Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aVuabAgpfI10vkQy3zRbpOMgJPg.roa
File: aVuabAgpfI10vkQy3zRbpOMgJPg.roa (raw, json)
Hash identifier: 1+wVP4rVJEd4fTYVhBhd1PEWS+/JqH7LXMRrWDSb94k=
Subject key identifier: 69:5B:9A:6C:08:29:7C:8D:74:BE:44:32:DF:34:5B:A4:E3:20:24:F8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018230FED516B25839BB293927D7DF9EDFB2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aVuabAgpfI10vkQy3zRbpOMgJPg.roa
Signing time: Sun 24 Jul 2022 16:16:23 +0000
ROA not before: Sun 24 Jul 2022 16:16:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:30:fe:d5:16:b2:58:39:bb:29:39:27:d7:df:9e:df:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 24 16:16:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=695b9a6c08297c8d74be4432df345ba4e32024f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cb:eb:a1:05:47:40:a1:c2:3e:f9:09:cf:9e:
04:76:d5:12:8e:e0:26:8d:a2:20:25:c9:4a:7c:52:
86:ed:f7:3c:c8:5e:91:ab:f2:65:6c:e5:38:33:d6:
40:c3:75:aa:63:89:ca:ef:c1:52:d4:50:12:85:98:
b7:7b:7a:38:07:5e:a5:0e:d8:f8:e6:8a:8a:7d:ca:
01:69:07:94:ea:29:b4:d9:92:20:39:49:ae:93:e8:
eb:45:50:5c:64:0b:52:f9:b6:22:f3:37:18:44:3d:
be:a8:fb:dc:ec:a5:a2:20:35:37:33:47:b4:97:d9:
5e:40:38:36:b2:0d:83:24:70:e6:3c:1b:cd:64:1c:
c3:3b:49:d6:15:12:39:57:b8:65:73:6e:82:14:bd:
64:c9:bb:14:58:32:9d:0e:31:f3:1a:67:ed:8a:99:
69:8c:24:dd:e5:6c:f6:bd:5c:cd:50:44:1d:b3:29:
3c:88:f7:d6:ee:fe:1d:3d:d2:26:e1:6d:15:a5:52:
a8:96:11:36:03:a9:22:07:ca:11:e6:37:4b:eb:f9:
22:97:97:b7:db:2e:52:cb:80:89:89:bd:44:cb:4a:
08:26:9c:30:09:14:cb:76:13:63:0e:d1:c4:39:33:
cf:b6:92:eb:06:98:c4:fe:e2:52:64:f5:f9:b6:d8:
f1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:5B:9A:6C:08:29:7C:8D:74:BE:44:32:DF:34:5B:A4:E3:20:24:F8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aVuabAgpfI10vkQy3zRbpOMgJPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
02:e6:b9:8d:a0:b9:12:0c:2b:d4:0d:ae:b2:24:5b:12:38:c0:
25:bf:f8:1e:ae:6d:6b:42:60:bf:eb:fb:d8:6a:f2:39:cb:65:
e9:4f:b0:5f:2e:0b:bc:70:f5:30:25:99:d3:3b:89:d4:6b:92:
ef:b1:d6:26:42:61:c4:cb:0b:b9:a8:13:0f:73:5f:f8:10:dc:
91:a4:4a:fa:e2:c2:04:4b:7a:24:62:63:fe:25:93:87:f0:be:
d7:fa:fc:30:61:6a:01:84:39:58:0b:25:f1:50:dd:05:3f:a9:
c8:b9:14:98:0e:03:04:2d:9e:d0:05:40:e5:b0:db:d1:ae:ad:
6e:5d:6b:f3:ef:2f:15:77:b9:a9:4e:74:6c:9f:ed:50:57:1f:
a7:69:db:9f:2f:b4:f8:6d:df:f8:0d:2f:b5:0e:fe:cc:b4:86:
b7:af:3f:64:b8:62:85:5b:8c:2c:36:ed:a4:34:67:13:c4:1d:
81:15:b7:96:1f:19:84:b0:a4:c7:ed:b0:94:16:d9:f8:1a:a1:
a3:4f:b0:57:3f:de:f0:75:d6:3e:ee:4a:a9:57:2a:60:f3:7c:
3d:e9:3a:d0:85:42:b9:70:7a:57:ae:9f:d6:64:d5:01:df:4c:
33:36:a1:a0:51:15:78:7c:65:5d:35:9a:ee:af:b5:16:14:bb:
fc:4f:4a:79
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYIw/tUWslg5uyk5J9ffnt+yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwNzI0MTYxNjIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OTViOWE2YzA4Mjk3YzhkNzRiZTQ0MzJkZjM0NWJhNGUzMjAyNGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMvroQVHQKHCPvkJz54EdtUSjuAm
jaIgJclKfFKG7fc8yF6Rq/JlbOU4M9ZAw3WqY4nK78FS1FAShZi3e3o4B16lDtj4
5oqKfcoBaQeU6im02ZIgOUmuk+jrRVBcZAtS+bYi8zcYRD2+qPvc7KWiIDU3M0e0
l9leQDg2sg2DJHDmPBvNZBzDO0nWFRI5V7hlc26CFL1kybsUWDKdDjHzGmftiplp
jCTd5Wz2vVzNUEQdsyk8iPfW7v4dPdIm4W0VpVKolhE2A6kiB8oR5jdL6/kil5e3
2y5Sy4CJib1Ey0oIJpwwCRTLdhNjDtHEOTPPtpLrBpjE/uJSZPX5ttjxEQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGlbmmwIKXyNdL5EMt80W6TjICT4MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvYVZ1YWJBZ3BmSTEwdmtReTN6UmJwT01nSlBnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAALmuY2guRIMK9QNrrIk
WxI4wCW/+B6ubWtCYL/r+9hq8jnLZelPsF8uC7xw9TAlmdM7idRrku+x1iZCYcTL
C7moEw9zX/gQ3JGkSvriwgRLeiRiY/4lk4fwvtf6/DBhagGEOVgLJfFQ3QU/qci5
FJgOAwQtntAFQOWw29GurW5da/PvLxV3ualOdGyf7VBXH6dp258vtPht3/gNL7UO
/sy0hrevP2S4YoVbjCw27aQ0ZxPEHYEVt5YfGYSwpMftsJQW2fgaoaNPsFc/3vB1
1j7uSqlXKmDzfD3pOtCFQrlweleun9Zk1QHfTDM2oaBRFXh8ZV01mu6vtRYUu/xP
Snk=
-----END CERTIFICATE-----
Generated at Fri May 2 14:25:16 2025 by rpki-client