Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SAi7OV7M8oqSofNCxx_boVGcKX4.roa
File: SAi7OV7M8oqSofNCxx_boVGcKX4.roa (raw, json)
Hash identifier: yvbK77yCEIrHru+c9ygnKit5ZzD86jw4sCw5A6n7uic=
Subject key identifier: 48:08:BB:39:5E:CC:F2:8A:92:A1:F3:42:C7:1F:DB:A1:51:9C:29:7E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01869D1958E2171A1E1DA9A52344D7F6F3DE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SAi7OV7M8oqSofNCxx_boVGcKX4.roa
Signing time: Wed 01 Mar 2023 12:15:29 +0000
ROA not before: Wed 01 Mar 2023 12:15:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9d:19:58:e2:17:1a:1e:1d:a9:a5:23:44:d7:f6:f3:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 1 12:15:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4808bb395eccf28a92a1f342c71fdba1519c297e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e2:b9:08:dc:66:f5:3a:ce:ae:a2:17:ba:09:
ac:1b:f4:fa:bb:86:18:02:02:37:a6:2a:57:84:89:
38:9b:56:ff:1a:53:d4:b4:4e:5b:7e:83:59:1c:be:
6e:f2:d0:3a:b3:06:f8:47:f9:44:c2:0f:16:fb:ac:
d3:01:cc:2c:09:fa:b6:f2:44:b2:3c:1c:c4:e6:97:
3d:58:fa:f1:18:9c:54:c7:c7:37:f5:e4:3d:e7:87:
6b:41:c4:5a:8e:43:2c:6c:8e:bc:3f:b8:86:57:f0:
e2:14:b2:dd:29:51:68:31:84:ad:87:a4:7a:65:33:
c8:d7:af:ba:69:47:80:54:36:42:6d:97:b1:63:12:
a9:ea:71:57:11:ad:ff:ae:0d:6f:7c:cf:05:6d:a8:
11:99:2d:ca:68:36:7a:42:45:fe:40:40:e3:b1:4b:
82:8d:8d:92:dc:bf:0b:e6:1c:d8:cd:3c:6b:77:1a:
62:fb:0e:5e:60:13:d2:bc:94:e4:61:89:a9:52:eb:
3b:0a:dc:5d:d5:77:b4:54:1a:84:04:2e:75:72:52:
96:8e:75:e2:3d:19:d2:af:c5:ed:5d:22:c9:76:5b:
21:19:df:4d:ac:66:8e:4a:b5:e5:49:36:8f:43:ef:
e7:12:7f:16:50:c9:da:5c:21:83:21:d7:6c:19:db:
a9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:08:BB:39:5E:CC:F2:8A:92:A1:F3:42:C7:1F:DB:A1:51:9C:29:7E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SAi7OV7M8oqSofNCxx_boVGcKX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
13:8c:7b:ea:0d:79:49:5a:fc:01:4c:7b:15:7c:3d:8a:06:d0:
1d:87:67:65:13:b3:e3:ed:a3:f2:67:c9:97:c1:ca:49:fa:8f:
3e:2b:26:e3:7b:40:ce:71:f8:fc:9e:a3:26:37:af:ef:1f:dc:
08:02:53:f7:f5:4e:4f:5d:4e:f0:a7:c2:8c:6d:b5:c4:8d:0b:
82:ec:02:cc:9c:e0:b7:e8:d7:d8:27:a8:ca:f4:5d:31:8d:60:
22:54:87:96:67:2f:c0:ec:4a:aa:84:62:a4:5f:a9:6f:09:4d:
b2:8f:47:f7:5a:ad:68:18:f5:3e:20:98:1c:be:69:09:31:a6:
e2:02:ee:f7:01:11:98:2a:28:26:da:b1:1e:28:2b:10:19:94:
28:7f:b4:bd:7f:6c:44:a1:32:1e:90:3c:96:5e:74:e4:52:8e:
62:59:23:88:65:1e:71:a4:54:b4:aa:a5:c2:32:54:a5:17:85:
49:f3:53:ff:cb:de:85:a4:c9:76:57:53:f0:71:e0:e4:41:9c:
9f:13:6a:22:58:7f:63:09:1d:be:51:42:bb:8d:e3:55:98:d3:
53:f5:67:1c:76:a1:94:bd:66:2d:48:6e:c8:9b:ff:f1:7a:12:
61:82:97:6d:87:86:6d:0f:de:e5:bf:43:c6:c6:cb:ee:e1:cb:
b0:c4:d9:1d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYadGVjiFxoeHamlI0TX9vPeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzAxMTIxNTI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODA4YmIzOTVlY2NmMjhhOTJhMWYzNDJjNzFmZGJhMTUxOWMyOTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOK5CNxm9TrOrqIXugmsG/T6u4YY
AgI3pipXhIk4m1b/GlPUtE5bfoNZHL5u8tA6swb4R/lEwg8W+6zTAcwsCfq28kSy
PBzE5pc9WPrxGJxUx8c39eQ954drQcRajkMsbI68P7iGV/DiFLLdKVFoMYSth6R6
ZTPI16+6aUeAVDZCbZexYxKp6nFXEa3/rg1vfM8FbagRmS3KaDZ6QkX+QEDjsUuC
jY2S3L8L5hzYzTxrdxpi+w5eYBPSvJTkYYmpUus7Ctxd1Xe0VBqEBC51clKWjnXi
PRnSr8XtXSLJdlshGd9NrGaOSrXlSTaPQ+/nEn8WUMnaXCGDIddsGdupCQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEgIuzlezPKKkqHzQscf26FRnCl+MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvU0FpN09WN004b3FTb2ZOQ3h4X2JvVkdjS1g0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABOMe+oNeUla/AFMexV8
PYoG0B2HZ2UTs+Pto/JnyZfBykn6jz4rJuN7QM5x+PyeoyY3r+8f3AgCU/f1Tk9d
TvCnwoxttcSNC4LsAsyc4Lfo19gnqMr0XTGNYCJUh5ZnL8DsSqqEYqRfqW8JTbKP
R/darWgY9T4gmBy+aQkxpuIC7vcBEZgqKCbasR4oKxAZlCh/tL1/bEShMh6QPJZe
dORSjmJZI4hlHnGkVLSqpcIyVKUXhUnzU//L3oWkyXZXU/Bx4ORBnJ8TaiJYf2MJ
Hb5RQruN41WY01P1Zxx2oZS9Zi1Ibsib//F6EmGCl22Hhm0P3uW/Q8bGy+7hy7DE
2R0=
-----END CERTIFICATE-----
Generated at Thu May 1 11:27:38 2025 by rpki-client