Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R1fBqhhduDei-lf7Tck9wNiGj_8.roa
File: R1fBqhhduDei-lf7Tck9wNiGj_8.roa (raw, json)
Hash identifier: 0ERHw5dE/L3CrTKYZRyQyfeKrY9x2WXF359Cf+wgC6A=
Subject key identifier: 47:57:C1:AA:18:5D:B8:37:A2:FA:57:FB:4D:C9:3D:C0:D8:86:8F:FF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184FBBDF431B8EFB79423FDCA1441F86782
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R1fBqhhduDei-lf7Tck9wNiGj_8.roa
Signing time: Sat 10 Dec 2022 11:14:00 +0000
ROA not before: Sat 10 Dec 2022 11:14:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:fb:bd:f4:31:b8:ef:b7:94:23:fd:ca:14:41:f8:67:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 10 11:14:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4757c1aa185db837a2fa57fb4dc93dc0d8868fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:93:8f:51:74:c1:87:95:95:d2:d0:2d:23:03:
89:d6:f0:24:13:a0:b8:9f:1c:4b:86:35:33:7b:e8:
00:68:93:59:3a:7b:dd:11:3a:4c:16:d4:a4:c1:f3:
b1:b5:8d:cc:fc:a4:b1:f5:63:d0:58:0c:a5:57:fb:
fd:35:63:6f:10:d5:ed:fe:0d:7d:fa:69:ad:1b:a8:
40:9c:3a:b0:d0:78:2f:1a:30:b7:fd:60:20:8a:e8:
34:e3:16:ec:c3:70:56:60:c4:ba:43:b5:cc:06:5f:
07:d9:87:eb:e7:81:32:53:4f:b4:94:55:b4:9b:d4:
e5:26:52:d5:53:96:8e:14:7f:4f:0c:06:a0:35:f0:
ee:07:f3:15:a5:3e:d7:1e:11:d9:db:23:5e:fb:1a:
1b:f5:f3:01:18:06:5e:ed:32:95:e0:ca:4d:b2:e4:
de:dc:38:4c:eb:c0:0c:54:bb:d6:97:95:32:3d:0b:
c4:d1:24:cc:10:c4:eb:59:a2:90:d5:87:35:61:c5:
95:9b:01:19:de:37:ed:4a:9d:2f:04:3b:1d:2b:2e:
55:6c:cd:f7:7a:06:c2:d6:99:1a:36:1a:13:d5:71:
0f:d6:5f:0c:1f:85:43:8b:e1:6d:60:54:5a:4f:9a:
d9:76:5e:6d:9d:3f:42:dd:67:de:15:b4:28:ba:c2:
6e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:57:C1:AA:18:5D:B8:37:A2:FA:57:FB:4D:C9:3D:C0:D8:86:8F:FF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R1fBqhhduDei-lf7Tck9wNiGj_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
73:4b:7e:7f:31:7a:e2:02:9a:18:eb:2a:93:a9:40:e0:06:26:
db:d3:2e:04:38:29:bc:be:90:06:c8:e6:ed:88:85:9b:01:4d:
b4:18:8f:29:68:82:88:37:6a:8d:db:17:48:e9:cd:b9:fe:90:
97:c4:0c:94:17:81:21:9d:c3:c1:51:82:58:be:72:f0:9e:90:
2f:df:cf:20:96:78:44:0b:bd:60:ef:bd:9f:78:ae:63:b0:5b:
b3:da:b3:3f:51:d6:cd:46:fe:c6:6b:75:68:7c:77:b2:6e:70:
ba:df:8e:b9:0e:3b:81:41:b7:0d:b3:54:6b:84:10:68:07:a3:
6a:cd:48:6b:1a:c6:19:84:6e:c0:b9:2e:b0:6f:4e:b1:57:c9:
4c:c5:f9:c4:f4:ae:5f:51:75:35:26:80:dc:4a:af:17:53:b9:
f8:8e:35:6f:a5:3c:eb:d7:87:1e:9d:f4:4e:8b:44:04:7d:5b:
d9:23:4e:97:e0:17:d5:7f:13:cc:8f:f6:aa:37:e2:77:b8:8b:
d7:b9:e9:90:27:a0:90:16:87:d7:fb:c6:6b:55:3a:29:79:56:
f6:32:b9:5c:fd:ff:c8:18:5d:74:92:00:fb:74:9f:8e:c9:f5:
cd:9e:da:a8:ea:e8:13:09:d5:d7:44:e5:9a:17:24:db:07:ad:
fc:5a:c9:fc
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYT7vfQxuO+3lCP9yhRB+GeCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjEwMTExNDAwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NzU3YzFhYTE4NWRiODM3YTJmYTU3ZmI0ZGM5M2RjMGQ4ODY4ZmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5OPUXTBh5WV0tAtIwOJ1vAkE6C4
nxxLhjUze+gAaJNZOnvdETpMFtSkwfOxtY3M/KSx9WPQWAylV/v9NWNvENXt/g19
+mmtG6hAnDqw0HgvGjC3/WAgiug04xbsw3BWYMS6Q7XMBl8H2Yfr54EyU0+0lFW0
m9TlJlLVU5aOFH9PDAagNfDuB/MVpT7XHhHZ2yNe+xob9fMBGAZe7TKV4MpNsuTe
3DhM68AMVLvWl5UyPQvE0STMEMTrWaKQ1Yc1YcWVmwEZ3jftSp0vBDsdKy5VbM33
egbC1pkaNhoT1XEP1l8MH4VDi+FtYFRaT5rZdl5tnT9C3WfeFbQousJulwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEdXwaoYXbg3ovpX+03JPcDYho//MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvUjFmQnFoaGR1RGVpLWxmN1Rjazl3TmlHal84LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHNLfn8xeuICmhjrKpOp
QOAGJtvTLgQ4Kby+kAbI5u2IhZsBTbQYjylogog3ao3bF0jpzbn+kJfEDJQXgSGd
w8FRgli+cvCekC/fzyCWeEQLvWDvvZ94rmOwW7Pasz9R1s1G/sZrdWh8d7JucLrf
jrkOO4FBtw2zVGuEEGgHo2rNSGsaxhmEbsC5LrBvTrFXyUzF+cT0rl9RdTUmgNxK
rxdTufiONW+lPOvXhx6d9E6LRAR9W9kjTpfgF9V/E8yP9qo34ne4i9e56ZAnoJAW
h9f7xmtVOil5VvYyuVz9/8gYXXSSAPt0n47J9c2e2qjq6BMJ1ddE5ZoXJNsHrfxa
yfw=
-----END CERTIFICATE-----
Generated at Fri May 2 03:05:54 2025 by rpki-client