Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aDNtY-EAw0g3g54RKPdoIDB4XMY.roa
File: aDNtY-EAw0g3g54RKPdoIDB4XMY.roa (raw, json)
Hash identifier: byZ1vExA5usASKF1SOVWhHvTtl9J/lbt3I9LDSh+Zv4=
Subject key identifier: 68:33:6D:63:E1:00:C3:48:37:83:9E:11:28:F7:68:20:30:78:5C:C6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189F98B60455B6710138429CCA7E49C6FB5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aDNtY-EAw0g3g54RKPdoIDB4XMY.roa
Signing time: Tue 15 Aug 2023 14:13:28 +0000
ROA not before: Tue 15 Aug 2023 14:13:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f9:8b:60:45:5b:67:10:13:84:29:cc:a7:e4:9c:6f:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 15 14:13:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=68336d63e100c34837839e1128f7682030785cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:2b:ad:8f:49:4a:65:32:68:0c:58:20:ea:3f:
fe:12:b5:3b:42:29:d9:d3:71:9b:13:89:25:0a:2e:
9a:c7:47:62:e0:dc:8c:bb:6e:6c:c8:72:6a:72:40:
b9:07:59:5a:48:80:8d:7f:05:36:eb:f6:0a:a9:e9:
ec:09:2f:06:2a:1b:f5:72:f6:37:70:be:86:e6:0f:
c4:10:98:ff:33:6a:6a:e0:93:be:e7:c1:21:ea:43:
1d:a6:08:12:2b:ed:5f:ce:84:23:f6:da:4b:63:83:
51:69:d2:d4:23:9e:ab:7e:86:61:16:5b:9e:1f:95:
16:45:01:eb:66:85:fb:0f:fe:96:58:e4:e3:0f:26:
ba:bd:b7:1c:de:aa:e0:bd:3e:7c:b2:d2:d8:1a:8b:
a1:c2:75:ac:11:51:3f:09:56:df:31:ea:8f:da:a1:
2e:59:8c:7f:88:b3:7f:aa:6a:be:33:df:d4:70:58:
85:96:68:af:ca:43:8f:23:7a:16:37:d1:b5:71:37:
57:83:78:df:28:8f:8a:1e:bd:64:dd:db:b1:1a:e1:
e4:ef:30:e8:85:26:cf:a6:7b:42:ea:39:b9:84:46:
c4:17:c5:91:15:4e:55:aa:1d:62:65:d7:a8:c7:2f:
33:13:53:ce:5e:2c:8b:61:95:0b:c6:2a:7c:c1:d5:
e8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:33:6D:63:E1:00:C3:48:37:83:9E:11:28:F7:68:20:30:78:5C:C6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aDNtY-EAw0g3g54RKPdoIDB4XMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
46:8c:4e:79:96:27:89:b5:6a:26:ad:7d:6b:ff:2c:a1:e1:a5:
41:d8:aa:fb:8c:24:e2:59:3a:c9:a9:45:0b:73:cf:73:20:91:
c4:78:4f:07:31:b9:a2:e8:bf:8a:56:44:8a:3e:84:43:e8:84:
f6:4a:e9:95:96:b7:f6:49:b8:59:07:38:67:b0:cf:c9:bf:03:
11:73:92:98:a2:b7:51:77:28:d3:f1:17:1b:1e:15:8d:7b:95:
db:17:0e:e5:6a:b2:b8:7c:7e:3f:db:78:f8:c9:56:f2:fb:f5:
25:52:c6:55:b9:a7:cf:47:17:29:a4:d5:9a:4d:41:99:c5:ac:
3d:79:a2:35:99:7d:bb:87:ae:1e:70:38:27:87:78:30:3c:38:
be:29:db:4a:f4:ea:a8:df:66:65:2e:e8:65:d0:84:d9:fc:e7:
dc:41:f2:79:7e:6e:ba:60:98:e1:b7:0c:9e:f2:6b:5f:98:6f:
05:59:bc:c3:95:99:6e:de:d5:bf:2c:75:43:e5:43:e1:52:50:
41:70:0f:d5:20:45:a1:46:be:55:07:6d:8b:ff:fa:5f:fb:e5:
df:07:6d:db:0f:e8:b2:ca:65:dd:0d:36:a6:ce:68:b7:fb:2f:
f0:ee:98:9b:ee:6f:b1:a0:9e:41:15:6e:7d:3a:ed:72:43:5a:
6c:91:7e:05
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYn5i2BFW2cQE4QpzKfknG+1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODE1MTQxMzI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ODMzNmQ2M2UxMDBjMzQ4Mzc4MzllMTEyOGY3NjgyMDMwNzg1Y2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Cutj0lKZTJoDFgg6j/+ErU7QinZ
03GbE4klCi6ax0di4NyMu25syHJqckC5B1laSICNfwU26/YKqensCS8GKhv1cvY3
cL6G5g/EEJj/M2pq4JO+58Eh6kMdpggSK+1fzoQj9tpLY4NRadLUI56rfoZhFlue
H5UWRQHrZoX7D/6WWOTjDya6vbcc3qrgvT58stLYGouhwnWsEVE/CVbfMeqP2qEu
WYx/iLN/qmq+M9/UcFiFlmivykOPI3oWN9G1cTdXg3jfKI+KHr1k3duxGuHk7zDo
hSbPpntC6jm5hEbEF8WRFU5Vqh1iZdeoxy8zE1POXiyLYZULxip8wdXoMwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGgzbWPhAMNIN4OeESj3aCAweFzGMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvYUROdFktRUF3MGczZzU0UktQZG9JREI0WE1ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEaMTnmWJ4m1aiatfWv/
LKHhpUHYqvuMJOJZOsmpRQtzz3MgkcR4TwcxuaLov4pWRIo+hEPohPZK6ZWWt/ZJ
uFkHOGewz8m/AxFzkpiit1F3KNPxFxseFY17ldsXDuVqsrh8fj/bePjJVvL79SVS
xlW5p89HFymk1ZpNQZnFrD15ojWZfbuHrh5wOCeHeDA8OL4p20r06qjfZmUu6GXQ
hNn859xB8nl+brpgmOG3DJ7ya1+YbwVZvMOVmW7e1b8sdUPlQ+FSUEFwD9UgRaFG
vlUHbYv/+l/75d8HbdsP6LLKZd0NNqbOaLf7L/DumJvub7GgnkEVbn067XJDWmyR
fgU=
-----END CERTIFICATE-----
Generated at Thu May 1 08:26:58 2025 by rpki-client