Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/M42xYGM4eG9aZ0w2UC7h65yuZyI.roa
File: M42xYGM4eG9aZ0w2UC7h65yuZyI.roa (raw, json)
Hash identifier: SuzpXbkqWnnqmFwm2qgahcIvdvAvynA5ouELwYdrvPc=
Subject key identifier: 33:8D:B1:60:63:38:78:6F:5A:67:4C:36:50:2E:E1:EB:9C:AE:67:22
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01858620E8E8839C7F7C2964229B8C045711
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/M42xYGM4eG9aZ0w2UC7h65yuZyI.roa
Signing time: Fri 06 Jan 2023 08:09:41 +0000
ROA not before: Fri 06 Jan 2023 08:09:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:86:20:e8:e8:83:9c:7f:7c:29:64:22:9b:8c:04:57:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 6 08:09:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=338db1606338786f5a674c36502ee1eb9cae6722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ef:d2:a3:a0:2a:84:fc:15:88:36:b6:b1:8f:
08:72:5b:0d:a0:c5:4c:46:aa:a6:51:14:ae:fb:b1:
9b:02:45:dc:2e:3e:30:35:4c:13:6a:af:43:ef:f6:
51:ea:59:db:f0:ab:35:3c:80:25:d4:b5:21:27:cb:
63:05:81:b0:ef:4c:82:6f:5f:e1:e5:3e:43:3e:7f:
42:43:1e:dd:5b:e5:af:62:38:d1:44:6b:6a:20:5c:
ff:3e:8b:67:9c:33:9e:b9:4d:f1:04:fa:f2:ec:27:
3c:f6:9f:01:24:8b:ef:34:7e:94:be:18:bd:b4:af:
f6:4f:d1:6e:e9:b2:13:28:65:38:28:f5:b7:8e:8c:
3e:f5:c6:a0:ef:6c:d1:99:08:3d:35:41:36:0b:61:
9e:04:22:6b:49:da:0c:0a:ba:49:07:4d:04:e6:c2:
06:31:6d:d1:6d:8f:1b:1e:e1:6b:26:33:13:43:ed:
d8:df:75:63:3c:57:b0:c0:d0:2c:8f:0d:49:52:a1:
90:b0:14:f1:0a:1d:94:87:72:18:54:e2:e1:89:e2:
e5:39:6f:b1:74:0b:d4:1e:dc:20:7d:ca:cb:67:50:
7f:85:b4:d2:a8:93:a4:6c:04:be:ff:83:dd:77:d8:
11:ab:60:4e:ad:a3:80:b5:db:da:70:bd:2f:cc:e7:
4d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:8D:B1:60:63:38:78:6F:5A:67:4C:36:50:2E:E1:EB:9C:AE:67:22
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/M42xYGM4eG9aZ0w2UC7h65yuZyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a1:e6:f6:53:fc:2f:e8:8d:37:82:31:d0:77:fc:e4:ed:a6:b4:
2f:e6:6b:65:43:d6:38:4d:4a:2e:c1:44:5d:a3:72:f2:e9:70:
c5:60:50:13:c7:f1:9f:89:8b:d6:7e:c5:02:84:7f:ec:3b:24:
75:d4:72:35:32:a5:ee:28:d8:51:b8:93:80:9d:9c:7b:3c:7a:
7c:98:32:83:20:62:74:84:64:e5:06:1f:c8:d8:27:f2:d1:7e:
fb:60:d5:ce:2e:d0:e4:0d:13:ce:c5:73:0b:64:cd:b6:df:e0:
fb:7f:24:5f:86:db:7a:dc:4e:21:ff:ee:78:f4:eb:83:62:3d:
68:80:9c:0e:ea:55:44:b7:ec:fe:32:ff:82:9a:24:ba:01:ea:
26:6c:1f:c4:d0:4b:c9:34:7e:de:30:44:65:6d:a3:fa:a7:e4:
4d:23:45:00:ab:42:b4:48:1a:a3:8e:6f:0a:df:1f:41:02:60:
86:26:90:9e:b5:15:ff:b8:c1:e5:f1:a2:8a:c6:30:70:38:46:
1a:62:72:ab:64:a2:07:80:81:54:d1:66:bf:79:ca:7c:a2:36:
ed:a1:d4:d5:3f:8b:f6:0b:c3:7f:35:e2:8b:6b:de:47:0a:22:
c3:27:c4:70:37:08:1b:3b:d0:51:36:9c:77:34:18:f2:7b:19:
da:72:b2:06
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYWGIOjog5x/fClkIpuMBFcRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTA2MDgwOTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzhkYjE2MDYzMzg3ODZmNWE2NzRjMzY1MDJlZTFlYjljYWU2NzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+/So6AqhPwViDa2sY8IclsNoMVM
RqqmURSu+7GbAkXcLj4wNUwTaq9D7/ZR6lnb8Ks1PIAl1LUhJ8tjBYGw70yCb1/h
5T5DPn9CQx7dW+WvYjjRRGtqIFz/PotnnDOeuU3xBPry7Cc89p8BJIvvNH6Uvhi9
tK/2T9Fu6bITKGU4KPW3jow+9cag72zRmQg9NUE2C2GeBCJrSdoMCrpJB00E5sIG
MW3RbY8bHuFrJjMTQ+3Y33VjPFewwNAsjw1JUqGQsBTxCh2Uh3IYVOLhieLlOW+x
dAvUHtwgfcrLZ1B/hbTSqJOkbAS+/4Pdd9gRq2BOraOAtdvacL0vzOdNzQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDONsWBjOHhvWmdMNlAu4eucrmciMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvTTQyeFlHTTRlRzlhWjB3MlVDN2g2NXl1WnlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKHm9lP8L+iNN4Ix0Hf8
5O2mtC/ma2VD1jhNSi7BRF2jcvLpcMVgUBPH8Z+Ji9Z+xQKEf+w7JHXUcjUype4o
2FG4k4CdnHs8enyYMoMgYnSEZOUGH8jYJ/LRfvtg1c4u0OQNE87Fcwtkzbbf4Pt/
JF+G23rcTiH/7nj064NiPWiAnA7qVUS37P4y/4KaJLoB6iZsH8TQS8k0ft4wRGVt
o/qn5E0jRQCrQrRIGqOObwrfH0ECYIYmkJ61Ff+4weXxoorGMHA4RhpicqtkogeA
gVTRZr95ynyiNu2h1NU/i/YLw3814otr3kcKIsMnxHA3CBs70FE2nHc0GPJ7Gdpy
sgY=
-----END CERTIFICATE-----
Generated at Thu May 1 07:20:43 2025 by rpki-client