Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Sgqcsaytb-9-PtuAKHZtl269a9Y.roa
File: Sgqcsaytb-9-PtuAKHZtl269a9Y.roa (raw, json)
Hash identifier: IXogQG5c844xY1Kx3XCebL51C5w09O2dZeDatlO8/YI=
Subject key identifier: 4A:0A:9C:B1:AC:AD:6F:EF:7E:3E:DB:80:28:76:6D:97:6E:BD:6B:D6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185665E1DFD391A76930487EDA450FCE68D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Sgqcsaytb-9-PtuAKHZtl269a9Y.roa
Signing time: Sat 31 Dec 2022 04:08:42 +0000
ROA not before: Sat 31 Dec 2022 04:08:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:66:5e:1d:fd:39:1a:76:93:04:87:ed:a4:50:fc:e6:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 31 04:08:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a0a9cb1acad6fef7e3edb8028766d976ebd6bd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:25:e3:55:da:32:a8:36:79:39:49:34:e5:a5:
13:48:9d:e5:d6:b0:ee:af:cf:24:80:44:a7:4c:4a:
44:2d:87:c8:25:a0:73:88:2a:43:f8:dc:d0:28:b8:
a4:f2:47:87:83:2f:1b:95:85:51:86:61:d7:12:87:
34:bc:13:b7:38:cf:25:98:e6:d6:f5:9c:f6:ad:66:
91:bb:ca:b5:91:42:e8:d9:99:f7:9d:4b:95:aa:be:
a8:b3:6c:00:f0:0e:d4:bb:33:d4:88:19:2b:c8:9b:
b5:28:d1:6d:37:ec:2a:eb:49:69:60:db:3e:bb:41:
76:bc:b6:67:f5:4d:7d:38:21:d9:15:cc:bb:4b:34:
39:6d:a3:31:f5:f3:2a:cc:a9:12:f7:75:34:1c:12:
78:03:41:6c:18:01:1b:d9:9f:ca:c2:32:d8:da:37:
96:3c:f8:7e:09:f0:79:49:ab:31:b5:f5:86:3d:fa:
d2:b8:2e:85:0b:70:dc:c2:11:e6:74:c5:8b:b5:d8:
7d:10:2c:f2:03:7d:db:6b:0a:cf:88:4a:00:16:af:
35:48:2a:78:c2:4f:04:dc:44:0d:62:eb:2e:16:89:
6d:57:ae:08:62:3f:b4:c3:31:75:eb:91:ea:59:c6:
41:4d:2a:86:d8:57:f5:cb:39:01:f2:d5:e6:da:46:
41:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:0A:9C:B1:AC:AD:6F:EF:7E:3E:DB:80:28:76:6D:97:6E:BD:6B:D6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Sgqcsaytb-9-PtuAKHZtl269a9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
71:cb:02:2a:5a:2e:56:ac:a2:8a:47:96:ae:8c:e2:97:67:dc:
e7:1f:b3:5e:9c:6a:81:64:18:4a:fd:29:af:1a:a3:56:fc:e5:
a6:c9:c2:e5:56:ec:6d:7a:4b:24:a6:78:a1:a7:be:5b:65:74:
a4:0e:ff:fc:91:b1:bc:27:75:97:7d:49:f1:14:8c:7f:02:de:
72:11:94:00:d2:50:b2:a1:b6:e8:d6:7d:4d:c8:ce:0a:e3:fb:
3f:86:79:c5:b2:59:7e:7d:99:ed:e9:3e:89:f7:b2:6f:ef:6e:
2f:1d:ec:02:db:bd:d5:38:bd:a1:1f:f9:9e:3c:31:58:a7:84:
d7:1a:f2:73:ae:97:f9:31:0a:66:f9:3c:9f:5e:6a:2d:f2:d4:
aa:a6:19:8f:21:f7:d5:af:ac:d0:92:38:ba:d3:27:6b:f8:38:
d8:18:e0:f2:e9:d0:b6:11:65:8b:38:70:71:13:e0:e6:28:4f:
37:b1:ef:d6:77:7c:d4:2c:96:9d:d5:14:15:d2:ae:8c:1d:17:
14:bf:c5:80:b8:09:be:88:78:f4:51:1b:88:15:bd:37:ff:cc:
61:8c:d2:79:f6:ae:cc:31:90:a6:59:b3:a9:3f:6c:82:d1:de:
13:6f:b7:f3:7f:82:d1:c1:dd:9a:ac:25:8c:4f:db:1b:5c:1a:
50:f0:8f:2c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVmXh39ORp2kwSH7aRQ/OaNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjMxMDQwODQyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTBhOWNiMWFjYWQ2ZmVmN2UzZWRiODAyODc2NmQ5NzZlYmQ2YmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiXjVdoyqDZ5OUk05aUTSJ3l1rDu
r88kgESnTEpELYfIJaBziCpD+NzQKLik8keHgy8blYVRhmHXEoc0vBO3OM8lmObW
9Zz2rWaRu8q1kULo2Zn3nUuVqr6os2wA8A7UuzPUiBkryJu1KNFtN+wq60lpYNs+
u0F2vLZn9U19OCHZFcy7SzQ5baMx9fMqzKkS93U0HBJ4A0FsGAEb2Z/KwjLY2jeW
PPh+CfB5SasxtfWGPfrSuC6FC3DcwhHmdMWLtdh9ECzyA33bawrPiEoAFq81SCp4
wk8E3EQNYusuFoltV64IYj+0wzF165HqWcZBTSqG2Ff1yzkB8tXm2kZB0QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEoKnLGsrW/vfj7bgCh2bZduvWvWMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvU2dxY3NheXRiLTktUHR1QUtIWnRsMjY5YTlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHHLAipaLlasoopHlq6M
4pdn3Ocfs16caoFkGEr9Ka8ao1b85abJwuVW7G16SySmeKGnvltldKQO//yRsbwn
dZd9SfEUjH8C3nIRlADSULKhtujWfU3Izgrj+z+GecWyWX59me3pPon3sm/vbi8d
7ALbvdU4vaEf+Z48MVinhNca8nOul/kxCmb5PJ9eai3y1KqmGY8h99WvrNCSOLrT
J2v4ONgY4PLp0LYRZYs4cHET4OYoTzex79Z3fNQslp3VFBXSrowdFxS/xYC4Cb6I
ePRRG4gVvTf/zGGM0nn2rswxkKZZs6k/bILR3hNvt/N/gtHB3ZqsJYxP2xtcGlDw
jyw=
-----END CERTIFICATE-----
Generated at Sun May 4 09:35:01 2025 by rpki-client