Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R4angSX020ZFRhKYzEZwbmedlh4.roa
File: R4angSX020ZFRhKYzEZwbmedlh4.roa (raw, json)
Hash identifier: r+Uzp3k3VHLABGDhuK4I1CEw3xyvQVuFNg3SYTa7afw=
Subject key identifier: 47:86:A7:81:25:F4:DB:46:45:46:12:98:CC:46:70:6E:67:9D:96:1E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8CF6F7B6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R4angSX020ZFRhKYzEZwbmedlh4.roa
Signing time: Wed 15 Jun 2022 15:09:44 +0000
ROA not before: Wed 15 Jun 2022 15:09:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:56ba:5b78/128 maxlen: 128
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2364995510 (0x8cf6f7b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 15 15:09:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4786a78125f4db4645461298cc46706e679d961e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2a:09:f5:80:c6:f5:4f:b9:93:cf:e0:be:32:
1e:75:46:a7:14:a4:96:14:85:f3:54:d5:39:44:61:
9a:04:fc:49:ef:8e:6e:6a:2a:0a:46:60:4a:a5:5a:
52:8d:37:0d:14:f4:07:e7:70:f3:87:87:af:0c:0b:
7f:04:6e:fe:59:b2:7a:85:79:d9:f6:2d:be:b0:d5:
69:80:68:e1:a1:cd:7f:13:85:ec:fb:d9:b7:48:4f:
ba:2c:30:5c:39:d1:a8:4d:24:dd:c2:ac:1f:dc:a5:
f7:0d:11:26:83:29:7e:ff:ac:9f:c0:dd:68:66:3e:
e9:eb:70:7f:56:7e:df:4e:0c:8a:05:5d:fd:26:45:
8b:f9:27:90:30:8b:aa:6f:89:8a:43:a4:45:96:b0:
c6:6d:07:90:e4:7a:59:c3:eb:93:ff:13:f6:a5:5d:
4d:0e:65:fc:bd:14:71:e6:de:40:6c:c0:fc:a7:82:
17:c7:67:5c:42:4b:60:7f:22:7f:17:e8:a6:78:4b:
21:4d:79:3e:97:50:3d:2d:e8:fc:02:83:f9:df:22:
2f:3e:44:de:b9:b9:8e:67:fc:f4:94:f2:0c:14:bf:
5c:e2:4e:12:58:4e:ad:76:b4:8a:a4:24:3d:33:de:
38:bd:a9:ed:ea:b6:80:67:4c:94:0a:1e:7a:67:47:
33:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:86:A7:81:25:F4:DB:46:45:46:12:98:CC:46:70:6E:67:9D:96:1E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R4angSX020ZFRhKYzEZwbmedlh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
af:c5:b3:ac:18:5d:74:1c:60:d7:81:b5:9e:7e:73:8e:57:0b:
aa:e0:e2:37:0e:80:5c:86:5c:b4:de:e5:21:d0:35:64:65:dd:
41:02:00:44:d6:73:4b:2b:f8:17:dd:d0:c1:f7:a9:fb:de:d1:
4d:33:f4:9f:c6:ed:e6:25:55:58:79:ab:b1:8f:09:d1:72:ad:
20:ce:ec:f2:42:03:bd:bb:40:fe:55:c7:64:9c:15:63:eb:d4:
07:01:05:09:0d:8f:87:59:fa:97:ce:03:e4:5e:b1:42:ea:c6:
f4:dc:9a:f4:63:0d:c4:75:0e:ff:b4:53:0a:1d:4f:e0:aa:4d:
30:e1:0b:01:16:7d:58:f5:79:4f:a7:1e:04:5b:9b:d5:1f:f5:
55:1e:80:e7:c4:49:55:8b:1c:05:0a:ac:30:d9:0a:d7:5c:cc:
1c:a9:55:73:59:96:38:39:13:f1:b6:d5:4f:3d:de:5a:1b:04:
30:82:aa:53:19:81:f7:94:b2:60:22:45:fe:51:aa:52:79:60:
1f:56:f8:9d:e9:aa:05:fc:d4:09:b8:64:4e:55:8f:05:34:b4:
45:8c:cf:1a:3d:6d:ff:30:f8:46:f0:4a:75:44:0f:2b:62:6c:
2d:b2:49:71:bb:46:49:91:3f:c6:4a:27:44:52:29:47:7a:61:
a5:ef:82:4b
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAIz297YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA2
MTUxNTA5NDRaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDQ3ODZhNzgxMjVm
NGRiNDY0NTQ2MTI5OGNjNDY3MDZlNjc5ZDk2MWUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC2Kgn1gMb1T7mTz+C+Mh51RqcUpJYUhfNU1TlEYZoE/Env
jm5qKgpGYEqlWlKNNw0U9AfncPOHh68MC38Ebv5ZsnqFedn2Lb6w1WmAaOGhzX8T
hez72bdIT7osMFw50ahNJN3CrB/cpfcNESaDKX7/rJ/A3WhmPunrcH9Wft9ODIoF
Xf0mRYv5J5Awi6pviYpDpEWWsMZtB5DkelnD65P/E/alXU0OZfy9FHHm3kBswPyn
ghfHZ1xCS2B/In8X6KZ4SyFNeT6XUD0t6PwCg/nfIi8+RN65uY5n/PSU8gwUv1zi
ThJYTq12tIqkJD0z3ji9qe3qtoBnTJQKHnpnRzMhAgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQUR4angSX020ZFRhKYzEZwbmedlh4wHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS9SNGFuZ1NYMDIwWkZSaEtZekVad2JtZWRsaDQucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEAr8WzrBhddBxg14G1nn5zjlcLquDiNw6AXIZc
tN7lIdA1ZGXdQQIARNZzSyv4F93Qwfep+97RTTP0n8bt5iVVWHmrsY8J0XKtIM7s
8kIDvbtA/lXHZJwVY+vUBwEFCQ2Ph1n6l84D5F6xQurG9Nya9GMNxHUO/7RTCh1P
4KpNMOELARZ9WPV5T6ceBFub1R/1VR6A58RJVYscBQqsMNkK11zMHKlVc1mWODkT
8bbVTz3eWhsEMIKqUxmB95SyYCJF/lGqUnlgH1b4nemqBfzUCbhkTlWPBTS0RYzP
Gj1t/zD4RvBKdUQPK2JsLbJJcbtGSZE/xkonRFIpR3phpe+CSw==
-----END CERTIFICATE-----
Generated at Sat May 3 03:31:07 2025 by rpki-client