Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RW9e7CyYssBuPOWQOlDdk32NgUE.roa
File: RW9e7CyYssBuPOWQOlDdk32NgUE.roa (raw, json)
Hash identifier: 9ZsJKNt8Dr93DPXPCDxnhB7O9C4ntEeIUQPP6cBncNk=
Subject key identifier: 45:6F:5E:EC:2C:98:B2:C0:6E:3C:E5:90:3A:50:DD:93:7D:8D:81:41
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A0CDA41C15CB374D451210BF6FF99420C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RW9e7CyYssBuPOWQOlDdk32NgUE.roa
Signing time: Sat 19 Aug 2023 08:12:24 +0000
ROA not before: Sat 19 Aug 2023 08:12:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:0c:da:41:c1:5c:b3:74:d4:51:21:0b:f6:ff:99:42:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 19 08:12:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=456f5eec2c98b2c06e3ce5903a50dd937d8d8141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:30:d7:ce:50:57:bd:dd:8e:b9:1a:76:b9:80:
77:b8:1d:4f:95:6f:f9:d0:13:74:02:ee:1e:bb:78:
fd:e3:29:5e:83:55:ea:07:ba:7f:f7:46:29:b2:4c:
07:3f:ec:a8:fd:56:3e:59:f7:f5:2d:06:d8:44:39:
79:00:cd:e6:f4:bf:c3:d6:eb:41:06:11:eb:15:dd:
8a:ad:29:4f:e9:83:2f:ac:8e:a6:a8:2e:c3:56:10:
e6:e8:ff:eb:6d:70:44:89:b8:82:92:ef:6c:a5:90:
ed:33:7d:54:34:9d:ce:80:37:eb:97:6d:5d:8e:86:
de:d6:00:21:80:ff:da:72:27:04:1b:c9:ca:b6:fc:
89:ee:4b:be:d8:79:37:ee:56:0a:ce:8b:bf:8e:c1:
6b:76:d3:60:58:e1:11:33:a7:7d:5c:bc:4f:2f:96:
02:9e:fd:c0:a9:f0:e3:31:17:33:18:17:1b:18:c6:
b7:dc:e2:37:fe:02:c1:0a:bd:76:2b:a1:91:c7:c6:
d3:ca:cd:60:49:ef:97:bc:e8:b8:84:da:df:70:c7:
5e:f5:52:0d:9a:95:15:f2:a9:39:06:c9:92:21:47:
9e:92:89:e9:1e:78:5d:22:49:0e:db:11:c2:90:d6:
4c:f6:5f:07:1e:32:f7:74:f5:26:fe:57:d2:a8:08:
57:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:6F:5E:EC:2C:98:B2:C0:6E:3C:E5:90:3A:50:DD:93:7D:8D:81:41
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RW9e7CyYssBuPOWQOlDdk32NgUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
45:21:5f:9a:0c:f2:cf:4a:c2:1c:f7:36:c5:72:ef:88:9e:aa:
09:c2:18:c3:55:80:22:bd:e0:d2:9f:63:ea:ea:d9:0b:bc:a9:
65:b1:72:68:83:a5:a2:2b:ac:8e:30:46:f8:f1:e2:bc:05:93:
ac:38:3e:04:f6:86:be:cb:7c:bf:5a:01:0c:4f:4d:bc:92:cc:
9b:37:25:df:2c:45:4d:6f:8c:b1:2f:30:b6:c8:e6:34:0d:5e:
ac:ce:2a:ed:46:59:24:d7:c1:7b:34:8a:9f:44:9f:55:e1:06:
bf:bd:56:09:a7:d6:3c:78:63:a7:e4:28:31:56:f1:24:35:87:
d4:0b:d5:54:62:66:e2:1f:b2:c1:e0:d8:77:69:2d:14:61:e7:
ce:bb:ad:ac:38:bc:7b:4a:44:d6:15:4a:13:b5:bc:04:2f:0a:
bf:1c:04:9a:c9:8b:b8:0c:14:e0:a6:5c:fe:ec:b8:ab:ed:da:
0d:29:ba:ad:27:b4:2e:36:59:ca:77:fa:84:50:37:c4:d3:5f:
19:31:1b:f0:40:69:4e:de:6a:75:97:b9:dc:f8:14:89:ff:07:
20:7a:4c:f3:50:96:13:9e:b6:91:92:f8:40:28:da:ad:35:f0:
9e:16:fa:9e:a6:05:4c:7a:a0:7a:0d:fc:a8:32:e3:17:df:e5:
5e:e4:cb:05
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYoM2kHBXLN01FEhC/b/mUIMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODE5MDgxMjI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTZmNWVlYzJjOThiMmMwNmUzY2U1OTAzYTUwZGQ5MzdkOGQ4MTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijDXzlBXvd2OuRp2uYB3uB1PlW/5
0BN0Au4eu3j94yleg1XqB7p/90YpskwHP+yo/VY+Wff1LQbYRDl5AM3m9L/D1utB
BhHrFd2KrSlP6YMvrI6mqC7DVhDm6P/rbXBEibiCku9spZDtM31UNJ3OgDfrl21d
jobe1gAhgP/acicEG8nKtvyJ7ku+2Hk37lYKzou/jsFrdtNgWOERM6d9XLxPL5YC
nv3AqfDjMRczGBcbGMa33OI3/gLBCr12K6GRx8bTys1gSe+XvOi4hNrfcMde9VIN
mpUV8qk5BsmSIUeekonpHnhdIkkO2xHCkNZM9l8HHjL3dPUm/lfSqAhX2QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEVvXuwsmLLAbjzlkDpQ3ZN9jYFBMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvUlc5ZTdDeVlzc0J1UE9XUU9sRGRrMzJOZ1VFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEUhX5oM8s9Kwhz3NsVy
74ieqgnCGMNVgCK94NKfY+rq2Qu8qWWxcmiDpaIrrI4wRvjx4rwFk6w4PgT2hr7L
fL9aAQxPTbySzJs3Jd8sRU1vjLEvMLbI5jQNXqzOKu1GWSTXwXs0ip9En1XhBr+9
Vgmn1jx4Y6fkKDFW8SQ1h9QL1VRiZuIfssHg2HdpLRRh5867raw4vHtKRNYVShO1
vAQvCr8cBJrJi7gMFOCmXP7suKvt2g0puq0ntC42Wcp3+oRQN8TTXxkxG/BAaU7e
anWXudz4FIn/ByB6TPNQlhOetpGS+EAo2q018J4W+p6mBUx6oHoN/Kgy4xff5V7k
ywU=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:26 2025 by rpki-client