Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/T9dEDH8x5IWI2I7Q-miLA-tI_Bc.roa
File: T9dEDH8x5IWI2I7Q-miLA-tI_Bc.roa (raw, json)
Hash identifier: DH7miqhulHQhJFS0IpFbSvsq0XNBV/uGIO9rDcZeNR0=
Subject key identifier: 4F:D7:44:0C:7F:31:E4:85:88:D8:8E:D0:FA:68:8B:03:EB:48:FC:17
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01898D9913E1A76590AF37812F4F6EE22204
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/T9dEDH8x5IWI2I7Q-miLA-tI_Bc.roa
Signing time: Tue 25 Jul 2023 15:09:26 +0000
ROA not before: Tue 25 Jul 2023 15:09:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:8d:99:13:e1:a7:65:90:af:37:81:2f:4f:6e:e2:22:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 25 15:09:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4fd7440c7f31e48588d88ed0fa688b03eb48fc17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fd:14:18:cd:1a:42:f7:d1:d8:c4:fb:15:ea:
42:78:6f:bf:5d:7c:5d:9e:e9:04:d3:eb:68:5c:02:
bc:34:03:7b:8f:89:0e:d6:eb:be:2b:1c:c3:88:1e:
d1:b2:b7:84:db:3c:fc:e5:ec:a0:5f:c0:c4:e9:ec:
85:7c:2f:9f:5e:ab:81:92:12:43:a9:71:65:b0:87:
ee:84:18:f7:4a:d4:fd:c7:49:ea:67:60:80:c7:a8:
a6:41:06:52:98:70:f8:3c:71:0c:06:7e:0c:91:87:
27:6a:71:d1:b2:2c:32:be:46:03:0d:55:14:15:3e:
24:e2:49:f2:80:ec:a8:34:51:a2:d6:d3:2f:e7:52:
62:9d:41:d4:79:53:84:f7:53:02:e1:79:e1:21:29:
7e:a6:39:44:41:12:0d:63:c7:28:0d:ce:46:cb:6e:
7b:59:8e:57:83:e1:c5:c3:3e:28:46:ba:e1:d8:0d:
d8:94:2c:b5:b5:b8:ec:23:a1:67:97:29:87:44:61:
1f:7e:3f:01:71:11:d8:e1:e1:36:e5:cf:e6:f6:e1:
d9:a6:3d:76:d3:17:3d:e9:6d:d5:23:6a:d0:dc:ef:
09:7f:d7:38:f2:10:96:04:7a:29:a4:da:2a:58:2c:
2d:a6:91:92:2a:0c:fb:ab:9f:b2:13:17:bc:a5:3f:
75:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D7:44:0C:7F:31:E4:85:88:D8:8E:D0:FA:68:8B:03:EB:48:FC:17
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/T9dEDH8x5IWI2I7Q-miLA-tI_Bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
72:e9:9c:19:4d:b8:f0:52:ff:50:e2:ef:cd:67:6e:a7:94:22:
6e:07:c3:c7:7c:85:9c:2e:0f:76:66:2e:98:b9:24:dd:c5:e3:
74:d7:5d:28:14:04:2d:60:f2:4d:a7:49:27:02:06:51:97:48:
d0:a7:f0:33:df:2b:77:2b:38:07:38:0a:c4:d5:70:9c:6e:7b:
f2:08:66:c7:ff:71:56:e6:55:69:71:f9:1d:de:78:b0:87:df:
4a:61:ba:1c:45:5b:b6:53:97:a0:1f:2f:b9:04:25:8d:89:02:
9b:ce:f8:49:fc:a7:53:d1:8d:f8:ae:04:14:e1:9e:fd:2b:c9:
03:de:50:62:71:60:9b:35:3a:6e:a2:d6:60:5f:4c:a5:91:f7:
35:93:6b:cc:69:e4:d4:84:34:22:76:f5:4a:7a:73:c7:bf:9e:
6f:65:17:fd:b5:95:a1:dd:68:4a:69:88:86:a0:e0:e2:c2:ad:
68:61:43:98:9f:fa:c2:31:41:38:6d:df:44:d6:91:29:6e:8e:
ae:3b:40:59:d0:8a:9e:7e:8b:6c:f1:5b:a4:d1:a8:25:33:1f:
16:07:32:d2:da:86:ed:3a:54:cd:dd:fb:38:fc:6e:f0:51:e4:
0a:e3:d5:8d:da:a4:e0:fc:fc:33:55:22:c1:95:aa:7a:d1:50:
e2:2f:fa:c3
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYmNmRPhp2WQrzeBL09u4iIEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzI1MTUwOTI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZmQ3NDQwYzdmMzFlNDg1ODhkODhlZDBmYTY4OGIwM2ViNDhmYzE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvv0UGM0aQvfR2MT7FepCeG+/XXxd
nukE0+toXAK8NAN7j4kO1uu+KxzDiB7RsreE2zz85eygX8DE6eyFfC+fXquBkhJD
qXFlsIfuhBj3StT9x0nqZ2CAx6imQQZSmHD4PHEMBn4MkYcnanHRsiwyvkYDDVUU
FT4k4knygOyoNFGi1tMv51JinUHUeVOE91MC4XnhISl+pjlEQRINY8coDc5Gy257
WY5Xg+HFwz4oRrrh2A3YlCy1tbjsI6FnlymHRGEffj8BcRHY4eE25c/m9uHZpj12
0xc96W3VI2rQ3O8Jf9c48hCWBHoppNoqWCwtppGSKgz7q5+yExe8pT91awIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFE/XRAx/MeSFiNiO0PpoiwPrSPwXMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvVDlkRURIOHg1SVdJMkk3US1taUxBLXRJX0JjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHLpnBlNuPBS/1Di781n
bqeUIm4Hw8d8hZwuD3ZmLpi5JN3F43TXXSgUBC1g8k2nSScCBlGXSNCn8DPfK3cr
OAc4CsTVcJxue/IIZsf/cVbmVWlx+R3eeLCH30phuhxFW7ZTl6AfL7kEJY2JApvO
+En8p1PRjfiuBBThnv0ryQPeUGJxYJs1Om6i1mBfTKWR9zWTa8xp5NSENCJ29Up6
c8e/nm9lF/21laHdaEppiIag4OLCrWhhQ5if+sIxQTht30TWkSlujq47QFnQip5+
i2zxW6TRqCUzHxYHMtLahu06VM3d+zj8bvBR5Arj1Y3apOD8/DNVIsGVqnrRUOIv
+sM=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:24 2025 by rpki-client