Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ODFw0zbj44A95Iljk92WId5vvKk.roa
File: ODFw0zbj44A95Iljk92WId5vvKk.roa (raw, json)
Hash identifier: hVAo2eKgoAaLa9KGpRI0t8ZKOJhV4fxIzVtm35bXILQ=
Subject key identifier: 38:31:70:D3:36:E3:E3:80:3D:E4:89:63:93:DD:96:21:DE:6F:BC:A9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01862C006965D133324F49683FABCE350697
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ODFw0zbj44A95Iljk92WId5vvKk.roa
Signing time: Tue 07 Feb 2023 13:11:09 +0000
ROA not before: Tue 07 Feb 2023 13:11:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:2c:00:69:65:d1:33:32:4f:49:68:3f:ab:ce:35:06:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 7 13:11:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=383170d336e3e3803de4896393dd9621de6fbca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2e:e2:bc:0c:07:e8:62:75:72:25:df:2d:3d:
d3:9d:c0:14:e5:f3:db:b6:24:15:52:c0:2f:ca:9a:
5d:0a:a3:03:2f:5b:0d:93:f7:74:b7:4d:d4:47:01:
7c:d2:d4:66:9a:45:ab:53:26:88:00:21:99:82:26:
0f:a5:72:1b:ba:d6:0d:c0:f2:9a:f6:5b:65:18:5a:
fd:bb:3f:f4:68:be:cf:6c:d9:59:b6:50:c7:28:0f:
e6:c3:17:b0:66:7b:77:31:da:ae:d5:d3:8b:52:85:
3d:49:e5:0d:f9:f4:28:e6:06:bb:7c:23:53:b7:c7:
1d:45:42:53:c1:a3:5f:ee:49:27:41:2d:8a:74:22:
98:87:f6:25:7f:a3:41:6b:65:a9:f7:a5:e6:78:2b:
9e:cf:1d:a7:60:ae:38:01:cf:8c:2e:c5:55:8d:54:
05:e2:f8:ea:3c:cb:ef:75:58:c9:c7:e7:cd:18:6d:
19:ca:30:6f:3d:74:25:44:b2:e2:ee:e7:bc:20:33:
7d:d7:92:63:12:41:01:62:f8:fa:31:97:36:8a:56:
59:ed:67:cf:ee:10:c4:b8:c5:c6:f2:28:33:8b:21:
1a:81:56:7a:35:3d:95:5c:81:92:5a:d3:8f:54:01:
e9:0a:0a:7c:db:37:6c:e5:5b:8b:a8:22:cb:46:b1:
60:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:31:70:D3:36:E3:E3:80:3D:E4:89:63:93:DD:96:21:DE:6F:BC:A9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ODFw0zbj44A95Iljk92WId5vvKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
63:04:d4:6e:65:c3:a5:e7:92:2c:f1:f7:6b:57:aa:1d:2f:d6:
d1:8a:a5:93:c9:ef:2b:46:78:0c:0a:9b:d4:98:ea:37:3e:bc:
e6:55:ad:dd:fc:b7:10:0c:3d:13:24:b6:5a:95:72:3f:05:10:
0c:7e:bf:43:0b:a8:c1:5a:e2:23:4a:c7:69:a6:54:2f:d4:83:
94:c2:e7:93:8e:65:80:de:bc:54:f7:15:2c:d3:c3:9b:9b:c5:
8d:9d:b1:40:31:c2:75:bf:89:68:6c:36:bf:aa:58:b5:ef:38:
c4:72:92:d1:54:43:f4:7c:d2:9c:89:2b:3d:d7:ad:66:97:be:
89:1d:61:2e:cc:39:3e:85:55:4a:6b:68:a9:3b:70:f3:86:8f:
bb:13:f2:3b:7a:ae:cc:c4:45:78:29:f1:49:bd:26:b2:0c:c7:
38:13:1b:9d:b1:9a:03:26:71:96:e9:b0:a0:d0:6f:7a:84:34:
3f:62:b6:3a:6e:9d:31:e8:ea:50:b4:41:09:63:c6:52:27:07:
83:8e:ff:3e:bc:65:6c:c5:03:d5:f7:ca:80:76:bd:04:b0:1c:
8a:c5:23:a1:1d:58:5e:d0:66:23:ff:f8:1e:96:70:eb:8f:e7:
d3:50:91:43:d0:ec:b3:c0:6a:75:06:b0:0a:95:2b:9c:a3:e2:
49:07:80:0b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYYsAGll0TMyT0loP6vONQaXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjA3MTMxMTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzODMxNzBkMzM2ZTNlMzgwM2RlNDg5NjM5M2RkOTYyMWRlNmZiY2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkC7ivAwH6GJ1ciXfLT3TncAU5fPb
tiQVUsAvyppdCqMDL1sNk/d0t03URwF80tRmmkWrUyaIACGZgiYPpXIbutYNwPKa
9ltlGFr9uz/0aL7PbNlZtlDHKA/mwxewZnt3Mdqu1dOLUoU9SeUN+fQo5ga7fCNT
t8cdRUJTwaNf7kknQS2KdCKYh/Ylf6NBa2Wp96XmeCuezx2nYK44Ac+MLsVVjVQF
4vjqPMvvdVjJx+fNGG0ZyjBvPXQlRLLi7ue8IDN915JjEkEBYvj6MZc2ilZZ7WfP
7hDEuMXG8igziyEagVZ6NT2VXIGSWtOPVAHpCgp82zds5VuLqCLLRrFgFQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDgxcNM24+OAPeSJY5PdliHeb7ypMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvT0RGdzB6Ymo0NEE5NUlsams5MldJZDV2dktrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGME1G5lw6Xnkizx92tX
qh0v1tGKpZPJ7ytGeAwKm9SY6jc+vOZVrd38txAMPRMktlqVcj8FEAx+v0MLqMFa
4iNKx2mmVC/Ug5TC55OOZYDevFT3FSzTw5ubxY2dsUAxwnW/iWhsNr+qWLXvOMRy
ktFUQ/R80pyJKz3XrWaXvokdYS7MOT6FVUpraKk7cPOGj7sT8jt6rszERXgp8Um9
JrIMxzgTG52xmgMmcZbpsKDQb3qEND9itjpunTHo6lC0QQljxlInB4OO/z68ZWzF
A9X3yoB2vQSwHIrFI6EdWF7QZiP/+B6WcOuP59NQkUPQ7LPAanUGsAqVK5yj4kkH
gAs=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:00 2025 by rpki-client