Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aLQ7b8RqykUPj5dM6t76PqmmSzU.roa
File: aLQ7b8RqykUPj5dM6t76PqmmSzU.roa (raw, json)
Hash identifier: Vkkx85PdLm+BnWTRAU2/wdfJVwS8ILFUIj8SoNbAyyE=
Subject key identifier: 68:B4:3B:6F:C4:6A:CA:45:0F:8F:97:4C:EA:DE:FA:3E:A9:A6:4B:35
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182ABEF3FF58872EA4CC56D587D83E2F840
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aLQ7b8RqykUPj5dM6t76PqmmSzU.roa
Signing time: Wed 17 Aug 2022 13:12:39 +0000
ROA not before: Wed 17 Aug 2022 13:12:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ab:ef:3f:f5:88:72:ea:4c:c5:6d:58:7d:83:e2:f8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 17 13:12:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=68b43b6fc46aca450f8f974ceadefa3ea9a64b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7e:72:88:cf:46:dd:bf:31:b4:2d:c5:e2:1d:
b2:5b:3a:71:fb:97:2f:f4:58:22:9a:44:14:5b:c0:
5d:7a:75:0a:e8:79:62:06:eb:b1:4a:53:85:c3:c5:
10:20:57:cb:81:b7:95:46:7f:92:11:3f:3c:4b:a8:
e0:2d:3f:b7:9a:f0:66:8e:87:39:62:42:5c:81:33:
34:49:c7:c5:ab:4d:85:b5:b0:e4:a5:b5:3b:53:71:
bf:67:3b:81:03:78:3c:86:a1:e0:c2:06:fe:c5:f0:
d4:6f:3a:3b:4f:1e:a6:7b:7d:d4:ed:d9:b9:78:b3:
2b:e1:13:89:28:22:9c:95:96:4e:bc:9d:a2:05:62:
f9:65:5e:51:bc:3e:d4:14:86:cd:66:63:4d:81:f7:
43:39:1b:6d:ac:a7:5a:5a:26:d1:ca:16:16:d2:11:
fe:b1:79:eb:fa:06:4f:e0:1e:69:3c:2c:af:33:37:
93:e1:d2:21:5c:a7:d7:a1:f9:27:18:af:e3:3e:5d:
5a:32:b1:af:e2:b5:c3:db:f1:78:4d:88:c0:57:58:
af:f0:03:d0:4c:40:bd:25:78:6e:ef:e2:ef:a1:23:
1a:d1:95:54:c8:4d:ca:be:71:08:a6:fa:42:3d:2a:
ff:f3:25:9d:90:e5:23:0c:0d:3c:a4:36:96:46:2f:
49:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B4:3B:6F:C4:6A:CA:45:0F:8F:97:4C:EA:DE:FA:3E:A9:A6:4B:35
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aLQ7b8RqykUPj5dM6t76PqmmSzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
16:1a:13:ff:08:9c:5c:a2:c1:7a:67:42:c4:63:98:46:9b:e4:
4a:95:01:06:e7:49:f4:f7:70:d7:3b:c2:ad:2a:22:7b:9a:86:
b8:04:bf:d1:47:05:fc:11:3b:91:5e:e4:95:b2:07:f6:f6:ee:
02:1c:30:c7:3c:b5:9a:1f:37:3e:6d:f7:f3:a6:6f:ed:55:d2:
6b:85:d4:9b:6a:f9:25:94:55:5b:1c:f2:0a:d0:6b:b3:24:21:
29:00:58:06:30:a3:95:df:de:57:23:93:3a:80:a2:95:f3:52:
91:ae:ff:28:53:85:06:18:de:6f:fc:3f:6c:d3:61:26:59:02:
19:f2:e6:e3:92:b8:da:fd:6b:7f:c4:fe:b9:2c:d7:46:a4:91:
ad:36:18:5d:f8:80:b9:ad:aa:1d:7d:3a:69:e4:4c:cc:d6:9a:
3a:5e:4d:4b:b1:fd:53:6c:05:70:87:0e:73:59:be:1c:ed:52:
e2:78:16:a9:db:87:25:2a:65:3b:18:90:b5:d4:a8:f8:bf:22:
9a:d2:99:c9:7c:0c:ea:cf:c2:cc:68:4b:e4:d7:32:0a:01:16:
dc:ec:6f:88:b3:99:19:2d:51:92:24:b2:ec:16:1f:5c:6f:c3:
27:a2:d5:7c:df:af:2d:e1:04:36:c9:a4:cb:bc:0e:ba:ed:d7:
db:29:d3:2c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYKr7z/1iHLqTMVtWH2D4vhAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwODE3MTMxMjM5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OGI0M2I2ZmM0NmFjYTQ1MGY4Zjk3NGNlYWRlZmEzZWE5YTY0YjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnX5yiM9G3b8xtC3F4h2yWzpx+5cv
9FgimkQUW8BdenUK6HliBuuxSlOFw8UQIFfLgbeVRn+SET88S6jgLT+3mvBmjoc5
YkJcgTM0ScfFq02FtbDkpbU7U3G/ZzuBA3g8hqHgwgb+xfDUbzo7Tx6me33U7dm5
eLMr4ROJKCKclZZOvJ2iBWL5ZV5RvD7UFIbNZmNNgfdDORttrKdaWibRyhYW0hH+
sXnr+gZP4B5pPCyvMzeT4dIhXKfXofknGK/jPl1aMrGv4rXD2/F4TYjAV1iv8APQ
TEC9JXhu7+LvoSMa0ZVUyE3KvnEIpvpCPSr/8yWdkOUjDA08pDaWRi9JZwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGi0O2/EaspFD4+XTOre+j6ppks1MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvYUxRN2I4UnF5a1VQajVkTTZ0NzZQcW1tU3pVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABYaE/8InFyiwXpnQsRj
mEab5EqVAQbnSfT3cNc7wq0qInuahrgEv9FHBfwRO5Fe5JWyB/b27gIcMMc8tZof
Nz5t9/Omb+1V0muF1Jtq+SWUVVsc8grQa7MkISkAWAYwo5Xf3lcjkzqAopXzUpGu
/yhThQYY3m/8P2zTYSZZAhny5uOSuNr9a3/E/rks10akka02GF34gLmtqh19Omnk
TMzWmjpeTUux/VNsBXCHDnNZvhztUuJ4FqnbhyUqZTsYkLXUqPi/IprSmcl8DOrP
wsxoS+TXMgoBFtzsb4izmRktUZIksuwWH1xvwyei1Xzfry3hBDbJpMu8Drrt19sp
0yw=
-----END CERTIFICATE-----
Generated at Wed Apr 30 18:43:45 2025 by rpki-client