Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b0cseZnIAZtfe3dXmLLyceY3rxM.roa
File: b0cseZnIAZtfe3dXmLLyceY3rxM.roa (raw, json)
Hash identifier: Q9JewiHr9PWvVGJ/nLO72APAUimo+w5he2cqfFQBUbc=
Subject key identifier: 6F:47:2C:79:99:C8:01:9B:5F:7B:77:57:98:B2:F2:71:E6:37:AF:13
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01865722A26C4FD8345774BFA9A32C35FA85
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b0cseZnIAZtfe3dXmLLyceY3rxM.roa
Signing time: Wed 15 Feb 2023 22:12:12 +0000
ROA not before: Wed 15 Feb 2023 22:12:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:57:22:a2:6c:4f:d8:34:57:74:bf:a9:a3:2c:35:fa:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 15 22:12:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f472c7999c8019b5f7b775798b2f271e637af13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:96:de:d8:ec:89:6a:fc:77:57:6a:a8:25:d0:
29:bd:dd:66:9b:12:42:ed:12:bb:8f:36:36:6f:55:
30:90:6b:5f:e0:f5:a0:59:c4:97:5f:5f:9f:42:8b:
89:4f:1d:60:b2:fb:65:5e:c6:ba:3f:28:67:df:af:
1f:46:57:6a:9e:e3:d3:74:f1:53:98:4f:bb:39:54:
f1:31:9a:e6:6a:d0:91:16:c7:03:4d:64:56:90:28:
47:ac:0a:9f:ac:91:e7:7a:e9:7e:c9:70:1c:4c:99:
a5:a3:46:56:d8:d3:90:b4:a6:05:2e:e8:a7:fe:7e:
29:2f:fd:72:75:ad:02:0f:90:f0:d1:4e:b9:4e:39:
04:eb:a5:ac:c7:89:83:8a:f2:75:1a:27:0d:ad:6f:
0b:92:61:d9:5a:78:4f:3d:4f:54:5c:a4:ee:8b:d1:
46:c8:d2:85:2d:b9:3b:f6:55:52:e5:a9:9d:ab:16:
c4:5c:2b:53:93:2a:75:e1:7d:a5:05:bf:ba:23:21:
f0:f5:76:02:0a:19:e9:4c:7e:d6:a8:b9:c0:6c:a8:
57:53:62:68:39:36:5d:0c:1f:89:91:fe:98:d1:0f:
aa:ca:f0:81:ab:5e:b4:ef:07:37:08:33:ff:a3:d4:
ba:b2:a2:a2:50:b2:0a:8f:6d:6a:59:1e:2b:a5:24:
06:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:47:2C:79:99:C8:01:9B:5F:7B:77:57:98:B2:F2:71:E6:37:AF:13
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b0cseZnIAZtfe3dXmLLyceY3rxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5a:9f:eb:e7:af:f1:4c:1b:96:7b:4b:59:0c:e9:77:f5:d3:9f:
66:72:aa:df:82:fc:b9:c1:9d:78:76:ce:ac:d4:e9:4d:18:16:
e9:d1:ae:99:ab:7b:78:18:16:f4:6f:d6:58:f3:8a:32:c1:72:
be:94:b0:13:1f:af:8e:84:f1:cd:d2:7e:1e:d6:70:de:5e:7f:
17:e0:4f:20:9d:3a:d3:7c:0d:d6:7f:6e:26:44:ee:d3:35:41:
70:c8:8d:82:ab:fb:4c:80:68:20:78:e9:93:8f:6c:f6:47:12:
9a:26:b9:cf:6b:ce:ce:ad:2f:3d:96:15:68:06:63:52:b0:61:
35:68:dc:fc:12:53:c0:a9:01:70:4b:84:32:26:b2:ad:f1:af:
bf:43:e2:78:9d:49:72:82:e5:d7:92:bd:4e:2e:8a:97:42:a1:
de:f8:c1:45:61:40:83:43:d0:ef:b7:5e:37:06:98:fe:c2:b3:
ba:eb:87:0a:f6:fe:dd:37:78:80:c2:07:44:24:7c:b3:dd:73:
eb:e6:d7:c5:a8:78:cb:4e:6e:37:9a:99:0f:1e:20:5f:1a:f7:
26:fb:71:23:17:62:07:de:b3:c8:0d:3a:1c:ad:b6:43:4d:2c:
58:c6:69:d7:73:c5:89:bb:dc:59:af:b9:e0:2e:86:59:eb:ba:
3b:86:f6:a1
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYZXIqJsT9g0V3S/qaMsNfqFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjE1MjIxMjEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZjQ3MmM3OTk5YzgwMTliNWY3Yjc3NTc5OGIyZjI3MWU2MzdhZjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpbe2OyJavx3V2qoJdApvd1mmxJC
7RK7jzY2b1UwkGtf4PWgWcSXX1+fQouJTx1gsvtlXsa6Pyhn368fRldqnuPTdPFT
mE+7OVTxMZrmatCRFscDTWRWkChHrAqfrJHneul+yXAcTJmlo0ZW2NOQtKYFLuin
/n4pL/1yda0CD5Dw0U65TjkE66Wsx4mDivJ1GicNrW8LkmHZWnhPPU9UXKTui9FG
yNKFLbk79lVS5amdqxbEXCtTkyp14X2lBb+6IyHw9XYCChnpTH7WqLnAbKhXU2Jo
OTZdDB+Jkf6Y0Q+qyvCBq1607wc3CDP/o9S6sqKiULIKj21qWR4rpSQG9wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFG9HLHmZyAGbX3t3V5iy8nHmN68TMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvYjBjc2VabklBWnRmZTNkWG1MTHljZVkzcnhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFqf6+ev8UwblntLWQzp
d/XTn2Zyqt+C/LnBnXh2zqzU6U0YFunRrpmre3gYFvRv1ljzijLBcr6UsBMfr46E
8c3Sfh7WcN5efxfgTyCdOtN8DdZ/biZE7tM1QXDIjYKr+0yAaCB46ZOPbPZHEpom
uc9rzs6tLz2WFWgGY1KwYTVo3PwSU8CpAXBLhDImsq3xr79D4nidSXKC5deSvU4u
ipdCod74wUVhQIND0O+3XjcGmP7Cs7rrhwr2/t03eIDCB0QkfLPdc+vm18WoeMtO
bjeamQ8eIF8a9yb7cSMXYgfes8gNOhyttkNNLFjGaddzxYm73FmvueAuhlnrujuG
9qE=
-----END CERTIFICATE-----
Generated at Thu May 1 01:21:35 2025 by rpki-client