Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RpSn9kJEDGsJnu_R_dOv1UyXn9Y.roa
File: RpSn9kJEDGsJnu_R_dOv1UyXn9Y.roa (raw, json)
Hash identifier: xX7NP2k9giCJD1UXUsUlK7pbjfxwjIdMNOJoTIU3D3c=
Subject key identifier: 46:94:A7:F6:42:44:0C:6B:09:9E:EF:D1:FD:D3:AF:D5:4C:97:9F:D6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182E86A7FE65888A98212CB48F0E1DBCFCD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RpSn9kJEDGsJnu_R_dOv1UyXn9Y.roa
Signing time: Mon 29 Aug 2022 07:04:29 +0000
ROA not before: Mon 29 Aug 2022 07:04:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:e86a:2ff7/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:e8:6a:7f:e6:58:88:a9:82:12:cb:48:f0:e1:db:cf:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 29 07:04:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4694a7f642440c6b099eefd1fdd3afd54c979fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7b:a9:7b:f6:ea:25:4c:15:a9:55:01:b7:a0:
fc:8e:8d:91:d7:29:e7:f0:54:63:a9:e6:ca:3b:d3:
f5:87:b0:02:ae:6c:c7:79:f3:2c:93:41:b2:49:52:
dc:67:6b:05:c7:f3:13:50:16:19:28:e5:52:89:08:
e1:c8:48:10:1b:b9:e1:69:01:03:79:bb:96:30:ae:
5c:e3:d9:c7:5e:8c:8b:35:61:9f:b0:9d:8d:fa:b3:
81:bc:56:6f:a9:86:b6:92:d0:ad:63:68:4f:d8:7e:
2f:02:dd:67:35:a7:28:65:cb:45:62:c8:79:ea:ec:
d2:ef:18:73:94:af:ea:98:92:b0:39:3b:90:e1:40:
0f:64:e8:4a:c4:69:d0:50:f9:d8:fe:88:9c:68:9f:
1e:64:67:0c:94:a8:21:e8:ca:ce:28:67:c1:e4:d6:
3b:a0:02:1b:a4:3f:3c:e6:a3:e4:43:95:a4:e3:f8:
36:96:40:fa:37:ec:00:cb:84:d1:69:13:55:d4:89:
ed:4d:4d:ad:35:1c:09:e6:f3:12:e1:31:bd:ba:d5:
f9:67:81:55:4d:c3:df:8b:db:66:31:d2:ac:59:51:
78:f2:eb:a4:d6:a2:f8:46:44:e3:81:a9:e1:06:46:
47:a8:fa:77:0b:4a:a7:69:45:ad:69:64:48:76:c0:
ad:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:94:A7:F6:42:44:0C:6B:09:9E:EF:D1:FD:D3:AF:D5:4C:97:9F:D6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RpSn9kJEDGsJnu_R_dOv1UyXn9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7d:63:a8:58:21:ad:a2:6c:57:62:3f:d5:37:ce:58:bf:fc:ef:
d5:67:da:65:12:09:ce:be:af:4a:e0:d8:cc:c6:48:85:bd:ea:
44:a4:e9:91:a6:17:c4:78:30:21:87:1c:ca:7d:a6:17:61:92:
11:4d:14:6b:7b:22:88:2f:c0:1b:3a:11:59:87:7f:ce:02:04:
68:25:fa:82:c5:c4:73:82:c5:f2:2b:d9:bf:ef:be:3e:b8:58:
59:1f:a3:ea:31:19:b5:54:80:4c:7e:49:dc:cb:4c:22:52:5e:
89:eb:5d:c0:77:cd:0c:7d:09:44:64:c8:f7:79:05:f6:74:4b:
89:ce:c4:00:b3:2e:f5:bb:8f:91:d1:a9:07:2f:92:a3:56:1a:
2f:ad:2c:a0:fd:66:ea:a5:f2:2a:35:bd:33:f7:13:8c:1b:de:
3a:66:4f:2e:8a:13:f0:44:99:eb:41:54:22:2f:63:b2:24:4a:
db:98:b9:04:58:41:ad:dc:b6:4e:da:68:26:d1:0a:20:2d:75:
72:24:06:e0:2f:62:dc:7d:22:ae:de:9b:ac:37:24:24:26:63:
3a:21:f5:ea:e1:c0:a5:72:ce:cb:44:1b:e8:d3:c1:85:f1:7d:
c8:4f:b5:47:59:49:84:25:3a:31:92:ae:ec:42:2c:7b:11:23:
dc:74:23:5e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYLoan/mWIipghLLSPDh28/NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwODI5MDcwNDI5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Njk0YTdmNjQyNDQwYzZiMDk5ZWVmZDFmZGQzYWZkNTRjOTc5ZmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHupe/bqJUwVqVUBt6D8jo2R1ynn
8FRjqebKO9P1h7ACrmzHefMsk0GySVLcZ2sFx/MTUBYZKOVSiQjhyEgQG7nhaQED
ebuWMK5c49nHXoyLNWGfsJ2N+rOBvFZvqYa2ktCtY2hP2H4vAt1nNacoZctFYsh5
6uzS7xhzlK/qmJKwOTuQ4UAPZOhKxGnQUPnY/oicaJ8eZGcMlKgh6MrOKGfB5NY7
oAIbpD885qPkQ5Wk4/g2lkD6N+wAy4TRaRNV1IntTU2tNRwJ5vMS4TG9utX5Z4FV
TcPfi9tmMdKsWVF48uuk1qL4RkTjganhBkZHqPp3C0qnaUWtaWRIdsCtiQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEaUp/ZCRAxrCZ7v0f3Tr9VMl5/WMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvUnBTbjlrSkVER3NKbnVfUl9kT3YxVXlYbjlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAH1jqFghraJsV2I/1TfO
WL/879Vn2mUSCc6+r0rg2MzGSIW96kSk6ZGmF8R4MCGHHMp9phdhkhFNFGt7Iogv
wBs6EVmHf84CBGgl+oLFxHOCxfIr2b/vvj64WFkfo+oxGbVUgEx+SdzLTCJSXonr
XcB3zQx9CURkyPd5BfZ0S4nOxACzLvW7j5HRqQcvkqNWGi+tLKD9Zuql8io1vTP3
E4wb3jpmTy6KE/BEmetBVCIvY7IkStuYuQRYQa3ctk7aaCbRCiAtdXIkBuAvYtx9
Iq7em6w3JCQmYzoh9erhwKVyzstEG+jTwYXxfchPtUdZSYQlOjGSruxCLHsRI9x0
I14=
-----END CERTIFICATE-----
Generated at Thu May 1 08:53:02 2025 by rpki-client