Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Rr59xdi8cK9yb1HJgITqjKpFRYI.roa
File: Rr59xdi8cK9yb1HJgITqjKpFRYI.roa (raw, json)
Hash identifier: q0GCu9IvwaG9ccDmQD43BLHVLOrFlRaAw3UXTQhOUWg=
Subject key identifier: 46:BE:7D:C5:D8:BC:70:AF:72:6F:51:C9:80:84:EA:8C:AA:45:45:82
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01899440E313D898705CC2F6D798C0905FC5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Rr59xdi8cK9yb1HJgITqjKpFRYI.roa
Signing time: Wed 26 Jul 2023 22:10:27 +0000
ROA not before: Wed 26 Jul 2023 22:10:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:94:40:e3:13:d8:98:70:5c:c2:f6:d7:98:c0:90:5f:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 26 22:10:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46be7dc5d8bc70af726f51c98084ea8caa454582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:53:ce:bd:43:7e:25:f3:a4:7e:42:36:df:0d:
3b:7f:04:fe:b6:3d:ec:57:52:af:12:38:f3:23:0f:
8b:a1:9a:90:51:97:f0:30:3b:71:50:ae:bc:3c:19:
2f:be:40:d9:8d:d7:a2:4f:11:c5:0f:86:62:42:5c:
75:a6:bd:04:c4:9d:20:b4:f2:c0:b7:7d:17:cb:49:
a3:68:87:42:6e:ab:3f:a7:41:5b:8f:f7:3f:e5:b2:
68:06:e8:52:bd:8a:c3:71:94:cd:e0:19:90:90:61:
37:eb:92:cf:2e:15:5e:55:d3:25:15:b6:c9:ef:4b:
5a:21:c1:53:04:73:cd:c4:1a:e8:29:10:f6:28:09:
45:ae:c8:a6:f1:02:ef:34:4a:a9:e1:2c:ae:d2:91:
81:10:2e:5e:b8:1d:9a:20:b3:1f:3e:1c:e6:0c:2b:
73:4e:b8:1a:2e:07:e7:2c:e4:6e:8d:99:ac:32:32:
18:0e:c0:09:97:83:37:08:8b:f6:7c:c2:f5:f5:2a:
ab:b8:20:35:51:ed:74:28:40:5f:00:3b:80:b3:8d:
2c:3c:0a:32:52:11:b9:99:8f:b0:c3:8d:f3:c9:85:
0f:73:bd:db:87:17:b9:3a:99:02:09:ae:d9:8d:e2:
87:0c:58:53:02:14:2e:5f:3c:9c:ba:10:8d:e4:61:
e9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:BE:7D:C5:D8:BC:70:AF:72:6F:51:C9:80:84:EA:8C:AA:45:45:82
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Rr59xdi8cK9yb1HJgITqjKpFRYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
46:0d:bd:bd:98:2d:79:e3:f3:ac:50:e6:60:bf:03:e2:7e:de:
b9:e6:5f:62:ba:11:52:a8:4b:5b:3b:9f:9f:fd:c5:7a:a4:31:
36:ff:ae:a3:02:db:f8:b1:19:dc:91:f8:44:1e:fb:18:bb:8e:
23:58:9e:e0:39:52:a9:9b:a9:a2:48:bf:3a:e8:bd:2a:b4:ba:
ce:35:1e:72:f4:18:a2:fe:9d:e0:77:14:89:14:83:6b:62:84:
41:82:03:02:98:0f:db:cf:29:4c:53:b1:45:63:1f:82:c6:f9:
83:46:18:8b:38:24:d2:35:14:c3:41:4d:33:00:0e:c4:87:4d:
52:16:74:36:be:b5:7e:bf:30:b5:3c:c0:f1:59:8f:1e:d2:4a:
0a:84:41:7a:92:b0:c8:55:64:49:b0:12:6f:a1:f6:60:10:ef:
21:61:99:40:9b:35:7f:f9:6b:07:fa:d1:7d:85:5f:2f:55:ed:
69:6b:fa:c4:1e:26:7c:67:03:72:f0:56:6a:fd:c2:b7:54:55:
4e:5e:25:72:cf:32:58:15:79:17:65:ef:6b:53:07:2f:c7:e7:
7c:8d:7e:92:79:7b:5d:3a:6e:df:3c:9d:f4:88:56:13:f2:d0:
8c:cd:09:95:ff:f3:3f:88:9f:fc:ee:d2:51:70:2c:a8:ba:5d:
77:2f:56:b3
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYmUQOMT2JhwXML215jAkF/FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzI2MjIxMDI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NmJlN2RjNWQ4YmM3MGFmNzI2ZjUxYzk4MDg0ZWE4Y2FhNDU0NTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1POvUN+JfOkfkI23w07fwT+tj3s
V1KvEjjzIw+LoZqQUZfwMDtxUK68PBkvvkDZjdeiTxHFD4ZiQlx1pr0ExJ0gtPLA
t30Xy0mjaIdCbqs/p0Fbj/c/5bJoBuhSvYrDcZTN4BmQkGE365LPLhVeVdMlFbbJ
70taIcFTBHPNxBroKRD2KAlFrsim8QLvNEqp4Syu0pGBEC5euB2aILMfPhzmDCtz
TrgaLgfnLORujZmsMjIYDsAJl4M3CIv2fML19SqruCA1Ue10KEBfADuAs40sPAoy
UhG5mY+ww43zyYUPc73bhxe5OpkCCa7ZjeKHDFhTAhQuXzycuhCN5GHp4wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEa+fcXYvHCvcm9RyYCE6oyqRUWCMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvUnI1OXhkaThjSzl5YjFISmdJVHFqS3BGUllJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEYNvb2YLXnj86xQ5mC/
A+J+3rnmX2K6EVKoS1s7n5/9xXqkMTb/rqMC2/ixGdyR+EQe+xi7jiNYnuA5Uqmb
qaJIvzrovSq0us41HnL0GKL+neB3FIkUg2tihEGCAwKYD9vPKUxTsUVjH4LG+YNG
GIs4JNI1FMNBTTMADsSHTVIWdDa+tX6/MLU8wPFZjx7SSgqEQXqSsMhVZEmwEm+h
9mAQ7yFhmUCbNX/5awf60X2FXy9V7Wlr+sQeJnxnA3LwVmr9wrdUVU5eJXLPMlgV
eRdl72tTBy/H53yNfpJ5e106bt88nfSIVhPy0IzNCZX/8z+In/zu0lFwLKi6XXcv
VrM=
-----END CERTIFICATE-----
Generated at Thu May 1 04:50:54 2025 by rpki-client