Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ur45q7XfgcW9X7XIJcdPkrQ5-7w.roa
File: Ur45q7XfgcW9X7XIJcdPkrQ5-7w.roa (raw, json)
Hash identifier: 4d51HQyudlArby+tFSWcfeoxmagYoc+Q+eIUmotFfeU=
Subject key identifier: 52:BE:39:AB:B5:DF:81:C5:BD:5F:B5:C8:25:C7:4F:92:B4:39:FB:BC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01868162BD9A746C5B1585AC9EFC9CD4ECF4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ur45q7XfgcW9X7XIJcdPkrQ5-7w.roa
Signing time: Fri 24 Feb 2023 03:06:17 +0000
ROA not before: Fri 24 Feb 2023 03:06:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
2001:67c:64:ffff:0:186:8162:c89/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:81:62:bd:9a:74:6c:5b:15:85:ac:9e:fc:9c:d4:ec:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 24 03:06:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=52be39abb5df81c5bd5fb5c825c74f92b439fbbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:f4:e5:ab:20:6f:fa:96:2d:cd:e1:38:ac:6e:
25:bd:38:0b:e6:23:c5:e3:14:1e:e4:2d:85:0f:45:
e6:a3:12:a1:b1:2f:cf:17:bc:37:9f:50:80:b7:53:
62:8c:d0:ba:3c:1e:3b:0b:0d:e4:46:5c:ed:55:b2:
db:49:15:2c:b3:46:5a:05:d5:79:f5:eb:c8:5a:7d:
66:59:d9:e2:4b:90:d3:dc:ea:76:ce:80:08:f4:27:
a1:4b:0b:f8:3a:b2:49:b6:de:47:bf:f3:b7:b6:a2:
dd:95:7a:97:3e:7d:df:b2:24:89:4f:b3:b1:d4:96:
45:40:e0:f9:18:78:9e:d3:d8:7b:22:3c:58:d5:3a:
8b:3f:e9:51:44:ca:44:c3:ed:e8:94:be:dd:c9:a6:
e8:bd:97:17:ea:4b:a3:1a:3a:3f:d3:84:9c:eb:b7:
c8:fa:f5:6b:58:1c:58:44:14:21:9f:f6:f1:fb:04:
96:1f:70:d8:c9:42:42:0b:4b:c3:7d:b0:3f:19:21:
7f:98:99:6f:83:b8:91:eb:63:83:35:8e:87:52:18:
bf:10:33:6f:21:d9:8a:42:2d:1e:55:6a:af:2f:d4:
df:bb:89:fa:a2:e2:f1:e9:83:2c:0d:ae:91:b2:53:
06:ff:36:eb:de:c5:0b:b7:2a:bd:ce:96:e9:5f:ea:
af:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:BE:39:AB:B5:DF:81:C5:BD:5F:B5:C8:25:C7:4F:92:B4:39:FB:BC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ur45q7XfgcW9X7XIJcdPkrQ5-7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2f:19:99:c3:f6:8f:02:0e:3a:80:0c:d4:49:b8:7f:03:4d:58:
0f:a3:f5:f9:6c:4b:96:0b:2d:a9:32:7f:28:c5:3e:32:01:d8:
d1:7b:76:df:4c:f9:54:37:8d:3e:12:ed:6d:3e:20:82:4e:10:
a0:5a:ff:15:e4:70:fa:e4:ed:92:6c:df:54:23:4e:6b:ab:c6:
f7:9a:95:84:97:a5:32:70:32:b6:8d:27:de:a2:09:35:01:28:
f8:d8:ef:42:de:34:1f:d8:dd:ac:12:87:47:84:9f:5d:24:05:
7e:6a:d2:b6:77:2f:81:61:99:7d:5d:3b:17:de:18:0b:d3:c4:
93:8d:ac:5f:3e:34:66:82:51:bb:67:32:0e:49:1e:29:44:a2:
19:7c:d8:0f:ec:37:17:cd:2d:c5:28:a0:5a:91:df:b6:7d:b5:
d9:b6:12:65:82:80:85:b4:41:35:17:20:9a:9a:a8:64:d0:bd:
e3:22:64:f7:3e:86:ce:a7:f6:0c:f3:96:ea:06:9b:fb:a1:8e:
84:95:b4:e4:c5:f1:31:a4:c4:96:79:a4:f1:34:f8:ef:c2:5c:
b1:f8:9d:97:13:6a:ba:01:d2:22:8e:f3:ba:11:37:9d:6f:32:
eb:0f:65:88:36:10:3b:56:d6:1c:50:4c:4e:ff:35:91:ff:5a:
45:cc:82:f8
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYaBYr2adGxbFYWsnvyc1Oz0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjI0MDMwNjE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MmJlMzlhYmI1ZGY4MWM1YmQ1ZmI1YzgyNWM3NGY5MmI0MzlmYmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9PTlqyBv+pYtzeE4rG4lvTgL5iPF
4xQe5C2FD0XmoxKhsS/PF7w3n1CAt1NijNC6PB47Cw3kRlztVbLbSRUss0ZaBdV5
9evIWn1mWdniS5DT3Op2zoAI9CehSwv4OrJJtt5Hv/O3tqLdlXqXPn3fsiSJT7Ox
1JZFQOD5GHie09h7IjxY1TqLP+lRRMpEw+3olL7dyabovZcX6kujGjo/04Sc67fI
+vVrWBxYRBQhn/bx+wSWH3DYyUJCC0vDfbA/GSF/mJlvg7iR62ODNY6HUhi/EDNv
IdmKQi0eVWqvL9Tfu4n6ouLx6YMsDa6RslMG/zbr3sULtyq9zpbpX+qvYQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFK+Oau134HFvV+1yCXHT5K0Ofu8MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvVXI0NXE3WGZnY1c5WDdYSUpjZFBrclE1LTd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAC8ZmcP2jwIOOoAM1Em4
fwNNWA+j9flsS5YLLakyfyjFPjIB2NF7dt9M+VQ3jT4S7W0+IIJOEKBa/xXkcPrk
7ZJs31QjTmurxvealYSXpTJwMraNJ96iCTUBKPjY70LeNB/Y3awSh0eEn10kBX5q
0rZ3L4FhmX1dOxfeGAvTxJONrF8+NGaCUbtnMg5JHilEohl82A/sNxfNLcUooFqR
37Z9tdm2EmWCgIW0QTUXIJqaqGTQveMiZPc+hs6n9gzzluoGm/uhjoSVtOTF8TGk
xJZ5pPE0+O/CXLH4nZcTaroB0iKO87oRN51vMusPZYg2EDtW1hxQTE7/NZH/WkXM
gvg=
-----END CERTIFICATE-----
Generated at Thu May 1 01:15:55 2025 by rpki-client