Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MyXO3dc_X5DwwLmY-piSDhaRuzc.roa
File: MyXO3dc_X5DwwLmY-piSDhaRuzc.roa (raw, json)
Hash identifier: QSyELY9M9DdfejV151La5cAAbpl+CartPjR/zHeNoQM=
Subject key identifier: 33:25:CE:DD:D7:3F:5F:90:F0:C0:B9:98:FA:98:92:0E:16:91:BB:37
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189D1D9806BC4B82101A9C6AEB0E01102DB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MyXO3dc_X5DwwLmY-piSDhaRuzc.roa
Signing time: Mon 07 Aug 2023 21:13:59 +0000
ROA not before: Mon 07 Aug 2023 21:13:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d1:d9:80:6b:c4:b8:21:01:a9:c6:ae:b0:e0:11:02:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 7 21:13:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3325ceddd73f5f90f0c0b998fa98920e1691bb37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8d:7a:5e:5d:9d:9c:ba:62:a3:ed:33:ef:f4:
d9:5e:16:c5:ef:7c:aa:fb:80:4e:6c:de:8b:6c:99:
1b:e1:74:1a:d7:5c:88:64:82:0c:bb:b0:86:54:71:
13:34:64:73:97:6a:dd:ca:e4:fa:06:92:c7:d8:f2:
16:2a:d2:90:07:89:60:a8:70:87:f4:ca:1d:d9:74:
c3:24:35:1b:77:8e:a4:9c:bd:e4:2c:13:59:ba:5c:
a3:50:63:0b:df:1a:ee:03:94:d9:7f:57:93:1e:8a:
67:e2:ab:81:d7:ab:de:bc:94:87:a6:e0:ef:ef:b7:
67:ea:3a:ac:e1:6f:b0:bd:84:04:1d:77:e4:91:cc:
96:2c:f4:54:39:ad:0f:b5:2b:45:05:bc:f4:77:e0:
d9:d7:2f:f1:c0:41:6d:7e:11:b4:90:53:b9:04:8d:
e5:be:58:0c:a7:17:e4:82:c7:21:0c:5b:b2:ea:88:
78:ea:c2:2d:b7:ab:c2:91:1b:b7:06:83:21:49:f4:
eb:37:9f:66:dc:10:4c:d2:09:9d:0c:8a:a9:02:f9:
05:1a:2d:04:9f:e5:ef:21:10:b7:d1:4e:b1:6d:a9:
fa:a5:16:a6:d8:88:d8:6c:f8:7a:de:ed:b8:96:f6:
ee:c4:e1:0f:59:fe:de:80:ec:91:8b:8a:da:a4:59:
a3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:25:CE:DD:D7:3F:5F:90:F0:C0:B9:98:FA:98:92:0E:16:91:BB:37
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MyXO3dc_X5DwwLmY-piSDhaRuzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0c:c0:f8:0d:60:ef:cf:6f:e1:ea:5f:75:59:a1:98:ea:3c:fb:
e3:17:dd:5d:d5:aa:cb:47:2d:31:27:6f:68:18:4f:4f:8c:8b:
a7:fe:19:e9:51:55:10:79:e5:44:ed:19:f1:88:7e:82:44:5f:
6e:09:ab:8b:64:fb:7f:b2:d8:7f:af:99:64:0d:1b:5b:9b:9a:
4d:65:4f:55:25:5d:a4:68:1b:26:89:12:45:dc:92:e4:4c:cd:
cd:31:42:30:6b:40:58:4e:51:77:93:7a:74:3b:8c:09:fc:fb:
15:f9:cb:5e:42:60:ba:71:b7:5a:95:86:d7:57:7a:ef:15:37:
6d:40:4a:84:5b:a8:8a:cb:46:74:95:69:8c:be:08:a8:d4:ad:
b0:e1:73:bb:12:ef:03:5d:56:22:bc:b3:a9:db:83:2b:f5:0a:
e6:6a:59:68:aa:ad:c7:b2:95:e6:5d:49:8f:c9:99:41:5b:ec:
13:9b:24:7a:b2:bc:c7:9d:bc:1b:ff:f3:b7:33:49:a4:03:b8:
df:42:24:c2:4e:03:cb:79:f9:ea:c7:cf:f2:fe:da:27:28:29:
01:89:d9:0c:3d:4a:db:23:a2:84:49:08:71:79:10:df:ac:90:
c3:46:3e:79:62:9a:d9:71:5c:8e:2f:c0:0c:9d:65:4f:4c:52:
0e:c2:e2:e0
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYnR2YBrxLghAanGrrDgEQLbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODA3MjExMzU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzI1Y2VkZGQ3M2Y1ZjkwZjBjMGI5OThmYTk4OTIwZTE2OTFiYjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyo16Xl2dnLpio+0z7/TZXhbF73yq
+4BObN6LbJkb4XQa11yIZIIMu7CGVHETNGRzl2rdyuT6BpLH2PIWKtKQB4lgqHCH
9Mod2XTDJDUbd46knL3kLBNZulyjUGML3xruA5TZf1eTHopn4quB16vevJSHpuDv
77dn6jqs4W+wvYQEHXfkkcyWLPRUOa0PtStFBbz0d+DZ1y/xwEFtfhG0kFO5BI3l
vlgMpxfkgschDFuy6oh46sItt6vCkRu3BoMhSfTrN59m3BBM0gmdDIqpAvkFGi0E
n+XvIRC30U6xban6pRam2IjYbPh63u24lvbuxOEPWf7egOyRi4rapFmjWQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDMlzt3XP1+Q8MC5mPqYkg4Wkbs3MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvTXlYTzNkY19YNUR3d0xtWS1waVNEaGFSdXpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAzA+A1g789v4epfdVmh
mOo8++MX3V3VqstHLTEnb2gYT0+Mi6f+GelRVRB55UTtGfGIfoJEX24Jq4tk+3+y
2H+vmWQNG1ubmk1lT1UlXaRoGyaJEkXckuRMzc0xQjBrQFhOUXeTenQ7jAn8+xX5
y15CYLpxt1qVhtdXeu8VN21ASoRbqIrLRnSVaYy+CKjUrbDhc7sS7wNdViK8s6nb
gyv1CuZqWWiqrceyleZdSY/JmUFb7BObJHqyvMedvBv/87czSaQDuN9CJMJOA8t5
+erHz/L+2icoKQGJ2Qw9StsjooRJCHF5EN+skMNGPnlimtlxXI4vwAydZU9MUg7C
4uA=
-----END CERTIFICATE-----
Generated at Thu May 1 00:08:08 2025 by rpki-client