Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/anE_DNbQOVmklcurdi76VJ0yrfc.roa
File: anE_DNbQOVmklcurdi76VJ0yrfc.roa (raw, json)
Hash identifier: 0F/El8opqtW0S1t3MHA2Sl6B3abbEeJ8lKwYpGUvGRs=
Subject key identifier: 6A:71:3F:0C:D6:D0:39:59:A4:95:CB:AB:76:2E:FA:54:9D:32:AD:F7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184DFD59EF96045D40F65D4BDE1F6815B7D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/anE_DNbQOVmklcurdi76VJ0yrfc.roa
Signing time: Mon 05 Dec 2022 01:10:29 +0000
ROA not before: Mon 05 Dec 2022 01:10:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:df:d5:9e:f9:60:45:d4:0f:65:d4:bd:e1:f6:81:5b:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 5 01:10:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6a713f0cd6d03959a495cbab762efa549d32adf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c8:f6:37:d7:bf:c6:89:6a:24:89:89:fc:03:
69:de:5d:71:60:fc:3c:31:75:fd:49:31:ca:a7:38:
2e:59:23:3c:c1:5e:dd:09:4b:3a:fc:83:b6:70:4f:
08:c9:e9:24:ae:39:53:32:4d:cc:ee:9c:bd:54:83:
93:60:9e:9d:dd:4e:47:fe:23:da:2a:df:a9:37:6d:
76:4d:37:55:bb:c5:d7:20:45:79:58:dc:49:63:39:
f9:4b:59:25:8d:2c:32:2c:fe:ea:7f:4c:a4:64:6e:
65:1e:2d:99:29:82:1f:9a:cb:95:d3:12:c5:00:d3:
73:11:bf:c2:cb:43:e9:88:9c:54:de:62:b7:dc:23:
23:08:14:a2:ff:66:d8:7b:6b:11:02:09:56:0c:bb:
a6:f0:41:26:58:78:4a:89:0b:12:6e:b2:ee:89:ba:
f0:cf:b2:d6:02:16:64:4f:35:11:83:92:58:aa:2c:
05:cc:0c:0f:88:ad:d3:3e:91:16:80:82:03:37:e8:
5f:d7:98:a4:d6:57:03:8e:fa:d4:5f:33:f9:1e:a1:
07:1b:27:0b:6c:8b:0b:ef:39:e8:36:33:20:d7:b7:
cb:3f:67:14:fa:52:88:fd:22:3b:32:28:96:94:95:
5e:04:5e:40:bf:11:b8:c8:dd:dc:6a:0b:53:0d:30:
30:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:71:3F:0C:D6:D0:39:59:A4:95:CB:AB:76:2E:FA:54:9D:32:AD:F7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/anE_DNbQOVmklcurdi76VJ0yrfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9f:4c:fd:2a:3c:b6:48:56:dd:da:61:81:01:85:41:ad:b7:a2:
45:03:33:90:63:23:31:ad:3e:7a:4b:6a:ac:9b:e4:51:f4:71:
a1:e7:4e:aa:49:db:c1:9a:23:c1:31:a9:4a:ce:5d:14:54:a3:
d5:71:2d:a5:28:4d:fd:97:8d:45:ca:a8:d3:44:e3:3e:e2:f6:
7d:15:a0:c2:16:8f:e8:c9:8f:b2:ee:0d:c0:00:6f:dc:da:e9:
24:48:61:53:12:d4:39:43:9f:f0:51:2a:47:76:bf:e8:cc:18:
f2:8a:d2:26:e9:64:c7:d8:fd:a3:f7:3c:ad:02:48:e5:2e:8e:
4b:bb:16:2c:ef:89:72:9b:e3:ec:35:d0:9e:bf:5f:85:5c:17:
bd:b3:2a:03:d9:37:08:32:d7:b5:fc:cb:e7:68:2d:a6:59:37:
4b:d7:6d:60:0c:88:a0:7c:3a:61:78:07:ee:ae:e1:6b:a4:25:
1d:1d:c7:0a:f3:4e:d6:07:f5:d3:c1:ae:b6:f5:fd:f9:68:58:
33:a9:86:d5:0b:58:19:64:f9:ed:7f:09:95:a0:d0:d8:45:19:
85:bc:9a:11:da:f2:d1:36:5a:94:8a:bf:20:39:91:b0:d2:22:
3e:91:6b:a7:96:f6:ea:b3:e7:ed:d4:41:db:40:be:a9:ca:3f:
53:f6:b6:88
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYTf1Z75YEXUD2XUveH2gVt9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjA1MDExMDI5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTcxM2YwY2Q2ZDAzOTU5YTQ5NWNiYWI3NjJlZmE1NDlkMzJhZGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcj2N9e/xolqJImJ/ANp3l1xYPw8
MXX9STHKpzguWSM8wV7dCUs6/IO2cE8IyekkrjlTMk3M7py9VIOTYJ6d3U5H/iPa
Kt+pN212TTdVu8XXIEV5WNxJYzn5S1kljSwyLP7qf0ykZG5lHi2ZKYIfmsuV0xLF
ANNzEb/Cy0PpiJxU3mK33CMjCBSi/2bYe2sRAglWDLum8EEmWHhKiQsSbrLuibrw
z7LWAhZkTzURg5JYqiwFzAwPiK3TPpEWgIIDN+hf15ik1lcDjvrUXzP5HqEHGycL
bIsL7znoNjMg17fLP2cU+lKI/SI7MiiWlJVeBF5AvxG4yN3cagtTDTAwPwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGpxPwzW0DlZpJXLq3Yu+lSdMq33MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvYW5FX0ROYlFPVm1rbGN1cmRpNzZWSjB5cmZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJ9M/So8tkhW3dphgQGF
Qa23okUDM5BjIzGtPnpLaqyb5FH0caHnTqpJ28GaI8ExqUrOXRRUo9VxLaUoTf2X
jUXKqNNE4z7i9n0VoMIWj+jJj7LuDcAAb9za6SRIYVMS1DlDn/BRKkd2v+jMGPKK
0ibpZMfY/aP3PK0CSOUujku7FizviXKb4+w10J6/X4VcF72zKgPZNwgy17X8y+do
LaZZN0vXbWAMiKB8OmF4B+6u4WukJR0dxwrzTtYH9dPBrrb1/floWDOphtULWBlk
+e1/CZWg0NhFGYW8mhHa8tE2WpSKvyA5kbDSIj6Ra6eW9uqz5+3UQdtAvqnKP1P2
tog=
-----END CERTIFICATE-----
Generated at Wed Apr 30 18:09:39 2025 by rpki-client