMMeod
zY9dV8YDhUYY7ZGY6HkH25Tig9V4jLnrSI84y8MUlknJjlm1eCk29Y6t1EmGm5ze
rCs=
-----END CERTIFICATE-----
Generated at Sat May 3 20:07:32 2025 by rpki-client