Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IobsvQA8889TY50Cd1SGZOK45BY.roa
File: IobsvQA8889TY50Cd1SGZOK45BY.roa (raw, json)
Hash identifier: uld/mzNHEiRiIyFceCWB47w8jKYLv3VLnKaihxQcfMk=
Subject key identifier: 22:86:EC:BD:00:3C:F3:CF:53:63:9D:02:77:54:86:64:E2:B8:E4:16
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01832DB9A2841B40FBF8C9D7EB04B18D0331
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IobsvQA8889TY50Cd1SGZOK45BY.roa
Signing time: Sun 11 Sep 2022 18:04:43 +0000
ROA not before: Sun 11 Sep 2022 18:04:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:2db9:8d9d/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:2d:b9:a2:84:1b:40:fb:f8:c9:d7:eb:04:b1:8d:03:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 11 18:04:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2286ecbd003cf3cf53639d0277548664e2b8e416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2f:c0:8c:0d:bb:81:51:bc:b8:b9:ae:d8:68:
6f:07:6a:95:3f:16:9e:9d:9b:94:aa:45:09:a2:2a:
18:ed:02:eb:76:94:ae:16:34:f5:b9:de:17:f8:f1:
6b:a8:09:79:b1:d7:d0:46:70:28:d9:38:08:8f:25:
3d:44:88:ac:93:92:c2:07:e8:e7:f6:0c:3a:d8:9f:
b1:0a:b0:27:a6:eb:58:35:f1:b3:e0:85:4a:e4:14:
cc:72:9d:b3:87:e1:30:94:50:85:07:a3:13:64:c5:
d3:1b:79:ab:66:e0:2b:18:b2:f3:12:62:7f:a6:f8:
69:27:8a:7f:9e:bb:36:90:30:33:29:20:d6:6c:75:
4f:ec:5c:3b:5e:22:ed:ce:a6:d4:30:e0:40:5b:18:
70:ee:4a:87:a7:5c:dc:be:58:53:87:ce:c9:40:67:
76:6f:02:de:77:09:b3:c0:49:4a:be:1d:1e:28:89:
63:4a:42:95:b4:82:6e:3e:95:75:31:da:36:68:6c:
29:7d:64:f4:c0:b6:13:57:30:ba:20:10:c2:e3:0d:
5c:28:19:a6:87:cb:5b:21:96:2b:c9:0e:fc:d4:e4:
f7:e0:6a:7b:07:ec:05:49:f8:91:cb:b7:5a:c4:ca:
2d:23:42:17:a2:c8:0a:0c:fe:73:45:a2:4c:3b:84:
f4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:86:EC:BD:00:3C:F3:CF:53:63:9D:02:77:54:86:64:E2:B8:E4:16
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IobsvQA8889TY50Cd1SGZOK45BY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7b:ec:59:56:cf:52:ef:0b:aa:ab:20:5f:75:c3:6e:18:8f:3c:
26:29:f3:3a:e2:a4:39:5e:53:8b:b9:ed:2f:68:8c:c3:25:d6:
a0:07:a3:66:1c:f3:64:bb:4a:fc:24:69:10:7e:8c:ef:9a:48:
a8:4c:ca:63:2b:8c:ed:16:d7:4c:bc:c6:db:20:35:a5:5d:7c:
6a:11:29:e7:9c:18:66:1a:f2:0f:5f:26:00:bb:d4:7e:5b:bd:
16:83:26:c6:8f:b0:cc:ad:46:13:3d:21:a0:89:c8:fc:62:26:
89:0b:93:5d:c9:49:fe:f1:3b:c8:77:2a:32:95:38:f8:1a:30:
82:bd:3a:c5:d0:b4:f6:88:51:f9:58:82:7b:51:dd:ee:3a:13:
ac:c2:3f:86:36:ed:d7:5d:b2:2a:2e:7c:f9:e0:8b:47:d5:05:
04:4c:68:39:48:3e:a4:8c:98:d6:3b:3e:a8:72:f7:7d:1c:48:
f4:f9:5a:4c:71:4f:73:f9:10:16:1a:e9:cb:52:ed:d2:64:c8:
8a:9e:5c:2a:d2:62:88:69:74:0d:61:23:9c:70:4a:80:20:8c:
eb:29:ae:0d:95:33:8e:1f:7b:7b:af:eb:bf:ca:13:9a:87:57:
5f:c8:5c:b9:94:6a:6b:e8:88:aa:52:57:63:94:81:1d:e6:af:
e7:ec:dd:41
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYMtuaKEG0D7+MnX6wSxjQMxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwOTExMTgwNDQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMjg2ZWNiZDAwM2NmM2NmNTM2MzlkMDI3NzU0ODY2NGUyYjhlNDE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzC/AjA27gVG8uLmu2GhvB2qVPxae
nZuUqkUJoioY7QLrdpSuFjT1ud4X+PFrqAl5sdfQRnAo2TgIjyU9RIisk5LCB+jn
9gw62J+xCrAnputYNfGz4IVK5BTMcp2zh+EwlFCFB6MTZMXTG3mrZuArGLLzEmJ/
pvhpJ4p/nrs2kDAzKSDWbHVP7Fw7XiLtzqbUMOBAWxhw7kqHp1zcvlhTh87JQGd2
bwLedwmzwElKvh0eKIljSkKVtIJuPpV1Mdo2aGwpfWT0wLYTVzC6IBDC4w1cKBmm
h8tbIZYryQ781OT34Gp7B+wFSfiRy7daxMotI0IXosgKDP5zRaJMO4T0IQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCKG7L0APPPPU2OdAndUhmTiuOQWMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvSW9ic3ZRQTg4ODlUWTUwQ2QxU0daT0s0NUJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHvsWVbPUu8LqqsgX3XD
bhiPPCYp8zripDleU4u57S9ojMMl1qAHo2Yc82S7SvwkaRB+jO+aSKhMymMrjO0W
10y8xtsgNaVdfGoRKeecGGYa8g9fJgC71H5bvRaDJsaPsMytRhM9IaCJyPxiJokL
k13JSf7xO8h3KjKVOPgaMIK9OsXQtPaIUflYgntR3e46E6zCP4Y27dddsioufPng
i0fVBQRMaDlIPqSMmNY7Pqhy930cSPT5WkxxT3P5EBYa6ctS7dJkyIqeXCrSYohp
dA1hI5xwSoAgjOsprg2VM44fe3uv67/KE5qHV1/IXLmUamvoiKpSV2OUgR3mr+fs
3UE=
-----END CERTIFICATE-----
Generated at Wed Apr 30 18:36:30 2025 by rpki-client