Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RcojXmUiDDJINkim8d418MkvdtU.roa
File: RcojXmUiDDJINkim8d418MkvdtU.roa (raw, json)
Hash identifier: 3SiIdAXJdVpa1TYTRlzBuJf1cI2o/K5tDvs4/NQhayE=
Subject key identifier: 45:CA:23:5E:65:22:0C:32:48:36:48:A6:F1:DE:35:F0:C9:2F:76:D5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01867942ABB125D96503A940CFFAFBCDF9FF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RcojXmUiDDJINkim8d418MkvdtU.roa
Signing time: Wed 22 Feb 2023 13:14:17 +0000
ROA not before: Wed 22 Feb 2023 13:14:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:79:42:ab:b1:25:d9:65:03:a9:40:cf:fa:fb:cd:f9:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 22 13:14:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45ca235e65220c32483648a6f1de35f0c92f76d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c4:5a:4a:f6:1c:c8:28:d9:d4:c4:cd:be:d9:
12:71:9d:b7:ab:05:dd:31:a7:1a:be:c0:6a:86:28:
ed:70:1d:1a:5e:c0:12:ee:97:e4:a1:6c:bc:55:76:
fd:2e:ce:be:e3:d2:73:67:ee:08:e8:8d:e7:e6:3e:
ef:0d:d9:62:65:2d:60:34:5d:ee:a7:17:b5:c0:0a:
b8:20:cc:79:0d:ad:c7:8e:ba:b5:7b:f8:4a:f5:f8:
60:ff:db:79:4a:a1:58:2c:37:59:2e:79:62:ac:71:
c3:b3:2e:af:eb:00:45:c6:25:e6:df:36:76:87:3f:
3f:2e:7e:63:10:62:52:31:a8:aa:ce:be:77:df:a9:
b0:cf:06:a7:67:88:df:48:e6:d6:95:61:56:3d:20:
2d:9a:2d:53:c1:76:49:a7:a3:16:b9:22:2a:21:d7:
0a:e8:a5:eb:54:35:bc:6c:9e:9d:52:98:56:e4:f1:
97:26:94:2d:91:58:c6:21:db:57:b9:7c:58:43:ef:
36:5a:39:3c:81:0b:0b:26:f1:cc:bb:3a:d7:35:b6:
19:5e:61:cb:1e:7f:25:e0:09:65:45:77:78:6b:b7:
b6:9c:c5:5e:b3:a1:07:db:54:eb:be:a1:e7:db:d0:
a6:95:96:64:77:50:41:c6:c6:29:f1:d3:6a:09:fb:
56:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:CA:23:5E:65:22:0C:32:48:36:48:A6:F1:DE:35:F0:C9:2F:76:D5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RcojXmUiDDJINkim8d418MkvdtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1a:07:62:a6:e1:19:a0:60:e5:c9:04:4d:19:9e:13:25:92:2a:
4c:24:5e:c6:c7:9e:f6:9f:10:5e:ad:7b:d6:2a:2f:75:5d:87:
43:ca:b3:da:4b:88:7e:21:08:35:8a:89:02:eb:f4:2d:1c:9d:
a6:cf:f7:c3:0b:1d:17:22:b5:f2:fd:f6:e1:9d:58:2f:37:ad:
c0:5b:56:25:c8:c7:9e:b6:11:b3:e5:af:9a:cf:15:cf:14:5a:
f3:07:36:d0:85:cc:ba:02:50:e3:95:b5:5d:f4:8a:df:c4:42:
e2:17:99:46:94:ff:89:16:6d:4e:64:9d:46:fd:e9:fe:6f:ae:
7a:32:42:e5:4a:70:a9:a1:de:0c:a9:c8:10:4e:a9:36:f1:95:
eb:17:91:03:c3:ab:7f:6d:28:ea:8e:df:7a:23:b0:dd:10:b4:
58:5c:c4:7a:a5:1a:dd:ca:4e:9d:4d:07:8a:05:e2:a2:5a:63:
f6:79:de:c6:a3:17:e6:16:ce:68:d8:de:78:01:9f:b0:b6:94:
f6:9c:ca:1a:54:cb:7b:54:3a:a4:46:be:19:97:02:e8:f3:51:
15:f9:6a:98:2f:98:48:85:06:06:7a:60:5a:bc:ce:66:47:32:
20:a4:1b:50:11:05:f0:50:2f:e1:d0:90:61:93:c9:65:0a:5e:
89:0e:63:de
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYZ5QquxJdllA6lAz/r7zfn/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjIyMTMxNDE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NWNhMjM1ZTY1MjIwYzMyNDgzNjQ4YTZmMWRlMzVmMGM5MmY3NmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsRaSvYcyCjZ1MTNvtkScZ23qwXd
MacavsBqhijtcB0aXsAS7pfkoWy8VXb9Ls6+49JzZ+4I6I3n5j7vDdliZS1gNF3u
pxe1wAq4IMx5Da3Hjrq1e/hK9fhg/9t5SqFYLDdZLnlirHHDsy6v6wBFxiXm3zZ2
hz8/Ln5jEGJSMaiqzr5336mwzwanZ4jfSObWlWFWPSAtmi1TwXZJp6MWuSIqIdcK
6KXrVDW8bJ6dUphW5PGXJpQtkVjGIdtXuXxYQ+82Wjk8gQsLJvHMuzrXNbYZXmHL
Hn8l4AllRXd4a7e2nMVes6EH21TrvqHn29CmlZZkd1BBxsYp8dNqCftWBwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEXKI15lIgwySDZIpvHeNfDJL3bVMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvUmNvalhtVWlEREpJTmtpbThkNDE4TWt2ZHRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABoHYqbhGaBg5ckETRme
EyWSKkwkXsbHnvafEF6te9YqL3Vdh0PKs9pLiH4hCDWKiQLr9C0cnabP98MLHRci
tfL99uGdWC83rcBbViXIx562EbPlr5rPFc8UWvMHNtCFzLoCUOOVtV30it/EQuIX
mUaU/4kWbU5knUb96f5vrnoyQuVKcKmh3gypyBBOqTbxlesXkQPDq39tKOqO33oj
sN0QtFhcxHqlGt3KTp1NB4oF4qJaY/Z53sajF+YWzmjY3ngBn7C2lPacyhpUy3tU
OqRGvhmXAujzURX5apgvmEiFBgZ6YFq8zmZHMiCkG1ARBfBQL+HQkGGTyWUKXokO
Y94=
-----END CERTIFICATE-----
Generated at Wed Apr 30 18:19:31 2025 by rpki-client