Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/X3vxTEE2MjV8--yL1VRfG-viSJE.roa
File: X3vxTEE2MjV8--yL1VRfG-viSJE.roa (raw, json)
Hash identifier: L8AulWUIYYBqomDS+ZAh0vwzoAJFBZSXqb/wXN3BENw=
Subject key identifier: 5F:7B:F1:4C:41:36:32:35:7C:FB:EC:8B:D5:54:5F:1B:EB:E2:48:91
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189EA17D900E70CA9C49963083CF31A7F9A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/X3vxTEE2MjV8--yL1VRfG-viSJE.roa
Signing time: Sat 12 Aug 2023 14:12:58 +0000
ROA not before: Sat 12 Aug 2023 14:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ea:17:d9:00:e7:0c:a9:c4:99:63:08:3c:f3:1a:7f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 12 14:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f7bf14c413632357cfbec8bd5545f1bebe24891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d1:d5:12:0b:54:9f:bf:71:ed:d4:6a:47:a8:
fe:17:d1:7d:34:0d:db:99:68:c1:bc:8d:e9:39:23:
2b:ca:d7:97:97:c7:5e:0c:7c:35:be:8c:3c:77:41:
5f:0e:14:d7:7d:f9:4e:78:81:87:17:9f:c1:c2:63:
a1:6b:5e:b7:c6:de:f2:98:60:09:ac:f6:3c:b7:86:
f4:ff:e9:53:c5:01:42:68:e5:f8:35:5e:59:e0:7a:
50:49:5e:dc:ce:24:70:8c:6d:b1:d2:eb:b6:13:e9:
15:4e:61:ff:d2:86:b1:c8:79:a2:0a:4e:20:e7:f8:
57:21:2e:17:fc:4b:f2:3b:f1:90:3b:7d:aa:f2:8d:
c4:2a:2d:a8:3d:ef:0c:2e:23:92:74:c1:1a:ef:6c:
5d:c7:3b:12:d1:2d:a3:41:04:a7:f2:9f:d2:b3:94:
57:b5:43:5c:e9:59:86:24:0f:ef:11:a1:dc:0a:27:
29:c6:23:17:d4:00:3a:0d:e3:7e:a4:cd:48:f7:19:
bb:ea:f9:1f:f4:59:04:1a:fd:81:42:e8:e0:b6:e7:
84:0f:ee:ca:01:23:bf:de:be:45:a3:83:f0:8b:67:
27:5c:7b:60:85:57:38:34:14:d6:36:1f:b4:63:03:
a8:a7:0c:a1:50:13:87:d3:6c:96:c4:3d:d2:11:d2:
ee:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:7B:F1:4C:41:36:32:35:7C:FB:EC:8B:D5:54:5F:1B:EB:E2:48:91
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/X3vxTEE2MjV8--yL1VRfG-viSJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
64:b3:2b:b9:52:de:d0:2f:6c:57:f2:66:3f:58:ed:e2:40:02:
d4:6a:60:ad:63:85:04:26:76:3f:6c:6c:11:ef:49:7f:c4:c0:
b3:b4:13:c7:a3:08:05:12:21:d0:05:76:af:0a:7f:be:98:14:
41:49:92:45:3b:7d:5c:6d:d7:c1:c3:91:cd:cd:0d:5a:9d:64:
3a:8b:cb:77:70:d5:72:bb:7d:78:95:9e:c4:6a:7c:74:da:58:
48:01:bb:a3:0f:45:04:0f:5e:e8:0f:27:7c:50:b3:26:5b:e1:
d1:9c:ad:de:ad:7c:36:fc:c7:49:78:6d:6a:36:4a:ef:e8:5a:
9b:68:be:94:f9:0d:bb:f2:c3:27:b4:3f:ef:94:87:ea:df:cc:
ef:41:d7:44:8c:e2:6c:af:a3:91:d6:d0:32:06:8d:67:8a:03:
a1:16:db:d7:14:db:07:d7:9a:e6:25:7e:f5:6d:19:1a:41:b5:
90:04:72:b1:14:cd:1f:4e:ca:69:24:51:77:76:fa:b0:79:63:
f0:3d:64:10:5d:18:f9:c7:0e:30:a4:c3:5f:1a:36:04:cb:71:
4b:c2:3b:76:49:58:5b:02:04:31:9a:fb:b1:35:59:87:b5:02:
62:ea:5f:68:27:dc:20:eb:f6:25:8b:2d:bd:75:39:6a:6c:4f:
7d:4c:14:e7
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYnqF9kA5wypxJljCDzzGn+aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODEyMTQxMjU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZjdiZjE0YzQxMzYzMjM1N2NmYmVjOGJkNTU0NWYxYmViZTI0ODkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdHVEgtUn79x7dRqR6j+F9F9NA3b
mWjBvI3pOSMryteXl8deDHw1vow8d0FfDhTXfflOeIGHF5/BwmOha163xt7ymGAJ
rPY8t4b0/+lTxQFCaOX4NV5Z4HpQSV7cziRwjG2x0uu2E+kVTmH/0oaxyHmiCk4g
5/hXIS4X/EvyO/GQO32q8o3EKi2oPe8MLiOSdMEa72xdxzsS0S2jQQSn8p/Ss5RX
tUNc6VmGJA/vEaHcCicpxiMX1AA6DeN+pM1I9xm76vkf9FkEGv2BQujgtueED+7K
ASO/3r5Fo4Pwi2cnXHtghVc4NBTWNh+0YwOopwyhUBOH02yWxD3SEdLuKwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFF978UxBNjI1fPvsi9VUXxvr4kiRMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvWDN2eFRFRTJNalY4LS15TDFWUmZHLXZpU0pFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGSzK7lS3tAvbFfyZj9Y
7eJAAtRqYK1jhQQmdj9sbBHvSX/EwLO0E8ejCAUSIdAFdq8Kf76YFEFJkkU7fVxt
18HDkc3NDVqdZDqLy3dw1XK7fXiVnsRqfHTaWEgBu6MPRQQPXugPJ3xQsyZb4dGc
rd6tfDb8x0l4bWo2Su/oWptovpT5Dbvywye0P++Uh+rfzO9B10SM4myvo5HW0DIG
jWeKA6EW29cU2wfXmuYlfvVtGRpBtZAEcrEUzR9OymkkUXd2+rB5Y/A9ZBBdGPnH
DjCkw18aNgTLcUvCO3ZJWFsCBDGa+7E1WYe1AmLqX2gn3CDr9iWLLb11OWpsT31M
FOc=
-----END CERTIFICATE-----
Generated at Thu May 1 01:46:43 2025 by rpki-client