Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IbrE_wFfwkCAAlc7-DGMUsYuTe8.roa
File: IbrE_wFfwkCAAlc7-DGMUsYuTe8.roa (raw, json)
Hash identifier: DayudfFUYl/dmxr9qLJVMZzXd4cTFnom+zf8+sU8CUU=
Subject key identifier: 21:BA:C4:FF:01:5F:C2:40:80:02:57:3B:F8:31:8C:52:C6:2E:4D:EF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01865F7E4BD3450C22759286E2AF59A2B8EA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IbrE_wFfwkCAAlc7-DGMUsYuTe8.roa
Signing time: Fri 17 Feb 2023 13:09:17 +0000
ROA not before: Fri 17 Feb 2023 13:09:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5f:7e:4b:d3:45:0c:22:75:92:86:e2:af:59:a2:b8:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 17 13:09:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21bac4ff015fc2408002573bf8318c52c62e4def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f6:b9:4e:ae:04:6a:61:0e:3a:8c:0a:af:1b:
52:a6:d5:ba:5e:a5:b9:f6:d6:52:9f:bb:f7:f3:d2:
e6:67:7f:65:5b:67:a3:5c:8d:78:32:48:5a:cb:74:
be:64:d9:ae:57:13:04:91:61:2b:e5:3d:30:59:cd:
58:60:29:f3:32:7e:c9:cb:30:8d:04:91:1b:e7:ca:
6c:e1:3e:88:f6:1c:8a:6b:0a:16:2f:26:b0:d3:ee:
9b:0e:15:40:e5:c0:92:44:65:e9:23:f0:b1:75:85:
df:bd:36:65:04:84:57:77:de:a2:1c:f9:1d:59:d6:
77:2a:a6:6d:5f:48:26:42:45:5e:be:62:53:60:33:
b3:7d:11:8b:7f:f4:a9:ae:54:e3:02:24:5f:d0:a3:
24:7b:e0:59:2a:bb:6e:31:63:76:17:cd:fd:11:08:
b6:c4:7a:29:33:20:ea:2e:da:08:68:ad:cb:93:e4:
38:9c:0e:fb:f2:c7:31:97:7c:89:2d:55:d2:b3:09:
f6:e7:a1:d9:13:85:46:45:fb:5f:8c:5d:c2:25:32:
c2:a6:c5:18:3d:2e:85:df:92:cd:f2:64:58:b0:ee:
0c:8c:c9:18:ac:c5:ab:3b:d8:31:ab:03:fe:4a:d8:
a0:e0:09:06:6a:85:34:f8:dc:68:b1:ac:ee:36:84:
0e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:BA:C4:FF:01:5F:C2:40:80:02:57:3B:F8:31:8C:52:C6:2E:4D:EF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IbrE_wFfwkCAAlc7-DGMUsYuTe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4c:d8:bf:63:e0:ee:3d:91:e5:a6:01:d9:15:bf:fc:b9:ec:22:
f2:33:78:74:80:10:81:36:70:ca:c1:3d:b4:e1:ae:58:de:b3:
de:a8:20:67:85:1e:43:73:7a:1a:4a:0b:af:31:de:6b:87:a0:
f8:c1:94:62:32:a7:7c:1f:9c:e7:59:27:60:6c:a1:f9:79:63:
5c:46:7f:c1:08:a3:05:c6:b5:e2:2f:e0:6c:36:43:96:25:f6:
d8:4b:68:3d:6e:ca:35:ae:2d:bd:da:94:2b:ef:f3:00:32:35:
55:65:8f:25:c7:3a:fa:fd:b2:0e:05:81:33:62:6b:62:a7:b5:
bf:77:e1:57:bd:9a:a8:52:1b:a1:17:87:d8:0b:84:67:f3:3f:
ab:05:dd:d2:1f:97:9a:b9:a8:22:42:5d:1e:31:96:f8:e1:74:
8f:f8:7c:22:a2:30:25:34:3f:db:a9:4c:bb:c7:4e:e0:7c:9c:
68:df:59:fc:c8:3a:04:7d:80:b5:86:26:d9:9a:d3:e9:4f:9b:
8a:29:44:fc:4f:e0:86:76:b3:57:ef:92:50:80:9d:be:9d:9f:
16:3b:b5:98:e5:70:ca:8c:10:05:84:d5:46:49:82:8c:a1:70:
fe:88:ae:0f:7e:89:0b:cc:24:87:c6:92:ba:63:a4:6a:16:0c:
44:bb:02:1e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYZffkvTRQwidZKG4q9ZorjqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjE3MTMwOTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMWJhYzRmZjAxNWZjMjQwODAwMjU3M2JmODMxOGM1MmM2MmU0ZGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqva5Tq4EamEOOowKrxtSptW6XqW5
9tZSn7v389LmZ39lW2ejXI14Mkhay3S+ZNmuVxMEkWEr5T0wWc1YYCnzMn7JyzCN
BJEb58ps4T6I9hyKawoWLyaw0+6bDhVA5cCSRGXpI/CxdYXfvTZlBIRXd96iHPkd
WdZ3KqZtX0gmQkVevmJTYDOzfRGLf/SprlTjAiRf0KMke+BZKrtuMWN2F839EQi2
xHopMyDqLtoIaK3Lk+Q4nA778scxl3yJLVXSswn256HZE4VGRftfjF3CJTLCpsUY
PS6F35LN8mRYsO4MjMkYrMWrO9gxqwP+Stig4AkGaoU0+NxosazuNoQO2wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCG6xP8BX8JAgAJXO/gxjFLGLk3vMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvSWJyRV93RmZ3a0NBQWxjNy1ER01Vc1l1VGU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEzYv2Pg7j2R5aYB2RW/
/LnsIvIzeHSAEIE2cMrBPbThrljes96oIGeFHkNzehpKC68x3muHoPjBlGIyp3wf
nOdZJ2Bsofl5Y1xGf8EIowXGteIv4Gw2Q5Yl9thLaD1uyjWuLb3alCvv8wAyNVVl
jyXHOvr9sg4FgTNia2Kntb934Ve9mqhSG6EXh9gLhGfzP6sF3dIfl5q5qCJCXR4x
lvjhdI/4fCKiMCU0P9upTLvHTuB8nGjfWfzIOgR9gLWGJtma0+lPm4opRPxP4IZ2
s1fvklCAnb6dnxY7tZjlcMqMEAWE1UZJgoyhcP6Irg9+iQvMJIfGkrpjpGoWDES7
Ah4=
-----END CERTIFICATE-----
Generated at Thu May 1 00:41:10 2025 by rpki-client