Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Rx83bbIAi_lhJ1uOQRPSW2SEilU.roa
File: Rx83bbIAi_lhJ1uOQRPSW2SEilU.roa (raw, json)
Hash identifier: olE0l8WwRnfLUZtN+1snhhQEzP8mtb8srAmP7zbEzqg=
Subject key identifier: 47:1F:37:6D:B2:00:8B:F9:61:27:5B:8E:41:13:D2:5B:64:84:8A:55
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189B62A646D38CF5DBA4897B7839D66971F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Rx83bbIAi_lhJ1uOQRPSW2SEilU.roa
Signing time: Wed 02 Aug 2023 12:12:58 +0000
ROA not before: Wed 02 Aug 2023 12:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b6:2a:64:6d:38:cf:5d:ba:48:97:b7:83:9d:66:97:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 2 12:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=471f376db2008bf961275b8e4113d25b64848a55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3a:1a:40:f2:1e:b8:af:9e:46:16:ac:38:95:
29:21:0b:3e:a9:4c:a5:74:54:12:d6:e3:28:4c:87:
1a:10:a1:c8:16:95:e0:c5:2a:c5:88:41:ea:61:03:
97:d1:33:f4:72:c5:f0:c5:56:01:30:e3:6b:cd:c1:
1a:5d:c7:c0:ff:f4:38:ed:b1:85:90:97:3b:8f:56:
5b:fd:30:76:28:d1:14:11:81:62:fd:fd:56:0b:c4:
ae:c3:5c:42:08:29:d0:c8:11:0d:f7:24:2a:f8:50:
09:2c:8c:24:00:77:a8:fd:3f:d4:f3:49:01:8c:0f:
9e:c5:0f:00:50:1b:b5:86:9d:bf:85:e7:47:e5:fd:
12:10:80:a0:56:2f:2c:04:49:0d:08:13:85:ec:b9:
ce:72:76:5e:6c:08:bd:23:aa:90:d7:92:dc:3a:dc:
8f:15:b1:94:40:f4:35:58:8e:c9:cb:72:a7:14:db:
b1:4c:c4:f5:1f:3a:a1:7f:72:e3:ed:e0:5f:6d:bf:
77:6a:e7:f1:fb:f3:d9:9a:9f:e0:1c:ca:04:fa:f6:
66:c9:17:94:7a:f8:c8:3c:8f:14:24:b3:77:8b:fd:
54:12:cc:49:41:1d:8b:ab:94:ee:13:51:89:56:cf:
c3:fd:1a:87:cc:57:65:a8:69:9d:fc:ff:bd:95:f6:
95:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:1F:37:6D:B2:00:8B:F9:61:27:5B:8E:41:13:D2:5B:64:84:8A:55
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Rx83bbIAi_lhJ1uOQRPSW2SEilU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2a:a3:9e:2d:e2:29:51:fc:8e:28:b8:a1:1e:3b:b3:90:c6:e9:
9e:13:ba:27:8c:12:e2:d7:71:50:22:46:31:72:e8:b8:4d:b0:
1a:34:fe:cd:91:b8:a9:a6:e4:e0:4b:9b:7c:12:f1:54:54:6e:
4a:28:28:b4:73:8e:c2:41:27:9d:e0:56:b5:4f:99:15:31:da:
b9:65:84:50:a7:b2:d4:f3:71:38:80:14:8b:a3:c2:80:33:98:
6d:54:84:2f:c8:5a:61:dd:af:d7:d5:a6:2d:04:14:2c:1f:bc:
e7:00:86:2f:14:5d:ad:42:61:f0:2d:8f:55:8d:d1:75:ee:6d:
42:bd:b1:de:5a:c5:ad:f9:25:8d:70:cc:85:69:19:0a:4e:c3:
7a:0f:4d:71:c3:3b:cb:3d:5b:51:bf:70:4d:18:23:fb:cc:a3:
83:0f:d8:cd:97:d9:71:09:ed:6c:96:61:ac:34:30:18:17:02:
12:2a:0e:8c:d9:c2:11:fd:dc:2c:77:a5:02:73:35:b6:aa:71:
20:67:56:c8:8b:bf:21:91:12:a1:5f:ae:b4:18:78:4a:37:cb:
db:6d:4e:c0:47:57:4e:41:e0:b1:42:b6:0b:7c:bf:03:94:22:
7d:c7:6c:90:88:51:50:1a:43:bf:8f:d2:04:3e:31:eb:42:52:
2d:61:0d:27
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYm2KmRtOM9dukiXt4OdZpcfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODAyMTIxMjU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NzFmMzc2ZGIyMDA4YmY5NjEyNzViOGU0MTEzZDI1YjY0ODQ4YTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzoaQPIeuK+eRhasOJUpIQs+qUyl
dFQS1uMoTIcaEKHIFpXgxSrFiEHqYQOX0TP0csXwxVYBMONrzcEaXcfA//Q47bGF
kJc7j1Zb/TB2KNEUEYFi/f1WC8Suw1xCCCnQyBEN9yQq+FAJLIwkAHeo/T/U80kB
jA+exQ8AUBu1hp2/hedH5f0SEICgVi8sBEkNCBOF7LnOcnZebAi9I6qQ15LcOtyP
FbGUQPQ1WI7Jy3KnFNuxTMT1Hzqhf3Lj7eBfbb93aufx+/PZmp/gHMoE+vZmyReU
evjIPI8UJLN3i/1UEsxJQR2Lq5TuE1GJVs/D/RqHzFdlqGmd/P+9lfaVIwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEcfN22yAIv5YSdbjkET0ltkhIpVMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvUng4M2JiSUFpX2xoSjF1T1FSUFNXMlNFaWxVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACqjni3iKVH8jii4oR47
s5DG6Z4TuieMEuLXcVAiRjFy6LhNsBo0/s2RuKmm5OBLm3wS8VRUbkooKLRzjsJB
J53gVrVPmRUx2rllhFCnstTzcTiAFIujwoAzmG1UhC/IWmHdr9fVpi0EFCwfvOcA
hi8UXa1CYfAtj1WN0XXubUK9sd5axa35JY1wzIVpGQpOw3oPTXHDO8s9W1G/cE0Y
I/vMo4MP2M2X2XEJ7WyWYaw0MBgXAhIqDozZwhH93Cx3pQJzNbaqcSBnVsiLvyGR
EqFfrrQYeEo3y9ttTsBHV05B4LFCtgt8vwOUIn3HbJCIUVAaQ7+P0gQ+MetCUi1h
DSc=
-----END CERTIFICATE-----
Generated at Thu May 1 03:25:46 2025 by rpki-client