Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/L2Rv8jS3GhceoGa5EO1NUt93YFA.roa
File: L2Rv8jS3GhceoGa5EO1NUt93YFA.roa (raw, json)
Hash identifier: mYhFKx0h3ArDbzFCPgCCvuMW6MAuVwASomKkCUbTsx8=
Subject key identifier: 2F:64:6F:F2:34:B7:1A:17:1E:A0:66:B9:10:ED:4D:52:DF:77:60:50
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018648535D2EF901184783820E180A3F456C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/L2Rv8jS3GhceoGa5EO1NUt93YFA.roa
Signing time: Mon 13 Feb 2023 01:11:08 +0000
ROA not before: Mon 13 Feb 2023 01:11:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:48:53:5d:2e:f9:01:18:47:83:82:0e:18:0a:3f:45:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 13 01:11:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f646ff234b71a171ea066b910ed4d52df776050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c6:b3:bb:0b:e4:bb:3a:c4:9c:2a:9c:11:2c:
8b:3a:1b:23:08:55:50:45:ed:df:63:8d:39:95:68:
f3:06:d2:21:39:18:ef:bb:7d:ec:6c:51:fa:4d:d1:
0f:46:09:69:b4:50:95:23:50:60:35:88:87:29:37:
78:1c:f2:e9:68:54:df:ce:79:87:18:07:cd:14:4a:
25:30:23:47:29:60:5c:df:00:5e:7c:9a:94:7a:29:
09:87:2a:ea:05:5b:45:b5:2e:a4:b9:a9:29:f1:35:
44:90:c7:71:6a:b6:fe:f7:4d:f7:8e:43:16:0b:b4:
1c:c3:89:f6:fd:0a:af:97:79:5d:6a:43:52:91:dc:
e8:95:a6:c2:3f:41:e3:2f:30:66:ec:25:75:0e:8d:
31:10:01:6e:e9:98:7a:70:07:6d:32:7e:cd:13:c1:
b6:05:8d:d4:1f:5c:e4:c0:9b:78:fd:58:9d:72:49:
dd:57:12:1f:04:6c:ff:3a:7c:9f:04:1d:fe:4d:61:
05:5c:c7:b4:6a:ac:7f:98:bc:53:cb:a2:b0:f9:97:
07:0f:69:92:3d:1e:4b:81:31:bf:72:f7:3d:b5:ba:
17:7f:28:e7:79:46:16:4e:66:f1:df:67:82:be:38:
7a:a4:06:52:cf:3c:27:81:db:b3:2e:e3:51:35:60:
43:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:64:6F:F2:34:B7:1A:17:1E:A0:66:B9:10:ED:4D:52:DF:77:60:50
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/L2Rv8jS3GhceoGa5EO1NUt93YFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
42:31:a9:d9:f7:ec:c5:ff:db:1b:17:4c:a6:2e:8e:21:de:5f:
45:b7:d3:e6:d8:5c:55:32:13:d4:86:70:1c:15:94:22:b8:88:
d6:0b:9c:c8:10:f5:a3:1c:83:ee:4c:e6:8f:a8:17:2e:79:1d:
5b:84:a8:fe:0f:72:5e:4c:b2:54:75:d5:ec:b4:20:9a:b9:1b:
07:27:c7:13:d4:12:db:9a:f9:39:14:82:42:ed:47:12:99:ca:
e1:42:6d:97:02:89:68:56:33:90:f9:e9:63:02:bd:5b:45:3c:
7e:cd:5b:09:30:65:7f:ec:c0:5e:c5:5d:6e:60:8f:bc:b0:d7:
60:c0:ed:9d:98:d0:5b:19:56:9b:a9:78:14:df:8d:d0:91:13:
46:cd:40:2f:f4:ee:5a:82:d1:37:0d:91:b7:8c:6b:8e:61:1e:
2e:77:cf:6c:e1:eb:49:2a:43:02:56:be:1c:77:5d:b5:5c:5a:
2d:1b:c5:17:09:26:3e:fb:62:ef:7e:82:16:3e:99:22:ac:ac:
30:83:52:0a:5f:63:e7:c2:3b:50:27:2b:99:47:9c:f0:72:67:
d1:6f:a7:b1:34:97:1a:64:bb:94:27:aa:15:56:f1:3f:c7:2d:
12:52:0c:b3:e9:13:d2:4d:99:66:33:e1:db:1f:7d:0c:c7:4f:
52:67:36:f0
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYZIU10u+QEYR4OCDhgKP0VsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjEzMDExMTA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZjY0NmZmMjM0YjcxYTE3MWVhMDY2YjkxMGVkNGQ1MmRmNzc2MDUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMazuwvkuzrEnCqcESyLOhsjCFVQ
Re3fY405lWjzBtIhORjvu33sbFH6TdEPRglptFCVI1BgNYiHKTd4HPLpaFTfznmH
GAfNFEolMCNHKWBc3wBefJqUeikJhyrqBVtFtS6kuakp8TVEkMdxarb+9033jkMW
C7Qcw4n2/Qqvl3ldakNSkdzolabCP0HjLzBm7CV1Do0xEAFu6Zh6cAdtMn7NE8G2
BY3UH1zkwJt4/VidckndVxIfBGz/OnyfBB3+TWEFXMe0aqx/mLxTy6Kw+ZcHD2mS
PR5LgTG/cvc9tboXfyjneUYWTmbx32eCvjh6pAZSzzwngduzLuNRNWBD3QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFC9kb/I0txoXHqBmuRDtTVLfd2BQMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvTDJSdjhqUzNHaGNlb0dhNUVPMU5VdDkzWUZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEIxqdn37MX/2xsXTKYu
jiHeX0W30+bYXFUyE9SGcBwVlCK4iNYLnMgQ9aMcg+5M5o+oFy55HVuEqP4Pcl5M
slR11ey0IJq5GwcnxxPUEtua+TkUgkLtRxKZyuFCbZcCiWhWM5D56WMCvVtFPH7N
WwkwZX/swF7FXW5gj7yw12DA7Z2Y0FsZVpupeBTfjdCRE0bNQC/07lqC0TcNkbeM
a45hHi53z2zh60kqQwJWvhx3XbVcWi0bxRcJJj77Yu9+ghY+mSKsrDCDUgpfY+fC
O1AnK5lHnPByZ9Fvp7E0lxpku5QnqhVW8T/HLRJSDLPpE9JNmWYz4dsffQzHT1Jn
NvA=
-----END CERTIFICATE-----
Generated at Wed Apr 30 18:45:12 2025 by rpki-client