Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SBQXeBaOh1DA9oIw3v1zOiP3npI.roa
File: SBQXeBaOh1DA9oIw3v1zOiP3npI.roa (raw, json)
Hash identifier: QUcVMO+VL5adzmeixIr4+snkEzN3OH9WB9velPHKOds=
Subject key identifier: 48:14:17:78:16:8E:87:50:C0:F6:82:30:DE:FD:73:3A:23:F7:9E:92
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183C0BF8E9AA36020914B2D3EA61C669AA0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SBQXeBaOh1DA9oIw3v1zOiP3npI.roa
Signing time: Mon 10 Oct 2022 07:15:22 +0000
ROA not before: Mon 10 Oct 2022 07:15:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c0:bf:8e:9a:a3:60:20:91:4b:2d:3e:a6:1c:66:9a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 10 07:15:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=48141778168e8750c0f68230defd733a23f79e92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:47:e8:00:90:1d:35:f7:76:40:41:09:7f:f0:
e0:38:43:c7:6d:4d:93:6d:a4:8a:36:e3:29:94:60:
af:a0:c2:26:ea:f5:68:65:5a:a0:51:d5:8e:f3:32:
f3:c9:5e:d8:d1:5a:71:32:42:34:fb:7a:bd:b1:b7:
1d:72:46:a2:50:56:b8:e9:ea:38:13:0a:59:f7:f4:
f1:dc:3e:dc:aa:ff:f1:a4:0f:b4:5d:75:1f:1f:40:
a4:c3:c9:79:61:ee:78:5a:62:6f:12:7c:cc:a2:77:
d7:56:e7:0c:62:a7:60:cf:cd:1f:20:c6:2a:bd:a8:
a7:5a:e8:58:cf:70:00:95:f3:42:b3:3f:3f:b0:3c:
96:9a:3c:3f:38:e6:5b:c8:a1:24:71:f8:ff:15:77:
5b:86:db:2e:97:19:c9:88:33:f2:d8:76:53:73:4f:
71:a6:aa:71:69:82:0d:7a:ae:a1:3c:90:61:ac:4a:
3b:ab:f2:e5:1a:5d:9c:22:33:4a:0f:b7:63:b2:42:
26:bb:31:63:40:c5:db:40:d8:0a:44:14:c6:5a:ce:
49:53:c5:ea:59:73:87:99:c7:47:fc:04:d1:2d:e2:
7e:8c:e3:ab:e4:da:58:86:05:9d:a9:d3:7e:60:44:
fa:db:bb:7f:d8:f6:ec:27:42:37:9e:a6:4b:3a:6f:
26:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:14:17:78:16:8E:87:50:C0:F6:82:30:DE:FD:73:3A:23:F7:9E:92
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SBQXeBaOh1DA9oIw3v1zOiP3npI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
14:7e:1a:cb:44:c0:25:83:97:55:26:9f:39:70:ee:b7:53:c4:
72:ce:78:a1:6d:f4:bc:d2:2d:4b:f5:a4:f4:61:cd:ef:ad:b3:
6f:14:5b:e8:1a:3d:5d:e5:c1:77:0c:6c:83:3b:32:fe:10:11:
95:52:06:0f:49:c0:14:93:ce:14:66:c1:2a:47:f6:b8:84:fb:
c9:7c:e1:88:b4:30:89:b4:f3:80:5d:e1:f5:d9:2a:df:de:ee:
48:25:0f:2a:be:ea:c0:9e:22:7d:dc:56:a5:e1:37:43:9e:f9:
ae:55:d3:10:79:3f:82:39:f0:0c:81:4a:e1:fe:65:82:59:8c:
31:41:e2:0b:07:d3:45:e0:14:1f:13:e9:fd:b0:2d:71:ab:0c:
36:f0:35:a7:10:2e:53:7e:e2:58:3d:da:6a:69:06:88:3c:2b:
da:6d:d1:5c:23:fd:9d:60:02:1f:43:b1:46:86:50:7e:30:df:
1d:b6:53:d6:36:dd:74:05:f6:46:92:73:4f:7f:59:d3:58:15:
87:44:a2:b3:ed:a3:4d:da:84:2b:c7:3a:b3:2d:fa:b1:89:20:
82:95:b5:eb:0a:aa:6f:0d:80:14:b5:91:7d:5f:f4:21:97:e3:
bf:f2:65:1c:b3:23:e5:fe:1a:71:9f:69:d1:79:4c:1c:f7:16:
f8:17:4e:08
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYPAv46ao2AgkUstPqYcZpqgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMDEwMDcxNTIyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODE0MTc3ODE2OGU4NzUwYzBmNjgyMzBkZWZkNzMzYTIzZjc5ZTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EfoAJAdNfd2QEEJf/DgOEPHbU2T
baSKNuMplGCvoMIm6vVoZVqgUdWO8zLzyV7Y0VpxMkI0+3q9sbcdckaiUFa46eo4
EwpZ9/Tx3D7cqv/xpA+0XXUfH0Ckw8l5Ye54WmJvEnzMonfXVucMYqdgz80fIMYq
vainWuhYz3AAlfNCsz8/sDyWmjw/OOZbyKEkcfj/FXdbhtsulxnJiDPy2HZTc09x
pqpxaYINeq6hPJBhrEo7q/LlGl2cIjNKD7djskImuzFjQMXbQNgKRBTGWs5JU8Xq
WXOHmcdH/ATRLeJ+jOOr5NpYhgWdqdN+YET627t/2PbsJ0I3nqZLOm8mDwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEgUF3gWjodQwPaCMN79czoj956SMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvU0JRWGVCYU9oMURBOW9JdzN2MXpPaVAzbnBJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABR+GstEwCWDl1Umnzlw
7rdTxHLOeKFt9LzSLUv1pPRhze+ts28UW+gaPV3lwXcMbIM7Mv4QEZVSBg9JwBST
zhRmwSpH9riE+8l84Yi0MIm084Bd4fXZKt/e7kglDyq+6sCeIn3cVqXhN0Oe+a5V
0xB5P4I58AyBSuH+ZYJZjDFB4gsH00XgFB8T6f2wLXGrDDbwNacQLlN+4lg92mpp
Bog8K9pt0Vwj/Z1gAh9DsUaGUH4w3x22U9Y23XQF9kaSc09/WdNYFYdEorPto03a
hCvHOrMt+rGJIIKVtesKqm8NgBS1kX1f9CGX47/yZRyzI+X+GnGfadF5TBz3FvgX
Tgg=
-----END CERTIFICATE-----
Generated at Thu May 1 00:08:08 2025 by rpki-client