Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/atgXOYfaYzRjlc8D4OfsWLCAy_8.roa
File: atgXOYfaYzRjlc8D4OfsWLCAy_8.roa (raw, json)
Hash identifier: K7lElR2szEu6q45b1TqEYJ6Vp6gODuOjtYvmp+pnBhM=
Subject key identifier: 6A:D8:17:39:87:DA:63:34:63:95:CF:03:E0:E7:EC:58:B0:80:CB:FF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01869370730BA7DB39774B3B305CC7F3EEEB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/atgXOYfaYzRjlc8D4OfsWLCAy_8.roa
Signing time: Mon 27 Feb 2023 15:14:25 +0000
ROA not before: Mon 27 Feb 2023 15:14:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:93:70:73:0b:a7:db:39:77:4b:3b:30:5c:c7:f3:ee:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 27 15:14:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ad8173987da63346395cf03e0e7ec58b080cbff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d8:d7:b0:07:17:0c:ea:1f:3e:20:e0:90:02:
09:84:78:d7:8f:75:db:bf:31:14:30:cd:c4:22:82:
4a:7c:a0:58:cc:81:8f:ca:b8:7b:31:30:40:62:92:
7f:a1:5f:f2:34:fa:fd:fc:5d:46:8c:1b:fb:86:ff:
88:54:71:2d:3f:cf:24:68:74:c6:ba:49:9c:61:c9:
8d:06:be:37:09:6d:e4:78:8e:1d:f1:e5:cc:f5:b1:
75:05:70:01:29:54:e1:c9:71:ff:af:9d:c2:75:6d:
d3:72:4a:ba:3b:dd:b3:4a:86:52:e3:05:22:5f:87:
77:ae:80:47:f2:be:02:71:ee:32:2a:cd:6e:f9:e6:
da:4c:b6:4e:65:5d:f7:36:18:fb:32:9e:7e:2c:e7:
39:ce:73:39:58:85:b3:42:98:a8:03:59:bf:da:32:
fb:c7:96:da:48:59:69:85:d3:22:cb:6e:87:bc:e4:
68:b5:1e:3b:ef:08:db:2d:aa:35:b0:b2:27:0a:6a:
f2:2d:db:b0:6c:72:e3:fe:7d:dd:75:1e:8d:b4:9b:
82:ec:b9:b6:67:ee:68:58:76:6c:de:91:b2:24:38:
fc:61:85:5e:ce:ea:27:29:fe:6b:62:00:67:d5:6b:
a4:36:ba:eb:91:73:ed:24:ba:fa:47:5a:42:c9:50:
2c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D8:17:39:87:DA:63:34:63:95:CF:03:E0:E7:EC:58:B0:80:CB:FF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/atgXOYfaYzRjlc8D4OfsWLCAy_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5a:69:7b:11:2c:0e:19:f8:ec:d3:14:f7:7e:05:c9:c6:ca:62:
27:f9:c8:98:b8:34:00:d9:cb:ab:d3:55:5e:c5:c5:c8:14:6f:
3f:50:07:4c:7b:16:09:2f:81:ba:64:ff:6e:b5:3e:3a:a5:8c:
ae:9a:d1:ed:58:65:2c:99:7d:42:82:25:ac:c6:2e:8d:77:00:
8f:bb:38:1d:00:26:f3:d7:3f:89:a5:fb:1c:60:ce:e0:eb:e4:
ab:78:9a:1f:56:9d:6c:d8:62:9b:2b:72:83:26:c1:59:00:cf:
cf:e4:0e:2c:73:d5:72:4d:d7:d6:19:fe:2e:6c:b9:b3:d3:ce:
1f:57:ed:1b:37:8b:c0:17:97:93:13:fa:92:a1:49:fa:b6:dc:
94:7c:7f:1d:22:64:a0:20:d3:6d:12:61:a4:a5:74:c8:16:68:
77:4e:f6:cd:36:82:b5:ad:47:bd:40:10:da:98:14:f7:03:19:
55:1a:88:c6:ef:87:16:97:32:4a:5b:44:93:2e:1a:ac:d1:84:
9e:50:b5:c7:e9:f4:d4:29:96:54:f9:a2:25:e0:36:49:ed:6f:
3a:0a:89:01:d0:7a:27:d7:4f:ae:2c:aa:e9:0c:97:34:45:da:
58:b5:6e:ef:4f:1b:b7:96:24:f1:79:5a:03:dd:5e:77:2e:1b:
a4:81:e3:19
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYaTcHMLp9s5d0s7MFzH8+7rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjI3MTUxNDI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YWQ4MTczOTg3ZGE2MzM0NjM5NWNmMDNlMGU3ZWM1OGIwODBjYmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldjXsAcXDOofPiDgkAIJhHjXj3Xb
vzEUMM3EIoJKfKBYzIGPyrh7MTBAYpJ/oV/yNPr9/F1GjBv7hv+IVHEtP88kaHTG
ukmcYcmNBr43CW3keI4d8eXM9bF1BXABKVThyXH/r53CdW3Tckq6O92zSoZS4wUi
X4d3roBH8r4Cce4yKs1u+ebaTLZOZV33Nhj7Mp5+LOc5znM5WIWzQpioA1m/2jL7
x5baSFlphdMiy26HvORotR477wjbLao1sLInCmryLduwbHLj/n3ddR6NtJuC7Lm2
Z+5oWHZs3pGyJDj8YYVezuonKf5rYgBn1WukNrrrkXPtJLr6R1pCyVAsEQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGrYFzmH2mM0Y5XPA+Dn7FiwgMv/MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvYXRnWE9ZZmFZelJqbGM4RDRPZnNXTENBeV84LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFppexEsDhn47NMU934F
ycbKYif5yJi4NADZy6vTVV7FxcgUbz9QB0x7Fgkvgbpk/261PjqljK6a0e1YZSyZ
fUKCJazGLo13AI+7OB0AJvPXP4ml+xxgzuDr5Kt4mh9WnWzYYpsrcoMmwVkAz8/k
Dixz1XJN19YZ/i5subPTzh9X7Rs3i8AXl5MT+pKhSfq23JR8fx0iZKAg020SYaSl
dMgWaHdO9s02grWtR71AENqYFPcDGVUaiMbvhxaXMkpbRJMuGqzRhJ5Qtcfp9NQp
llT5oiXgNkntbzoKiQHQeifXT64squkMlzRF2li1bu9PG7eWJPF5WgPdXncuG6SB
4xk=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:48 2025 by rpki-client