Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RIhTsEu2WvuXGMoHwM801mpdGs4.roa
File: RIhTsEu2WvuXGMoHwM801mpdGs4.roa (raw, json)
Hash identifier: 2Gb3LElbCjrh5zFg7DEU77EsO34VuXRxxxfWLIrJHUQ=
Subject key identifier: 44:88:53:B0:4B:B6:5A:FB:97:18:CA:07:C0:CF:34:D6:6A:5D:1A:CE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8301A367
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RIhTsEu2WvuXGMoHwM801mpdGs4.roa
Signing time: Wed 11 May 2022 07:18:02 +0000
ROA not before: Wed 11 May 2022 07:18:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2197922663 (0x8301a367)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 11 07:18:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=448853b04bb65afb9718ca07c0cf34d66a5d1ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fc:e4:49:6b:f9:87:4c:ca:23:3c:2e:b6:aa:
8a:43:3a:e9:4d:33:ca:cf:a0:59:e1:b0:7e:ed:91:
9e:62:a5:3b:b4:f4:43:3e:ef:b5:3f:1a:97:6b:35:
cd:18:94:81:8c:40:2f:36:61:a1:03:56:e4:ca:ad:
fc:ef:48:c2:3a:8e:cb:5b:2b:c7:0b:b5:c0:a0:c8:
5d:5c:54:65:fb:49:6e:7d:aa:25:85:56:27:c5:67:
5e:16:ac:30:72:cb:98:bb:ce:be:c4:d5:41:f1:34:
fd:43:ba:e5:f7:4d:bc:a2:b0:a4:3d:5a:f5:11:03:
c3:6e:1a:0d:86:40:f6:26:7d:07:56:5c:03:48:d4:
9b:9f:71:88:e1:b9:4d:03:3f:fe:1a:23:c3:d2:34:
83:bd:e5:3e:3e:a7:3a:f1:53:eb:e6:c9:e6:ac:65:
4f:43:f5:7e:f7:af:b8:f2:3d:9d:e1:97:d9:ae:ca:
05:3e:50:0f:48:f4:4e:81:1a:36:ec:f9:b4:66:5f:
37:63:25:18:af:64:77:47:7d:e8:85:03:23:8e:63:
1d:50:a6:05:c5:cc:7d:08:90:40:af:21:12:3c:97:
f7:65:23:0c:0a:7a:f7:6d:66:dc:7b:fb:01:6f:d3:
72:95:80:92:cc:be:d4:8b:28:23:d8:83:46:c9:e8:
1c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:88:53:B0:4B:B6:5A:FB:97:18:CA:07:C0:CF:34:D6:6A:5D:1A:CE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RIhTsEu2WvuXGMoHwM801mpdGs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
96:43:76:a2:c1:91:18:3d:87:3d:b0:ef:00:d5:08:65:28:d4:
3c:78:87:2c:cc:92:94:c4:5d:9d:7a:86:5e:1f:ad:c3:87:75:
80:24:4d:82:fb:84:30:8a:a9:8e:eb:b4:92:64:4a:61:80:30:
d5:dd:90:4a:a5:f4:39:44:1e:a5:47:fb:05:94:66:27:b5:3f:
da:43:50:47:f5:18:8a:e9:93:84:a9:7e:bb:7f:39:2b:04:61:
70:7f:65:01:b6:cb:30:56:95:44:ca:f2:6d:95:58:05:12:3c:
dd:da:21:f4:cd:49:60:d4:a5:32:20:ab:7b:45:24:38:5f:f7:
0a:ac:87:8d:5a:c7:3a:74:68:a5:9d:51:02:97:08:65:57:53:
7a:8b:b4:69:16:b2:fe:cd:a4:2a:88:17:66:c7:45:f6:20:1e:
69:18:78:22:0b:3c:31:09:8f:87:42:52:e6:23:1a:5d:2f:74:
dc:7b:01:ee:ca:4a:a5:68:18:41:01:8e:09:ed:14:2c:cb:86:
66:80:93:21:e9:b8:fb:10:04:c8:d0:ff:95:91:60:51:2b:b8:
68:33:3c:a8:06:60:ec:40:1d:b8:1d:ac:f1:02:f0:ec:82:5c:
f1:d0:a6:77:c9:1b:09:9e:7d:0a:d9:46:d6:90:41:d8:c1:01:
13:ba:05:96
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAIMBo2cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA1
MTEwNzE4MDJaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDQ0ODg1M2IwNGJi
NjVhZmI5NzE4Y2EwN2MwY2YzNGQ2NmE1ZDFhY2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC9/ORJa/mHTMojPC62qopDOulNM8rPoFnhsH7tkZ5ipTu0
9EM+77U/GpdrNc0YlIGMQC82YaEDVuTKrfzvSMI6jstbK8cLtcCgyF1cVGX7SW59
qiWFVifFZ14WrDByy5i7zr7E1UHxNP1DuuX3TbyisKQ9WvURA8NuGg2GQPYmfQdW
XANI1JufcYjhuU0DP/4aI8PSNIO95T4+pzrxU+vmyeasZU9D9X73r7jyPZ3hl9mu
ygU+UA9I9E6BGjbs+bRmXzdjJRivZHdHfeiFAyOOYx1QpgXFzH0IkECvIRI8l/dl
IwwKevdtZtx7+wFv03KVgJLMvtSLKCPYg0bJ6BzfAgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQURIhTsEu2WvuXGMoHwM801mpdGs4wHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS9SSWhUc0V1Mld2dVhHTW9Id004MDFtcGRHczQucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEAlkN2osGRGD2HPbDvANUIZSjUPHiHLMySlMRd
nXqGXh+tw4d1gCRNgvuEMIqpjuu0kmRKYYAw1d2QSqX0OUQepUf7BZRmJ7U/2kNQ
R/UYiumThKl+u385KwRhcH9lAbbLMFaVRMrybZVYBRI83doh9M1JYNSlMiCre0Uk
OF/3CqyHjVrHOnRopZ1RApcIZVdTeou0aRay/s2kKogXZsdF9iAeaRh4Igs8MQmP
h0JS5iMaXS903HsB7spKpWgYQQGOCe0ULMuGZoCTIem4+xAEyND/lZFgUSu4aDM8
qAZg7EAduB2s8QLw7IJc8dCmd8kbCZ59CtlG1pBB2MEBE7oFlg==
-----END CERTIFICATE-----
Generated at Fri May 2 04:23:19 2025 by rpki-client