Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R2QewmZLPv_L7XOBCu7WYnM4TD4.roa
File: R2QewmZLPv_L7XOBCu7WYnM4TD4.roa (raw, json)
Hash identifier: 6HHCqog2ODpez+I44ErI+2V4bu402GT8JBsAuZLf+Y4=
Subject key identifier: 47:64:1E:C2:66:4B:3E:FF:CB:ED:73:81:0A:EE:D6:62:73:38:4C:3E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A2135FD2F3D3A506F2E7FE716280E2BD9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R2QewmZLPv_L7XOBCu7WYnM4TD4.roa
Signing time: Wed 23 Aug 2023 07:05:00 +0000
ROA not before: Wed 23 Aug 2023 07:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:2135:4bf3/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:178d:7ed9/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:21:35:fd:2f:3d:3a:50:6f:2e:7f:e7:16:28:0e:2b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 23 07:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47641ec2664b3effcbed73810aeed66273384c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fc:ba:4c:7a:a8:25:b7:0d:d1:0b:ba:12:22:
70:da:bd:42:8b:33:9e:a5:c4:0f:87:8e:4e:d3:34:
23:eb:aa:94:62:1d:49:f1:8b:33:d2:3c:fe:8d:db:
9f:d0:25:47:b2:13:b0:f4:74:35:e9:e8:96:6d:05:
65:7f:ed:eb:69:34:29:03:26:20:d0:74:dc:ca:a7:
50:ce:8f:d3:d1:8b:1d:ce:f5:7f:f7:9d:25:48:1e:
98:48:ba:de:14:94:34:bc:70:a7:42:dc:08:98:74:
95:1d:71:4b:3c:0a:7b:a2:68:9f:d5:29:16:a5:5e:
61:b9:91:4f:1e:1d:1c:c2:3d:96:11:3c:f6:bc:82:
ae:2e:b4:bf:9e:2f:25:e2:0f:ac:28:a7:1c:78:86:
5e:37:a4:04:0a:0f:96:9b:93:cb:6c:0b:56:03:62:
73:8e:18:4f:3c:70:e6:5f:90:70:83:63:7f:24:a2:
b2:32:7e:01:b5:3f:57:ee:a6:8c:4d:79:8c:2b:14:
95:fa:9e:8a:1c:e4:0a:ad:25:fd:9f:e9:b4:85:be:
44:20:42:90:48:90:94:a1:0d:35:87:30:42:83:96:
7c:08:b2:b4:6b:af:ab:40:dd:bf:0a:10:ee:14:80:
48:4a:d0:6a:6d:b3:50:83:d8:07:1f:70:e1:18:0f:
a7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:64:1E:C2:66:4B:3E:FF:CB:ED:73:81:0A:EE:D6:62:73:38:4C:3E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R2QewmZLPv_L7XOBCu7WYnM4TD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5c:23:d6:23:4d:6b:17:6e:66:cf:5f:4d:18:3c:a7:8a:08:94:
d4:f0:e7:df:6c:c4:b7:df:2a:98:63:59:de:38:86:b4:19:8b:
50:1c:72:3e:92:99:5e:1f:be:1d:bb:89:51:99:72:aa:25:2b:
d0:0e:96:12:ea:33:6d:db:85:c7:2b:03:8b:23:fb:87:54:64:
63:69:67:9d:be:8f:5f:c6:ff:c7:c6:7f:11:d4:6f:02:80:1d:
2d:32:1b:37:7f:ec:df:fa:36:95:0b:91:77:9a:f0:f8:5a:e6:
55:f6:45:b7:9d:6b:49:92:17:ac:e2:99:1c:71:7b:ff:15:90:
ec:b2:ea:22:5b:05:5e:bc:0d:6a:0f:1d:b3:b6:30:ee:ad:5e:
b0:f6:6b:41:57:f8:a4:46:33:94:c0:33:9c:17:62:d3:86:95:
4b:25:49:38:0d:ab:e7:7a:b3:ac:5c:5e:2c:8d:4f:42:5b:cc:
b4:81:02:10:c4:2b:5f:69:42:ac:62:b3:42:b8:56:15:a3:e5:
7e:ed:75:af:43:1e:ab:e6:8d:0c:05:12:23:0b:6a:47:e5:62:
15:d9:e1:44:59:a0:5a:db:a1:00:26:a4:65:84:5c:df:46:e1:
70:01:93:fb:31:26:6f:d0:81:1d:ec:69:a7:52:32:21:7c:7d:
e9:d3:e9:b8
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYohNf0vPTpQby5/5xYoDivZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODIzMDcwNTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NzY0MWVjMjY2NGIzZWZmY2JlZDczODEwYWVlZDY2MjczMzg0YzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/y6THqoJbcN0Qu6EiJw2r1CizOe
pcQPh45O0zQj66qUYh1J8Ysz0jz+jduf0CVHshOw9HQ16eiWbQVlf+3raTQpAyYg
0HTcyqdQzo/T0YsdzvV/950lSB6YSLreFJQ0vHCnQtwImHSVHXFLPAp7omif1SkW
pV5huZFPHh0cwj2WETz2vIKuLrS/ni8l4g+sKKcceIZeN6QECg+Wm5PLbAtWA2Jz
jhhPPHDmX5Bwg2N/JKKyMn4BtT9X7qaMTXmMKxSV+p6KHOQKrSX9n+m0hb5EIEKQ
SJCUoQ01hzBCg5Z8CLK0a6+rQN2/ChDuFIBIStBqbbNQg9gHH3DhGA+nGwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEdkHsJmSz7/y+1zgQru1mJzOEw+MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvUjJRZXdtWkxQdl9MN1hPQkN1N1dZbk00VEQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFwj1iNNaxduZs9fTRg8
p4oIlNTw599sxLffKphjWd44hrQZi1Accj6SmV4fvh27iVGZcqolK9AOlhLqM23b
hccrA4sj+4dUZGNpZ52+j1/G/8fGfxHUbwKAHS0yGzd/7N/6NpULkXea8Pha5lX2
Rbeda0mSF6zimRxxe/8VkOyy6iJbBV68DWoPHbO2MO6tXrD2a0FX+KRGM5TAM5wX
YtOGlUslSTgNq+d6s6xcXiyNT0JbzLSBAhDEK19pQqxis0K4VhWj5X7tda9DHqvm
jQwFEiMLakflYhXZ4URZoFrboQAmpGWEXN9G4XABk/sxJm/QgR3saadSMiF8fenT
6bg=
-----END CERTIFICATE-----
Generated at Thu May 1 03:57:01 2025 by rpki-client