Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgmVh4QbBEh0zBKgN6ilcteqr5Y.roa
File: cgmVh4QbBEh0zBKgN6ilcteqr5Y.roa (raw, json)
Hash identifier: Sucmg12AwfCy9KwlSRn2s706zRZAS+nsmmkAUsZr6G4=
Subject key identifier: 72:09:95:87:84:1B:04:48:74:CC:12:A0:37:A8:A5:72:D7:AA:AF:96
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01855FEA813723B63D93979047466AE02020
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgmVh4QbBEh0zBKgN6ilcteqr5Y.roa
Signing time: Thu 29 Dec 2022 22:04:42 +0000
ROA not before: Thu 29 Dec 2022 22:04:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:5fea:1dbe/128 maxlen: 128
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5f:ea:81:37:23:b6:3d:93:97:90:47:46:6a:e0:20:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 29 22:04:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=72099587841b044874cc12a037a8a572d7aaaf96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a0:b0:58:3b:b3:7e:bf:59:b7:06:68:b4:9a:
60:2f:05:6d:56:f7:7b:a7:df:d8:41:c3:a9:c0:e0:
3a:e0:60:c3:20:da:d2:f6:7d:6d:58:c3:e5:58:e6:
88:78:20:3e:36:cd:4e:24:05:0c:e9:7f:da:af:26:
65:4c:70:f9:5c:e3:5f:51:14:1f:65:9e:44:d6:79:
2b:af:2f:08:54:7f:d3:d8:f3:8d:33:33:7d:ee:0f:
a7:99:e3:4f:8d:3b:23:8f:cd:e8:67:bf:a1:f3:ac:
a8:d6:dc:8e:3f:a3:31:da:55:c6:36:bb:e9:f7:78:
bd:0e:56:dc:85:1e:3a:87:2a:0b:8f:a1:50:e3:4b:
31:38:7e:85:82:1c:84:8c:47:f6:bf:86:ac:0b:19:
59:35:51:3c:1c:a9:84:b0:66:01:7c:3b:56:93:06:
34:c7:b4:d5:7d:23:d4:69:46:20:39:3c:77:74:a8:
ce:27:75:48:47:32:4c:e8:41:7e:af:5e:74:fe:a9:
69:63:89:11:21:15:23:be:c5:4a:08:2c:27:b6:00:
59:80:b4:06:6d:9b:e0:56:46:01:cc:4a:c5:f2:0b:
1c:70:65:2f:df:5a:45:ad:6f:12:6b:4f:82:48:5a:
61:2e:04:d7:b6:e0:07:2c:47:8d:53:06:66:e4:68:
a8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:09:95:87:84:1B:04:48:74:CC:12:A0:37:A8:A5:72:D7:AA:AF:96
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgmVh4QbBEh0zBKgN6ilcteqr5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9b:4c:22:09:66:43:fa:d6:65:17:56:fc:ba:9e:b1:05:bf:42:
cd:46:3f:24:ec:0c:30:9b:ec:79:a5:0b:5a:b1:c0:ce:30:6a:
ea:42:a6:70:c3:3c:c5:dd:26:86:e5:a3:3f:b1:48:e9:7a:f2:
90:9e:aa:11:e0:c8:e0:51:e1:76:98:de:03:d3:d7:63:41:94:
32:4f:f3:28:26:01:ad:7d:1c:49:25:c9:9b:5d:97:00:b4:69:
33:46:10:b8:6a:8e:4e:fc:e3:7e:17:57:37:fe:a2:4a:cb:6e:
7d:54:82:48:65:7b:2e:b5:7f:a4:20:e6:41:9b:d6:80:0d:0e:
61:ed:11:fe:39:f6:d7:e5:8a:44:a2:80:36:08:35:f0:7a:64:
b9:d7:40:3d:c7:23:ec:ca:8b:fc:17:7a:07:f0:41:b3:24:bc:
57:85:d3:e2:54:bd:55:1e:51:0f:84:dc:37:77:0e:50:fe:ab:
2d:60:bd:34:78:d0:ed:02:62:f1:83:fe:5c:60:ca:b6:0c:e8:
e0:ce:92:a2:6b:5c:64:69:1a:5a:98:3b:bf:5b:32:1e:41:5a:
0e:38:4a:66:5f:74:3b:1f:05:81:da:47:27:00:13:3b:84:3b:
80:45:dd:09:02:e4:48:68:b5:17:da:73:de:f6:91:5e:43:df:
39:26:56:7a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVf6oE3I7Y9k5eQR0Zq4CAgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjI5MjIwNDQyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MjA5OTU4Nzg0MWIwNDQ4NzRjYzEyYTAzN2E4YTU3MmQ3YWFhZjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKCwWDuzfr9ZtwZotJpgLwVtVvd7
p9/YQcOpwOA64GDDINrS9n1tWMPlWOaIeCA+Ns1OJAUM6X/aryZlTHD5XONfURQf
ZZ5E1nkrry8IVH/T2PONMzN97g+nmeNPjTsjj83oZ7+h86yo1tyOP6Mx2lXGNrvp
93i9DlbchR46hyoLj6FQ40sxOH6FghyEjEf2v4asCxlZNVE8HKmEsGYBfDtWkwY0
x7TVfSPUaUYgOTx3dKjOJ3VIRzJM6EF+r150/qlpY4kRIRUjvsVKCCwntgBZgLQG
bZvgVkYBzErF8gsccGUv31pFrW8Sa0+CSFphLgTXtuAHLEeNUwZm5GioiwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHIJlYeEGwRIdMwSoDeopXLXqq+WMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvY2dtVmg0UWJCRWgwekJLZ042aWxjdGVxcjVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJtMIglmQ/rWZRdW/Lqe
sQW/Qs1GPyTsDDCb7HmlC1qxwM4waupCpnDDPMXdJobloz+xSOl68pCeqhHgyOBR
4XaY3gPT12NBlDJP8ygmAa19HEklyZtdlwC0aTNGELhqjk78434XVzf+okrLbn1U
gkhley61f6Qg5kGb1oANDmHtEf459tflikSigDYINfB6ZLnXQD3HI+zKi/wXegfw
QbMkvFeF0+JUvVUeUQ+E3Dd3DlD+qy1gvTR40O0CYvGD/lxgyrYM6ODOkqJrXGRp
GlqYO79bMh5BWg44SmZfdDsfBYHaRycAEzuEO4BF3QkC5EhotRfac972kV5D3zkm
Vno=
-----END CERTIFICATE-----
Generated at Wed Apr 30 22:12:59 2025 by rpki-client