Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/X9hLvWz09GkagWfMZJX293jBq6A.roa
File: X9hLvWz09GkagWfMZJX293jBq6A.roa (raw, json)
Hash identifier: N0eu8nrAn56zGVzFxA5/SQRzsj+J46Pj2CPWtZ3mZrs=
Subject key identifier: 5F:D8:4B:BD:6C:F4:F4:69:1A:81:67:CC:64:95:F6:F7:78:C1:AB:A0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01821B51D602BCB5090208590DDD4B507789
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/X9hLvWz09GkagWfMZJX293jBq6A.roa
Signing time: Wed 20 Jul 2022 11:15:24 +0000
ROA not before: Wed 20 Jul 2022 11:15:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1b:51:d6:02:bc:b5:09:02:08:59:0d:dd:4b:50:77:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 20 11:15:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5fd84bbd6cf4f4691a8167cc6495f6f778c1aba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c3:fc:dc:23:35:6e:b8:7d:c7:2f:4d:30:18:
83:4a:d0:47:97:d2:7d:43:08:d8:6f:e1:66:5c:da:
fd:16:2c:3f:b3:4d:fe:96:71:3b:a8:a3:3d:01:e8:
65:b6:4a:dc:31:bb:fe:07:b1:66:75:ed:53:93:7e:
19:95:42:50:fc:d1:18:ee:09:92:74:77:b0:06:2b:
1d:da:0b:d8:0f:71:4d:c7:ce:db:57:2b:85:73:66:
99:6f:63:b5:ab:f9:8f:db:ed:23:69:57:9e:01:aa:
e0:43:0e:85:70:56:eb:23:aa:b1:ae:81:a0:95:fa:
6c:b3:42:25:45:0f:2d:dc:41:67:55:62:08:e3:1e:
25:25:92:5f:44:17:cc:50:c9:92:18:84:3c:71:6e:
d4:7c:c4:1a:ab:c4:a5:57:1c:da:48:61:67:bd:07:
f3:79:f6:69:26:20:20:48:97:34:70:e3:75:af:59:
46:e6:15:23:94:7e:a6:a4:2e:94:5c:36:b2:87:b1:
44:44:b3:4e:73:2b:6a:e4:9e:f3:c8:e6:b0:70:c4:
02:77:d6:ce:ce:c5:54:40:5b:45:2b:f7:38:45:6b:
f0:4a:86:4f:6b:02:23:85:1c:8f:31:53:31:63:ea:
f8:77:0b:20:ba:00:db:a2:19:a7:69:c9:07:4a:c4:
b0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D8:4B:BD:6C:F4:F4:69:1A:81:67:CC:64:95:F6:F7:78:C1:AB:A0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/X9hLvWz09GkagWfMZJX293jBq6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
67:31:fc:1e:f1:3d:66:50:17:61:7f:68:f5:98:39:a2:51:0b:
04:3d:74:f9:7f:1e:76:a7:5a:eb:99:34:86:66:03:dd:b9:55:
b5:1a:c3:d3:ad:2d:f2:2e:4f:b7:64:43:f6:08:94:23:de:60:
c0:3f:85:e8:da:cb:b3:3c:cc:d5:68:85:ea:f8:33:f3:a6:1a:
2f:35:df:df:e8:cc:8c:e7:d4:02:1f:ec:e4:63:3b:bf:d5:f4:
96:3d:1c:b9:e2:d5:48:61:14:fe:f3:47:7c:cc:19:92:69:fe:
c6:2a:78:3c:20:c9:25:88:14:59:7a:1b:e3:84:ef:05:4d:75:
a3:33:5d:fc:78:d5:5d:7c:5c:93:a1:79:bb:0d:34:4a:0c:fa:
c5:ad:a4:b7:0a:df:f0:ba:7a:bc:00:b3:aa:0d:8f:84:a4:99:
24:30:81:33:69:63:a0:69:91:2a:fe:b6:b2:4c:42:47:1e:54:
14:18:19:84:00:91:73:a2:c9:aa:87:3a:7d:b9:6d:fe:21:96:
78:22:d1:2f:64:e8:bf:e2:8f:57:b8:78:1f:af:bc:ea:b7:53:
1b:64:3a:93:23:02:49:cd:d4:ed:59:23:f9:63:c8:04:77:64:
06:38:e5:b5:32:bb:16:7b:ef:e8:b1:ef:1a:0d:3b:b5:fb:de:
9e:1a:8b:4d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYIbUdYCvLUJAghZDd1LUHeJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwNzIwMTExNTI0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZmQ4NGJiZDZjZjRmNDY5MWE4MTY3Y2M2NDk1ZjZmNzc4YzFhYmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcP83CM1brh9xy9NMBiDStBHl9J9
QwjYb+FmXNr9Fiw/s03+lnE7qKM9AehltkrcMbv+B7Fmde1Tk34ZlUJQ/NEY7gmS
dHewBisd2gvYD3FNx87bVyuFc2aZb2O1q/mP2+0jaVeeAargQw6FcFbrI6qxroGg
lfpss0IlRQ8t3EFnVWII4x4lJZJfRBfMUMmSGIQ8cW7UfMQaq8SlVxzaSGFnvQfz
efZpJiAgSJc0cON1r1lG5hUjlH6mpC6UXDayh7FERLNOcytq5J7zyOawcMQCd9bO
zsVUQFtFK/c4RWvwSoZPawIjhRyPMVMxY+r4dwsgugDbohmnackHSsSwVQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFF/YS71s9PRpGoFnzGSV9vd4waugMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvWDloTHZXejA5R2thZ1dmTVpKWDI5M2pCcTZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGcx/B7xPWZQF2F/aPWY
OaJRCwQ9dPl/HnanWuuZNIZmA925VbUaw9OtLfIuT7dkQ/YIlCPeYMA/hejay7M8
zNVoher4M/OmGi8139/ozIzn1AIf7ORjO7/V9JY9HLni1UhhFP7zR3zMGZJp/sYq
eDwgySWIFFl6G+OE7wVNdaMzXfx41V18XJOhebsNNEoM+sWtpLcK3/C6erwAs6oN
j4SkmSQwgTNpY6BpkSr+trJMQkceVBQYGYQAkXOiyaqHOn25bf4hlngi0S9k6L/i
j1e4eB+vvOq3UxtkOpMjAknN1O1ZI/ljyAR3ZAY45bUyuxZ77+ix7xoNO7X73p4a
i00=
-----END CERTIFICATE-----
Generated at Thu May 1 15:00:56 2025 by rpki-client