Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SDbFkX9L-XqxrOkVnHfv6ae7O-E.roa
File: SDbFkX9L-XqxrOkVnHfv6ae7O-E.roa (raw, json)
Hash identifier: FsvpJ0JLI4JgAs1oyVFZCqUKyVWgtBrUPboO2Um95LQ=
Subject key identifier: 48:36:C5:91:7F:4B:F9:7A:B1:AC:E9:15:9C:77:EF:E9:A7:BB:3B:E1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01859C71C189F30B9D1DE75173A946021B0E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SDbFkX9L-XqxrOkVnHfv6ae7O-E.roa
Signing time: Tue 10 Jan 2023 16:09:38 +0000
ROA not before: Tue 10 Jan 2023 16:09:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9c:71:c1:89:f3:0b:9d:1d:e7:51:73:a9:46:02:1b:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 10 16:09:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4836c5917f4bf97ab1ace9159c77efe9a7bb3be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fe:c7:0a:09:e4:2e:8a:0c:c1:ed:f9:8b:27:
1c:64:1c:23:aa:1a:c3:e5:9a:b7:6a:2e:5a:d2:d6:
c8:e8:ad:b3:2a:da:0a:ff:2b:83:ea:b7:d4:a1:3c:
d9:d6:c6:dc:95:d7:c3:6c:e8:59:2f:9b:a1:60:9a:
18:31:b0:c3:a1:31:04:3e:47:45:3e:61:5f:43:e2:
bd:f8:f9:fb:cc:aa:8e:45:d0:c3:b8:cf:e7:48:74:
32:7e:ff:80:b3:db:7e:f1:66:bf:20:29:ed:b2:43:
90:7a:fa:c8:71:7a:14:b9:06:34:6c:15:bc:37:a8:
08:80:af:88:db:b9:67:e2:15:24:57:cf:10:a2:1d:
eb:f3:3b:a8:f2:21:2c:95:da:fa:a4:2e:60:bb:20:
5b:41:8b:de:f2:02:af:da:4b:92:38:18:7c:25:e6:
23:53:b0:9b:90:18:51:e6:5d:89:7a:d0:ba:ea:08:
44:63:36:a1:b1:93:cd:12:2c:14:67:e1:84:79:fc:
aa:8b:66:88:ef:b7:f8:b5:70:63:73:68:b8:6f:f6:
0c:92:fc:c6:86:4b:15:2d:6b:53:3b:cb:8a:3e:08:
f0:ba:18:f6:20:fc:63:85:f1:33:5b:13:1f:99:31:
49:21:23:31:8c:cf:f3:01:b3:92:20:a8:03:0f:d2:
98:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:36:C5:91:7F:4B:F9:7A:B1:AC:E9:15:9C:77:EF:E9:A7:BB:3B:E1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SDbFkX9L-XqxrOkVnHfv6ae7O-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b5:08:f7:4c:4d:28:ce:26:92:8e:2b:f7:7e:53:59:89:26:53:
fd:19:4d:bd:82:d4:ae:43:33:17:2b:d3:d1:5d:1a:63:01:dd:
a8:87:da:d1:89:ae:25:e5:e1:81:de:ad:b7:8d:f6:e7:e3:1b:
5d:9b:d1:34:59:e4:17:21:4a:68:d6:d2:22:81:ff:c1:cf:cd:
59:b2:08:3e:48:1f:c9:47:f3:77:12:ec:9e:df:01:d1:99:82:
1a:fe:56:9f:a7:3a:59:b4:a3:5f:7b:84:c1:0f:19:29:f1:94:
83:c3:bd:2a:b0:93:94:c3:ee:c8:5a:03:0d:38:48:ff:29:0c:
ff:1e:3f:27:d8:d8:d6:37:3a:38:45:60:75:79:e1:19:c6:c4:
6c:68:53:05:9b:87:36:a0:4f:cc:ac:b5:f4:24:c6:7a:60:ec:
02:d7:1c:6e:1e:f2:92:ec:da:81:75:3b:dd:66:c5:7c:08:77:
1e:32:b8:5b:ba:ed:c3:25:8e:ea:a2:a7:2e:58:79:98:c7:69:
35:b1:c3:e2:c2:ca:51:65:d8:fe:ca:76:e4:3e:88:ea:23:51:
1d:aa:d8:49:a6:b3:ce:22:ee:2e:83:42:ca:66:49:20:c3:82:
f5:dc:60:ef:19:b9:8c:50:16:a9:37:a7:29:50:29:3c:f9:57:
eb:f3:c5:10
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYWcccGJ8wudHedRc6lGAhsOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTEwMTYwOTM4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODM2YzU5MTdmNGJmOTdhYjFhY2U5MTU5Yzc3ZWZlOWE3YmIzYmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqv7HCgnkLooMwe35iyccZBwjqhrD
5Zq3ai5a0tbI6K2zKtoK/yuD6rfUoTzZ1sbcldfDbOhZL5uhYJoYMbDDoTEEPkdF
PmFfQ+K9+Pn7zKqORdDDuM/nSHQyfv+As9t+8Wa/ICntskOQevrIcXoUuQY0bBW8
N6gIgK+I27ln4hUkV88Qoh3r8zuo8iEsldr6pC5guyBbQYve8gKv2kuSOBh8JeYj
U7CbkBhR5l2JetC66ghEYzahsZPNEiwUZ+GEefyqi2aI77f4tXBjc2i4b/YMkvzG
hksVLWtTO8uKPgjwuhj2IPxjhfEzWxMfmTFJISMxjM/zAbOSIKgDD9KYlwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEg2xZF/S/l6sazpFZx37+mnuzvhMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvU0RiRmtYOUwtWHF4ck9rVm5IZnY2YWU3Ty1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBALUI90xNKM4mko4r935T
WYkmU/0ZTb2C1K5DMxcr09FdGmMB3aiH2tGJriXl4YHerbeN9ufjG12b0TRZ5Bch
SmjW0iKB/8HPzVmyCD5IH8lH83cS7J7fAdGZghr+Vp+nOlm0o197hMEPGSnxlIPD
vSqwk5TD7shaAw04SP8pDP8ePyfY2NY3OjhFYHV54RnGxGxoUwWbhzagT8ystfQk
xnpg7ALXHG4e8pLs2oF1O91mxXwIdx4yuFu67cMljuqipy5YeZjHaTWxw+LCylFl
2P7KduQ+iOojUR2q2Emms84i7i6DQspmSSDDgvXcYO8ZuYxQFqk3pylQKTz5V+vz
xRA=
-----END CERTIFICATE-----
Generated at Wed Apr 30 21:50:21 2025 by rpki-client