Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b0rGfwAu_MLU_oNZJUqAk-fna7o.roa
File: b0rGfwAu_MLU_oNZJUqAk-fna7o.roa (raw, json)
Hash identifier: YSAd6BNglxodsV1itnTMgP3EBxa9Ly9u/GAxqAkTERo=
Subject key identifier: 6F:4A:C6:7F:00:2E:FC:C2:D4:FE:83:59:25:4A:80:93:E7:E7:6B:BA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185BA4106A8BA85C72408E4AE19E9D5768C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b0rGfwAu_MLU_oNZJUqAk-fna7o.roa
Signing time: Mon 16 Jan 2023 11:05:01 +0000
ROA not before: Mon 16 Jan 2023 11:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:ba40:6692/128 maxlen: 128
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ba:41:06:a8:ba:85:c7:24:08:e4:ae:19:e9:d5:76:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 16 11:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f4ac67f002efcc2d4fe8359254a8093e7e76bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:bf:3c:37:08:22:44:6c:49:2b:47:ff:4f:62:
03:21:36:30:ec:25:e9:e6:02:ad:de:b3:57:ba:4d:
02:ec:03:07:c6:a2:e6:be:e3:49:87:c3:ea:e6:28:
75:06:45:4e:82:46:ae:69:2f:e1:af:de:10:8b:2a:
2c:4c:eb:c6:1e:28:be:3b:7d:dc:35:c9:5c:31:bc:
15:43:6a:1c:a4:e8:81:a4:5b:c1:dd:88:a0:65:97:
f1:b6:ce:5e:e1:3e:b3:ae:32:18:71:03:58:3a:a2:
7c:39:ca:9c:a2:b1:ab:19:39:b3:48:81:79:12:90:
96:b9:a6:dc:5d:83:04:77:ca:54:d6:f4:05:1f:71:
42:27:c3:43:9e:8b:59:43:d1:54:89:6a:6a:08:0d:
6a:17:d1:e5:c4:44:91:be:2a:29:12:66:32:61:dd:
3d:34:1c:e3:5a:53:8f:ab:a2:7e:3f:65:df:2c:0b:
71:1d:6e:5f:6c:b5:07:a6:70:1a:37:7c:3d:3a:94:
72:89:17:70:a3:05:5c:8c:29:1e:d6:fd:71:b2:9d:
98:79:c5:c2:19:9b:9d:93:0d:ca:c9:7d:73:39:29:
25:ed:e5:9f:bc:04:ac:ed:9a:f7:20:c1:41:12:90:
39:d9:1a:61:31:29:50:7c:29:db:d7:c2:c7:8e:21:
73:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:4A:C6:7F:00:2E:FC:C2:D4:FE:83:59:25:4A:80:93:E7:E7:6B:BA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b0rGfwAu_MLU_oNZJUqAk-fna7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a4:59:b1:73:d1:52:a9:69:f1:18:20:a9:d1:68:c9:b4:dc:77:
e9:c2:d2:1b:18:fa:3e:e1:b5:5a:72:18:ea:52:67:34:60:de:
cd:32:88:30:47:93:22:23:9e:b9:ac:a5:a1:77:bb:63:df:c6:
72:8e:30:77:13:6a:3e:f3:f7:93:25:f5:af:e1:44:30:74:fa:
fc:29:d3:13:6d:46:79:4e:eb:9a:0a:64:d9:11:90:38:ff:5b:
54:a3:dc:8e:cf:23:33:f7:99:03:c0:fc:3e:72:da:ab:41:79:
b5:88:04:7d:e6:94:c8:30:78:34:a0:a7:ea:86:ef:d7:66:d1:
da:8b:a4:3d:3a:ff:d4:c1:63:e3:a3:58:7c:ad:cd:87:c3:a7:
03:ff:c1:86:2c:85:6b:ce:2a:07:68:4a:b7:d0:7a:c3:3c:a1:
06:be:78:66:6d:4a:bc:00:01:d2:53:db:8f:7e:76:fe:a8:59:
a3:c3:51:2e:d9:ba:a8:9e:75:dd:7e:1e:12:a1:59:89:9a:da:
2a:11:b3:df:22:1b:fa:a3:0d:5d:51:d6:38:5b:55:ca:db:33:
a2:30:83:85:ec:49:aa:96:18:e2:73:c1:72:71:ba:36:f3:de:
8c:86:35:2e:a5:81:08:41:3e:7b:29:af:7b:b4:5b:29:b1:3d:
c3:b5:b0:d3
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYW6QQaouoXHJAjkrhnp1XaMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTE2MTEwNTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZjRhYzY3ZjAwMmVmY2MyZDRmZTgzNTkyNTRhODA5M2U3ZTc2YmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjr88NwgiRGxJK0f/T2IDITYw7CXp
5gKt3rNXuk0C7AMHxqLmvuNJh8Pq5ih1BkVOgkauaS/hr94QiyosTOvGHii+O33c
NclcMbwVQ2ocpOiBpFvB3YigZZfxts5e4T6zrjIYcQNYOqJ8OcqcorGrGTmzSIF5
EpCWuabcXYMEd8pU1vQFH3FCJ8NDnotZQ9FUiWpqCA1qF9HlxESRviopEmYyYd09
NBzjWlOPq6J+P2XfLAtxHW5fbLUHpnAaN3w9OpRyiRdwowVcjCke1v1xsp2YecXC
GZudkw3KyX1zOSkl7eWfvASs7Zr3IMFBEpA52RphMSlQfCnb18LHjiFzwQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFG9Kxn8ALvzC1P6DWSVKgJPn52u6MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvYjByR2Z3QXVfTUxVX29OWkpVcUFrLWZuYTdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKRZsXPRUqlp8RggqdFo
ybTcd+nC0hsY+j7htVpyGOpSZzRg3s0yiDBHkyIjnrmspaF3u2PfxnKOMHcTaj7z
95Ml9a/hRDB0+vwp0xNtRnlO65oKZNkRkDj/W1Sj3I7PIzP3mQPA/D5y2qtBebWI
BH3mlMgweDSgp+qG79dm0dqLpD06/9TBY+OjWHytzYfDpwP/wYYshWvOKgdoSrfQ
esM8oQa+eGZtSrwAAdJT249+dv6oWaPDUS7Zuqiedd1+HhKhWYma2ioRs98iG/qj
DV1R1jhbVcrbM6Iwg4XsSaqWGOJzwXJxujbz3oyGNS6lgQhBPnspr3u0WymxPcO1
sNM=
-----END CERTIFICATE-----
Generated at Wed Apr 30 18:46:19 2025 by rpki-client