Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/T_nElIlFLr4C5UKNs9PGsoi4Sd4.roa
File: T_nElIlFLr4C5UKNs9PGsoi4Sd4.roa (raw, json)
Hash identifier: CMhlmBDX2vu/hZuAHHOhqQdSm4YezlY9KNXQFe/h9vU=
Subject key identifier: 4F:F9:C4:94:89:45:2E:BE:02:E5:42:8D:B3:D3:C6:B2:88:B8:49:DE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01859E29350ECE29C4404D7B17F5E807A2A6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/T_nElIlFLr4C5UKNs9PGsoi4Sd4.roa
Signing time: Wed 11 Jan 2023 00:09:38 +0000
ROA not before: Wed 11 Jan 2023 00:09:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9e:29:35:0e:ce:29:c4:40:4d:7b:17:f5:e8:07:a2:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 11 00:09:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ff9c49489452ebe02e5428db3d3c6b288b849de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3c:ca:37:f0:4b:33:c4:d5:c7:55:43:92:98:
0d:d7:15:31:e7:ba:b7:7b:5d:7e:99:0e:6a:05:d6:
a3:bd:1d:bc:ce:cc:f7:14:a7:43:d7:85:db:41:a0:
82:f2:05:cb:90:21:b4:47:ca:52:15:4d:f6:47:dc:
2d:c4:f3:19:b9:08:c1:3a:61:54:ce:96:95:99:d0:
84:ea:ab:cb:32:12:89:a4:fb:dd:57:2a:33:36:e1:
34:e8:7e:fd:10:8d:59:92:b8:e6:1d:5f:d5:c2:4f:
4a:e1:d5:f3:c9:b5:d3:7c:ad:20:21:82:9b:cf:7b:
8b:c3:2e:84:e8:c7:68:8a:c8:3f:0f:0f:fa:c0:fa:
42:3f:58:bb:d1:09:ce:87:9a:50:ff:12:03:49:a5:
2c:7c:62:3d:70:bc:b0:bd:27:52:90:2f:3d:e9:a9:
39:d8:dd:e8:0d:aa:cb:f5:13:44:c0:76:81:54:a3:
00:8f:25:27:af:c6:c4:6a:22:67:c0:0e:3d:10:cc:
c4:3b:eb:01:9a:20:a8:99:87:ea:10:ea:b5:32:5b:
ea:e6:06:cf:a0:5c:6d:eb:14:b0:85:cf:60:40:40:
d4:45:04:dd:ad:25:c7:d4:8f:74:13:ab:af:9b:09:
8f:dd:21:5b:1d:21:fc:e0:5b:d3:7d:28:fa:55:54:
7f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F9:C4:94:89:45:2E:BE:02:E5:42:8D:B3:D3:C6:B2:88:B8:49:DE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/T_nElIlFLr4C5UKNs9PGsoi4Sd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b1:3c:67:cc:52:95:dd:86:60:16:eb:38:18:b4:24:69:21:af:
0b:2e:96:a6:76:b1:17:6b:fa:0b:96:f2:2e:a8:ab:6e:00:dc:
a6:bd:36:05:11:18:01:a0:85:18:47:b5:bd:6f:f4:25:e1:73:
a7:5b:00:9f:5b:09:1f:c8:bb:b3:90:a2:d4:33:d6:33:31:e0:
73:b0:c5:a9:ee:a5:84:a8:a8:39:7c:0e:66:b0:e1:84:8f:16:
b4:8c:13:4c:e7:6e:cd:8b:0b:81:3e:9b:31:ad:56:8a:65:e3:
a1:42:4f:a1:41:fc:16:bf:1a:ed:ea:00:97:be:2c:e1:5c:c4:
ae:f3:c2:67:2c:78:ae:b8:d2:c9:8b:f2:60:87:db:28:c9:dd:
42:f6:74:06:df:6f:a7:39:2b:39:dd:df:63:09:32:39:19:9d:
8e:ca:5f:e3:3d:02:ae:58:a7:c2:14:0c:29:02:58:62:c1:be:
89:45:a0:13:68:a8:09:2f:1f:88:fc:78:be:9c:97:77:e6:08:
4f:fb:e0:96:91:62:ae:d5:20:7d:26:2f:32:fa:2f:36:fd:4f:
9a:44:fb:e3:27:a3:59:62:20:f3:f1:f5:d2:06:a9:93:bf:74:
f4:7c:df:55:ce:41:51:14:12:7a:3d:94:52:66:52:d2:6b:a6:
10:eb:53:cb
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYWeKTUOzinEQE17F/XoB6KmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTExMDAwOTM4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZmY5YzQ5NDg5NDUyZWJlMDJlNTQyOGRiM2QzYzZiMjg4Yjg0OWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzzKN/BLM8TVx1VDkpgN1xUx57q3
e11+mQ5qBdajvR28zsz3FKdD14XbQaCC8gXLkCG0R8pSFU32R9wtxPMZuQjBOmFU
zpaVmdCE6qvLMhKJpPvdVyozNuE06H79EI1ZkrjmHV/Vwk9K4dXzybXTfK0gIYKb
z3uLwy6E6Mdoisg/Dw/6wPpCP1i70QnOh5pQ/xIDSaUsfGI9cLywvSdSkC896ak5
2N3oDarL9RNEwHaBVKMAjyUnr8bEaiJnwA49EMzEO+sBmiComYfqEOq1Mlvq5gbP
oFxt6xSwhc9gQEDURQTdrSXH1I90E6uvmwmP3SFbHSH84FvTfSj6VVR/lQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFE/5xJSJRS6+AuVCjbPTxrKIuEneMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvVF9uRWxJbEZMcjRDNVVLTnM5UEdzb2k0U2Q0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBALE8Z8xSld2GYBbrOBi0
JGkhrwsulqZ2sRdr+guW8i6oq24A3Ka9NgURGAGghRhHtb1v9CXhc6dbAJ9bCR/I
u7OQotQz1jMx4HOwxanupYSoqDl8Dmaw4YSPFrSME0znbs2LC4E+mzGtVopl46FC
T6FB/Ba/Gu3qAJe+LOFcxK7zwmcseK640smL8mCH2yjJ3UL2dAbfb6c5Kznd32MJ
MjkZnY7KX+M9Aq5Yp8IUDCkCWGLBvolFoBNoqAkvH4j8eL6cl3fmCE/74JaRYq7V
IH0mLzL6Lzb9T5pE++Mno1liIPPx9dIGqZO/dPR831XOQVEUEno9lFJmUtJrphDr
U8s=
-----END CERTIFICATE-----
Generated at Thu May 1 13:01:39 2025 by rpki-client