Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cBxi6ybs7ClJ9McRtVqF24kAm1o.roa
File: cBxi6ybs7ClJ9McRtVqF24kAm1o.roa (raw, json)
Hash identifier: 9m3bYY7s0dkW3wPrtOCgA413X2cUnHwcpsG5Hf0voGw=
Subject key identifier: 70:1C:62:EB:26:EC:EC:29:49:F4:C7:11:B5:5A:85:DB:89:00:9B:5A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01868F5E6AA94C6FADB190982B9A36718053
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cBxi6ybs7ClJ9McRtVqF24kAm1o.roa
Signing time: Sun 26 Feb 2023 20:16:14 +0000
ROA not before: Sun 26 Feb 2023 20:16:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:8f:5e:6a:a9:4c:6f:ad:b1:90:98:2b:9a:36:71:80:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 26 20:16:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=701c62eb26ecec2949f4c711b55a85db89009b5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b2:c3:ee:b8:63:b0:98:41:2b:3f:8a:12:88:
3c:bb:ab:b2:a6:2a:96:6e:f4:f3:d7:44:28:b4:43:
40:fc:27:20:22:46:80:40:ff:be:1f:8e:c6:2c:b5:
30:2a:4d:df:dd:74:a8:ff:df:8f:f3:0e:6c:1f:88:
a8:07:9f:06:77:80:59:0c:8c:80:b7:fa:a3:db:00:
a0:a0:c9:11:07:6b:ef:73:af:76:ac:3a:ba:7f:45:
6e:fa:25:f4:02:7e:50:f3:4f:1c:d7:3b:4b:44:b6:
ff:6b:49:27:b9:41:06:e7:29:05:80:33:d1:62:ba:
28:02:8d:40:01:78:76:6a:5d:00:77:01:14:42:00:
07:18:c7:59:27:4d:f9:aa:6b:bc:cb:31:06:bb:c5:
8a:5d:58:1a:ef:85:0c:9b:2f:ed:54:41:f3:eb:f5:
aa:00:d4:93:21:70:bc:f7:ac:e9:4e:d0:c0:e8:8e:
00:3b:77:72:53:85:66:84:ad:97:ec:cf:21:64:84:
11:5b:0b:83:55:16:07:ed:8b:79:3d:b0:57:dd:6e:
9a:52:b0:06:9e:a0:cc:be:fc:b6:38:71:02:b4:90:
0d:d7:32:32:f8:dc:93:be:a9:3e:8c:5d:c5:fd:51:
3b:e1:75:4c:fd:88:6f:74:4b:43:30:e7:72:50:68:
b7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:1C:62:EB:26:EC:EC:29:49:F4:C7:11:B5:5A:85:DB:89:00:9B:5A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cBxi6ybs7ClJ9McRtVqF24kAm1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b1:f4:af:82:9d:d7:1a:42:26:7f:98:9f:f4:ac:9e:f1:fd:c8:
89:a5:31:f9:fe:d5:93:4d:c6:a0:59:ec:4a:80:2c:1b:45:d7:
50:d8:17:41:04:2a:5a:5b:f8:8b:74:12:cc:77:28:00:7d:78:
3f:f2:7a:d0:bc:27:35:06:1b:fc:e2:7b:f0:59:f9:37:35:a4:
f9:36:a0:a9:2f:da:91:87:e1:23:41:56:2e:38:e2:a0:8f:f8:
be:6c:22:da:62:ad:a9:b4:ca:56:1f:ec:3c:31:31:77:5e:e9:
2f:fc:a4:46:14:93:9f:75:d6:a6:30:2d:3d:21:a3:ea:ef:d2:
d2:c3:13:93:8b:61:6a:1e:42:ef:cb:f9:79:9d:d6:a6:c2:29:
24:6f:07:96:44:2d:0f:c2:c1:43:a4:18:92:e7:63:d3:10:b8:
b8:06:33:4b:78:ed:1e:53:3b:f7:9b:f4:74:10:e5:7d:81:84:
43:16:7b:69:8c:88:d1:0b:82:ed:38:d0:e3:c2:84:b6:0c:5e:
b2:de:19:a6:48:be:ee:76:0c:ab:da:91:f6:63:63:ae:4c:23:
f4:6a:1a:5b:ba:d8:48:43:29:22:7f:59:b5:80:33:32:65:6f:
90:4e:ee:9f:2b:d0:50:58:32:0d:be:cd:3e:c4:ce:97:2c:e7:
1d:85:19:87
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYaPXmqpTG+tsZCYK5o2cYBTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjI2MjAxNjE0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDFjNjJlYjI2ZWNlYzI5NDlmNGM3MTFiNTVhODVkYjg5MDA5YjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7LD7rhjsJhBKz+KEog8u6uypiqW
bvTz10QotENA/CcgIkaAQP++H47GLLUwKk3f3XSo/9+P8w5sH4ioB58Gd4BZDIyA
t/qj2wCgoMkRB2vvc692rDq6f0Vu+iX0An5Q808c1ztLRLb/a0knuUEG5ykFgDPR
YrooAo1AAXh2al0AdwEUQgAHGMdZJ035qmu8yzEGu8WKXVga74UMmy/tVEHz6/Wq
ANSTIXC896zpTtDA6I4AO3dyU4VmhK2X7M8hZIQRWwuDVRYH7Yt5PbBX3W6aUrAG
nqDMvvy2OHECtJAN1zIy+NyTvqk+jF3F/VE74XVM/YhvdEtDMOdyUGi3LQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHAcYusm7OwpSfTHEbVahduJAJtaMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvY0J4aTZ5YnM3Q2xKOU1jUnRWcUYyNGtBbTFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBALH0r4Kd1xpCJn+Yn/Ss
nvH9yImlMfn+1ZNNxqBZ7EqALBtF11DYF0EEKlpb+It0Esx3KAB9eD/yetC8JzUG
G/zie/BZ+Tc1pPk2oKkv2pGH4SNBVi444qCP+L5sItpiram0ylYf7DwxMXde6S/8
pEYUk5911qYwLT0ho+rv0tLDE5OLYWoeQu/L+Xmd1qbCKSRvB5ZELQ/CwUOkGJLn
Y9MQuLgGM0t47R5TO/eb9HQQ5X2BhEMWe2mMiNELgu040OPChLYMXrLeGaZIvu52
DKvakfZjY65MI/RqGlu62EhDKSJ/WbWAMzJlb5BO7p8r0FBYMg2+zT7Ezpcs5x2F
GYc=
-----END CERTIFICATE-----
Generated at Thu May 1 00:41:02 2025 by rpki-client