Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_aBL6PLtXePF6eCCJ4dxy_5IMA0.roa
File: _aBL6PLtXePF6eCCJ4dxy_5IMA0.roa (raw, json)
Hash identifier: c/y72JBoJeNn+dGs6BoGlg8WkBVCSSAu5CtsShh1NZk=
Subject key identifier: FD:A0:4B:E8:F2:ED:5D:E3:C5:E9:E0:82:27:87:71:CB:FE:48:30:0D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018699DE91273EFFA9C17D9E18F7F0F30B8D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_aBL6PLtXePF6eCCJ4dxy_5IMA0.roa
Signing time: Tue 28 Feb 2023 21:12:25 +0000
ROA not before: Tue 28 Feb 2023 21:12:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:99:de:91:27:3e:ff:a9:c1:7d:9e:18:f7:f0:f3:0b:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 28 21:12:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fda04be8f2ed5de3c5e9e082278771cbfe48300d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c8:c1:5e:6e:93:5d:20:6d:57:c1:7d:fa:01:
9a:26:fc:05:98:1b:68:fb:6d:7c:31:a6:6f:27:29:
7c:d3:b0:2b:2b:d3:ba:ad:3c:7e:78:0d:71:c4:a4:
8c:88:fc:1e:32:fb:74:16:54:d1:d5:9f:14:f4:55:
a8:6f:4b:76:a5:2e:3f:cc:fc:28:72:65:50:e6:af:
ec:a3:e2:bb:17:bf:0a:e0:02:19:86:ca:bd:4e:44:
88:83:b6:a4:34:11:8d:a2:a0:c5:26:51:54:de:72:
59:62:d9:f2:c8:f8:87:48:37:20:b6:ea:a9:e4:2e:
46:7a:2a:16:41:5b:61:85:99:68:40:3c:c9:02:a9:
ce:11:55:9a:cb:27:06:5b:20:36:9f:1a:66:e7:95:
1a:e8:3b:da:7e:50:b7:5b:8f:b9:22:d3:ea:22:75:
52:9d:24:b0:16:63:7c:ca:ff:d2:55:00:65:4f:6d:
0c:d1:ff:14:ed:af:01:95:91:9c:15:24:f7:69:38:
fa:b3:77:8a:ba:d1:e2:5a:79:e5:0b:f6:62:3a:1d:
77:fa:bd:02:e6:82:73:e7:f8:2f:5d:65:d9:0c:7c:
1f:28:d2:33:87:6f:6b:46:7f:9e:51:c0:3f:04:a5:
8c:a2:a4:df:58:49:97:ad:d6:87:f0:0c:be:5d:98:
14:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A0:4B:E8:F2:ED:5D:E3:C5:E9:E0:82:27:87:71:CB:FE:48:30:0D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_aBL6PLtXePF6eCCJ4dxy_5IMA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a6:99:57:72:80:ca:ec:f3:c8:2e:8f:07:51:51:a9:29:6c:9d:
81:0a:c1:66:56:22:40:43:60:81:b3:df:c9:30:e3:55:59:7b:
c6:c6:45:8e:66:f8:8c:b2:2c:35:43:b6:d0:32:78:a3:04:ee:
c2:c4:11:a8:74:7c:7b:6f:06:e1:ac:9b:d1:39:fe:d5:ff:49:
d6:9e:0a:f5:ed:08:cd:88:58:95:93:13:7e:9e:05:c1:a6:68:
bc:25:1e:dc:83:46:67:8f:cf:cd:fa:fa:c1:fd:9f:90:12:9f:
72:c3:fb:ac:af:f7:14:77:94:97:c1:13:94:ba:b2:10:34:04:
53:04:e4:9a:a9:89:71:00:35:4a:c0:0c:46:21:2b:03:e3:bb:
1c:b0:37:2d:5e:b5:af:ea:73:69:d5:c7:96:45:ee:82:7c:c0:
e3:f9:8f:65:ee:65:08:20:f6:bd:dc:0c:7b:3f:f7:04:91:06:
fa:18:5f:9e:78:60:65:fd:41:70:f9:26:c7:f5:5d:95:41:18:
8a:68:b7:11:3b:08:c2:23:d9:11:04:68:71:cf:7b:01:98:3d:
ee:4e:3b:92:aa:ed:d7:06:3c:19:cc:ab:23:dc:fe:de:ce:8e:
c3:86:d9:ae:9e:77:56:07:58:40:e8:01:3b:0a:c8:b3:ce:a8:
f9:b9:f3:85
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYaZ3pEnPv+pwX2eGPfw8wuNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjI4MjExMjI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZGEwNGJlOGYyZWQ1ZGUzYzVlOWUwODIyNzg3NzFjYmZlNDgzMDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48jBXm6TXSBtV8F9+gGaJvwFmBto
+218MaZvJyl807ArK9O6rTx+eA1xxKSMiPweMvt0FlTR1Z8U9FWob0t2pS4/zPwo
cmVQ5q/so+K7F78K4AIZhsq9TkSIg7akNBGNoqDFJlFU3nJZYtnyyPiHSDcgtuqp
5C5GeioWQVthhZloQDzJAqnOEVWayycGWyA2nxpm55Ua6DvaflC3W4+5ItPqInVS
nSSwFmN8yv/SVQBlT20M0f8U7a8BlZGcFST3aTj6s3eKutHiWnnlC/ZiOh13+r0C
5oJz5/gvXWXZDHwfKNIzh29rRn+eUcA/BKWMoqTfWEmXrdaH8Ay+XZgUpQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFP2gS+jy7V3jxenggieHccv+SDANMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvX2FCTDZQTHRYZVBGNmVDQ0o0ZHh5XzVJTUEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKaZV3KAyuzzyC6PB1FR
qSlsnYEKwWZWIkBDYIGz38kw41VZe8bGRY5m+IyyLDVDttAyeKME7sLEEah0fHtv
BuGsm9E5/tX/SdaeCvXtCM2IWJWTE36eBcGmaLwlHtyDRmePz836+sH9n5ASn3LD
+6yv9xR3lJfBE5S6shA0BFME5JqpiXEANUrADEYhKwPjuxywNy1eta/qc2nVx5ZF
7oJ8wOP5j2XuZQgg9r3cDHs/9wSRBvoYX554YGX9QXD5Jsf1XZVBGIpotxE7CMIj
2REEaHHPewGYPe5OO5Kq7dcGPBnMqyPc/t7OjsOG2a6ed1YHWEDoATsKyLPOqPm5
84U=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:08 2025 by rpki-client