Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SlFQ77r4K4R_CikfwpgK0yaW6Dc.roa
File: SlFQ77r4K4R_CikfwpgK0yaW6Dc.roa (raw, json)
Hash identifier: hGicCtnS4ijcSBIGhPFcWLBcwtM6AAG0gvG/AizIIAg=
Subject key identifier: 4A:51:50:EF:BA:F8:2B:84:7F:0A:29:1F:C2:98:0A:D3:26:96:E8:37
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189999F153C964666B290855E2C7F970934
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SlFQ77r4K4R_CikfwpgK0yaW6Dc.roa
Signing time: Thu 27 Jul 2023 23:11:27 +0000
ROA not before: Thu 27 Jul 2023 23:11:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:99:9f:15:3c:96:46:66:b2:90:85:5e:2c:7f:97:09:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 27 23:11:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a5150efbaf82b847f0a291fc2980ad32696e837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e9:ca:78:e0:6e:13:57:96:b2:f2:cd:ca:b9:
2b:ef:77:be:b5:d3:e1:52:49:b1:41:75:c0:33:71:
23:2d:3c:a8:1a:fa:ba:f1:cf:a3:fb:93:e6:d3:6e:
db:b0:8b:2f:10:87:02:33:2c:45:1d:35:47:1a:a8:
0d:7f:10:39:6b:3c:a8:82:89:e0:4a:c8:1a:9a:47:
77:3b:12:95:65:ba:63:3c:45:77:d5:14:96:91:e7:
b8:87:b5:2c:08:6f:40:47:90:f8:b6:d3:fa:aa:02:
9c:fd:af:b5:d8:19:0c:c3:2a:e8:8e:87:4a:9b:57:
00:00:4e:0a:36:26:99:b0:cb:b0:4f:c6:46:76:08:
62:72:dd:71:9d:ee:7b:4b:fe:9c:e4:9e:e0:3f:0b:
7a:90:cb:3e:70:35:52:db:f8:81:7a:8f:21:f4:20:
ec:b0:e8:81:3e:0e:6c:a5:01:64:15:36:b6:26:8e:
49:20:97:24:0e:2d:2b:38:96:b6:c1:36:e3:1f:92:
76:dd:af:de:a2:49:0e:94:9a:6f:80:50:21:c0:4e:
de:6e:d2:2d:e3:5e:f8:d5:94:2b:ae:95:75:e8:4c:
54:0a:e7:af:25:06:82:4c:07:1c:1e:c1:69:92:fc:
1e:6d:d4:87:9a:ee:47:ae:aa:5c:53:6e:e3:1f:c5:
d0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:51:50:EF:BA:F8:2B:84:7F:0A:29:1F:C2:98:0A:D3:26:96:E8:37
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SlFQ77r4K4R_CikfwpgK0yaW6Dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
00:1c:67:d9:29:9c:f1:94:ad:5d:11:06:d1:e7:c4:ca:1a:58:
78:ee:cb:c1:8b:6a:16:3c:b5:9f:ee:af:ff:c8:e7:6d:d9:c6:
d1:e7:9e:b4:d7:65:49:ed:8f:3d:26:2a:5a:d5:e7:a9:a6:2b:
e4:7a:1c:09:c2:cc:e3:7d:dc:13:3f:fe:bb:fd:cb:cb:dc:06:
fc:bb:1a:45:ae:1c:29:46:3b:fc:53:d5:52:be:d1:05:49:d6:
da:71:7e:6c:cb:59:61:ed:3b:0d:bd:3d:b4:72:2a:ed:77:52:
22:d2:aa:19:f2:81:aa:c9:e7:ab:18:8b:0a:89:84:4d:c2:5e:
9d:e2:a1:8a:ca:c8:af:2d:61:c1:92:5d:ef:13:1b:1d:3e:08:
84:33:d2:74:03:80:0e:45:d8:e8:99:76:35:07:e0:5a:fc:df:
23:f0:14:df:63:c4:0e:41:e6:dd:56:91:49:2a:5b:76:c8:de:
37:95:1e:58:23:86:56:48:44:49:06:57:fd:ae:1c:90:03:be:
f7:d1:2e:8c:c9:9a:64:35:45:09:02:b4:5c:cf:82:7f:ad:67:
bd:e0:6e:31:67:3c:3b:97:23:29:a2:e0:5f:ca:16:84:65:2f:
58:b5:d8:3e:e7:dd:03:cf:ad:21:d9:88:3d:95:98:7e:17:e1:
ae:37:76:24
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYmZnxU8lkZmspCFXix/lwk0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzI3MjMxMTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTUxNTBlZmJhZjgyYjg0N2YwYTI5MWZjMjk4MGFkMzI2OTZlODM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOnKeOBuE1eWsvLNyrkr73e+tdPh
UkmxQXXAM3EjLTyoGvq68c+j+5Pm027bsIsvEIcCMyxFHTVHGqgNfxA5azyogong
Ssgamkd3OxKVZbpjPEV31RSWkee4h7UsCG9AR5D4ttP6qgKc/a+12BkMwyrojodK
m1cAAE4KNiaZsMuwT8ZGdghict1xne57S/6c5J7gPwt6kMs+cDVS2/iBeo8h9CDs
sOiBPg5spQFkFTa2Jo5JIJckDi0rOJa2wTbjH5J23a/eokkOlJpvgFAhwE7ebtIt
41741ZQrrpV16ExUCuevJQaCTAccHsFpkvwebdSHmu5HrqpcU27jH8XQpwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEpRUO+6+CuEfwopH8KYCtMmlug3MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvU2xGUTc3cjRLNFJfQ2lrZndwZ0sweWFXNkRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAAcZ9kpnPGUrV0RBtHn
xMoaWHjuy8GLahY8tZ/ur//I523ZxtHnnrTXZUntjz0mKlrV56mmK+R6HAnCzON9
3BM//rv9y8vcBvy7GkWuHClGO/xT1VK+0QVJ1tpxfmzLWWHtOw29PbRyKu13UiLS
qhnygarJ56sYiwqJhE3CXp3ioYrKyK8tYcGSXe8TGx0+CIQz0nQDgA5F2OiZdjUH
4Fr83yPwFN9jxA5B5t1WkUkqW3bI3jeVHlgjhlZIREkGV/2uHJADvvfRLozJmmQ1
RQkCtFzPgn+tZ73gbjFnPDuXIymi4F/KFoRlL1i12D7n3QPPrSHZiD2VmH4X4a43
diQ=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:20:21 2025 by rpki-client