Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RbJnvcYdiGasRKAhjI7O9kavDYc.roa
File: RbJnvcYdiGasRKAhjI7O9kavDYc.roa (raw, json)
Hash identifier: A1GxfMeIgiSnT2JQnVMSzcGCdekZ1AvNYTmBW2mzl/0=
Subject key identifier: 45:B2:67:BD:C6:1D:88:66:AC:44:A0:21:8C:8E:CE:F6:46:AF:0D:87
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189D5108BF2B9586E125E0AD529E4BE5CFB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RbJnvcYdiGasRKAhjI7O9kavDYc.roa
Signing time: Tue 08 Aug 2023 12:12:58 +0000
ROA not before: Tue 08 Aug 2023 12:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d5:10:8b:f2:b9:58:6e:12:5e:0a:d5:29:e4:be:5c:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 8 12:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45b267bdc61d8866ac44a0218c8ecef646af0d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fb:e1:8c:ab:31:a8:e6:8a:30:6e:55:38:8b:
cf:b5:71:10:ef:3b:87:d8:b3:0e:77:38:f9:f5:83:
24:d5:38:cb:29:0d:2d:e7:9f:48:a6:70:6e:fd:f2:
6f:44:7b:f0:46:76:d7:e5:2b:57:d1:36:cb:0c:3b:
b1:e1:7e:49:8d:92:85:64:d4:40:14:30:cb:f1:cf:
3f:c6:b0:4a:6c:c0:06:01:70:c3:a8:50:7b:41:1f:
50:4b:75:83:0d:03:91:56:28:c5:e2:2a:fc:db:26:
70:a5:5e:8b:1a:12:d9:9d:ff:e6:22:c2:dd:57:bf:
87:a3:06:7d:a4:65:ed:5d:32:10:28:68:0f:a4:b8:
c4:9a:8e:b2:27:5e:f0:45:82:fd:60:85:e7:fc:53:
0e:c9:9c:6f:f5:9f:8e:00:a1:68:64:ff:9e:c7:90:
d1:4f:82:1d:05:3d:a6:bb:df:cb:1e:11:6c:81:02:
a8:6c:7b:66:3d:f5:9f:e4:ab:a1:15:74:80:36:4d:
66:6b:7f:33:7b:e9:a3:1c:f7:f7:00:cb:0e:b5:b7:
db:86:a9:d1:cd:91:84:9c:80:27:08:c1:4f:f8:f7:
91:44:b6:f8:c6:08:67:84:a7:ae:a2:4d:a8:c6:5b:
7b:e3:64:81:81:0c:f0:9e:39:89:d2:5e:25:2a:dd:
fa:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B2:67:BD:C6:1D:88:66:AC:44:A0:21:8C:8E:CE:F6:46:AF:0D:87
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RbJnvcYdiGasRKAhjI7O9kavDYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
64:7b:9c:2c:03:2c:7d:95:18:a6:9b:bc:33:b9:4d:06:f4:7a:
30:ad:1b:53:c3:82:d5:6d:50:d0:25:a6:c2:2b:7f:2d:bb:fc:
04:61:9b:15:9e:71:97:1d:ec:1d:f8:3d:4a:94:52:e1:f9:db:
02:f3:a8:e2:be:bb:d4:bd:9c:30:4a:57:db:dc:f5:f3:79:3d:
d8:90:f6:79:f1:5a:fd:e5:78:09:6e:e4:8b:a0:49:ca:1e:f9:
93:cf:de:78:a2:50:9d:e8:70:42:ef:b8:84:67:1b:dd:d4:ed:
ea:24:7d:20:69:84:49:fc:d8:7e:e3:33:7b:ff:a4:62:5b:96:
65:21:d4:3f:27:3f:37:4e:27:92:14:25:69:66:70:98:e5:e3:
72:84:49:5d:ce:b9:cf:4f:e0:b8:c3:5e:04:7d:8d:f0:be:c3:
b4:c9:8a:6a:93:12:73:4c:64:c0:06:d0:4a:0d:72:69:de:2b:
5b:a7:55:4d:b0:f8:b6:98:34:01:3d:b5:ac:52:b0:3c:3e:0f:
10:29:d8:05:93:28:3f:11:39:80:59:51:8a:b1:90:4c:ed:65:
f6:1c:a9:b1:0d:06:e9:2e:3e:ac:49:b1:93:fe:38:27:b0:e1:
2f:68:1e:aa:4a:d9:93:2b:fa:b6:51:95:00:1d:03:75:26:0d:
f9:52:53:8d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYnVEIvyuVhuEl4K1Snkvlz7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODA4MTIxMjU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NWIyNjdiZGM2MWQ4ODY2YWM0NGEwMjE4YzhlY2VmNjQ2YWYwZDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvvhjKsxqOaKMG5VOIvPtXEQ7zuH
2LMOdzj59YMk1TjLKQ0t559IpnBu/fJvRHvwRnbX5StX0TbLDDux4X5JjZKFZNRA
FDDL8c8/xrBKbMAGAXDDqFB7QR9QS3WDDQORVijF4ir82yZwpV6LGhLZnf/mIsLd
V7+HowZ9pGXtXTIQKGgPpLjEmo6yJ17wRYL9YIXn/FMOyZxv9Z+OAKFoZP+ex5DR
T4IdBT2mu9/LHhFsgQKobHtmPfWf5KuhFXSANk1ma38ze+mjHPf3AMsOtbfbhqnR
zZGEnIAnCMFP+PeRRLb4xghnhKeuok2oxlt742SBgQzwnjmJ0l4lKt36KQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEWyZ73GHYhmrESgIYyOzvZGrw2HMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvUmJKbnZjWWRpR2FzUktBaGpJN085a2F2RFljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGR7nCwDLH2VGKabvDO5
TQb0ejCtG1PDgtVtUNAlpsIrfy27/ARhmxWecZcd7B34PUqUUuH52wLzqOK+u9S9
nDBKV9vc9fN5PdiQ9nnxWv3leAlu5IugScoe+ZPP3niiUJ3ocELvuIRnG93U7eok
fSBphEn82H7jM3v/pGJblmUh1D8nPzdOJ5IUJWlmcJjl43KESV3Ouc9P4LjDXgR9
jfC+w7TJimqTEnNMZMAG0EoNcmneK1unVU2w+LaYNAE9taxSsDw+DxAp2AWTKD8R
OYBZUYqxkEztZfYcqbENBukuPqxJsZP+OCew4S9oHqpK2ZMr+rZRlQAdA3UmDflS
U40=
-----END CERTIFICATE-----
Generated at Fri May 2 12:36:19 2025 by rpki-client