Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SI8Kv1KlRdSNN4bQnCRcUbLdA3o.roa
File: SI8Kv1KlRdSNN4bQnCRcUbLdA3o.roa (raw, json)
Hash identifier: nKhLoBzaRfDvfRin43vo0fVE4ctCiS3K9ZIAuhMdOHo=
Subject key identifier: 48:8F:0A:BF:52:A5:45:D4:8D:37:86:D0:9C:24:5C:51:B2:DD:03:7A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184B74A19F95E3D31B94841F106596CF37A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SI8Kv1KlRdSNN4bQnCRcUbLdA3o.roa
Signing time: Sun 27 Nov 2022 04:13:17 +0000
ROA not before: Sun 27 Nov 2022 04:13:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:ae77:4719/128 maxlen: 128
2001:67c:64:ffff:0:184:9f03:9814/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:b7:4a:19:f9:5e:3d:31:b9:48:41:f1:06:59:6c:f3:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 27 04:13:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=488f0abf52a545d48d3786d09c245c51b2dd037a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e5:09:88:c1:e6:17:a5:6f:1f:e9:4d:1a:56:
4b:f3:ad:57:34:86:0f:08:d4:b2:9c:ae:c2:82:2b:
85:70:58:86:3d:13:b0:dc:76:5d:c4:89:10:83:57:
ac:52:a4:95:ec:de:e7:0e:54:53:3c:af:9e:4e:f9:
0d:e2:73:5b:a1:56:6c:43:91:1b:95:28:40:ba:26:
7f:80:f8:93:0a:90:92:ba:21:58:08:cc:db:a5:fd:
54:36:3c:9c:83:13:e6:46:db:e6:8d:b1:d4:45:09:
de:a6:38:20:e2:d7:82:4e:3f:d0:1d:97:4a:aa:68:
78:bf:b0:41:7d:be:0a:99:25:f7:76:be:12:f2:86:
72:92:70:77:55:d3:20:2f:90:b8:12:79:36:75:81:
c0:da:19:d3:5c:40:29:e5:25:a6:35:f7:2b:57:09:
82:f6:1a:c9:3c:7d:72:bd:4b:2d:15:b0:22:0d:91:
27:37:11:61:c0:93:a8:11:e2:e9:ab:54:f0:4f:bf:
72:9c:6d:45:00:f0:90:c3:18:61:8e:73:fb:52:88:
38:c1:bd:d5:e8:e0:0e:d1:db:f5:cd:2c:e9:db:c1:
9d:ab:d7:54:f5:ec:65:61:0e:9b:70:fe:5b:d5:54:
99:d0:22:28:d7:41:e8:3e:82:a0:e0:cd:97:76:b5:
cf:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:8F:0A:BF:52:A5:45:D4:8D:37:86:D0:9C:24:5C:51:B2:DD:03:7A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SI8Kv1KlRdSNN4bQnCRcUbLdA3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
41:66:a6:85:a1:c5:df:b8:8b:cf:53:7e:32:1c:18:46:af:07:
82:0b:f8:8a:4c:4a:b7:25:83:5e:8c:29:5b:26:86:1f:92:00:
ae:e8:b3:94:30:61:56:f0:af:ae:48:90:49:8d:a6:4c:72:52:
07:f7:1e:2e:36:4c:56:85:6e:1c:8d:50:ba:70:d7:39:07:4e:
28:9b:8d:48:05:16:3a:2f:57:47:c1:93:50:a7:a1:3f:e7:d6:
a2:85:fa:5d:c7:4b:96:e8:00:91:73:45:01:c9:c8:5c:cd:d7:
fe:60:a3:7e:73:c6:fe:d6:44:11:8c:ae:18:71:ca:30:07:6a:
71:c9:b2:57:7f:6f:5c:6e:e1:3b:e3:40:84:ed:b6:8f:e2:de:
40:51:38:86:e7:e4:86:43:de:35:9e:60:3c:4e:0e:fc:ef:7e:
3a:0d:00:5d:a3:8b:aa:1d:8a:be:6a:3e:6e:7c:55:ef:59:41:
4a:fd:57:36:fa:84:26:b5:ca:aa:1d:27:1a:87:18:f6:69:e1:
a2:ae:ee:95:bc:12:69:67:d5:d1:43:19:09:68:f9:78:aa:20:
80:00:a6:3f:95:b8:c6:2d:b2:98:11:bd:ae:6a:d4:46:ef:40:
87:ab:c9:f3:04:66:66:94:4f:73:e6:09:38:f6:e1:e7:e6:08:
d3:5f:f0:62
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYS3Shn5Xj0xuUhB8QZZbPN6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMTI3MDQxMzE3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODhmMGFiZjUyYTU0NWQ0OGQzNzg2ZDA5YzI0NWM1MWIyZGQwMzdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreUJiMHmF6VvH+lNGlZL861XNIYP
CNSynK7CgiuFcFiGPROw3HZdxIkQg1esUqSV7N7nDlRTPK+eTvkN4nNboVZsQ5Eb
lShAuiZ/gPiTCpCSuiFYCMzbpf1UNjycgxPmRtvmjbHURQnepjgg4teCTj/QHZdK
qmh4v7BBfb4KmSX3dr4S8oZyknB3VdMgL5C4Enk2dYHA2hnTXEAp5SWmNfcrVwmC
9hrJPH1yvUstFbAiDZEnNxFhwJOoEeLpq1TwT79ynG1FAPCQwxhhjnP7Uog4wb3V
6OAO0dv1zSzp28Gdq9dU9exlYQ6bcP5b1VSZ0CIo10HoPoKg4M2XdrXPCwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEiPCr9SpUXUjTeG0JwkXFGy3QN6MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvU0k4S3YxS2xSZFNOTjRiUW5DUmNVYkxkQTNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEFmpoWhxd+4i89TfjIc
GEavB4IL+IpMSrclg16MKVsmhh+SAK7os5QwYVbwr65IkEmNpkxyUgf3Hi42TFaF
bhyNULpw1zkHTiibjUgFFjovV0fBk1CnoT/n1qKF+l3HS5boAJFzRQHJyFzN1/5g
o35zxv7WRBGMrhhxyjAHanHJsld/b1xu4TvjQITtto/i3kBROIbn5IZD3jWeYDxO
DvzvfjoNAF2ji6odir5qPm58Ve9ZQUr9Vzb6hCa1yqodJxqHGPZp4aKu7pW8Emln
1dFDGQlo+XiqIIAApj+VuMYtspgRva5q1EbvQIeryfMEZmaUT3PmCTj24efmCNNf
8GI=
-----END CERTIFICATE-----
Generated at Wed Apr 30 22:02:43 2025 by rpki-client