Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d69stfrg1CgtzDJ8QjsGJ-wIu3s.roa
File: d69stfrg1CgtzDJ8QjsGJ-wIu3s.roa (raw, json)
Hash identifier: g9dne5r72pkIRuDQLl9wf582SuVezpPDpHElTRhNNsU=
Subject key identifier: 77:AF:6C:B5:FA:E0:D4:28:2D:CC:32:7C:42:3B:06:27:EC:08:BB:7B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 83BC410B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d69stfrg1CgtzDJ8QjsGJ-wIu3s.roa
Signing time: Fri 13 May 2022 18:08:41 +0000
ROA not before: Fri 13 May 2022 18:08:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2210152715 (0x83bc410b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 13 18:08:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=77af6cb5fae0d4282dcc327c423b0627ec08bb7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1d:ec:fd:1f:ef:cb:70:19:44:29:9b:95:c0:
a4:4d:3f:96:c4:5f:c0:93:42:97:9e:95:20:65:24:
e1:86:9b:40:59:e9:82:7f:d1:7d:42:c1:3e:fe:f8:
11:29:3d:60:c5:75:0d:ad:cd:64:96:57:f0:f7:c7:
a6:b8:05:23:43:cc:ec:7c:89:cd:c3:e4:26:d5:a7:
93:16:d1:01:a8:bf:b3:83:cf:55:0a:41:ee:7b:ba:
af:91:dd:10:46:db:ef:48:cc:a4:c5:cb:55:b6:61:
51:73:01:92:20:4a:b4:b7:18:bd:ff:fe:b8:cf:22:
35:a8:18:bf:c8:5e:0a:ff:1a:f7:91:ff:7b:8a:44:
66:e9:a9:b6:54:de:67:e4:15:9a:8f:4f:31:11:a1:
59:a0:de:f5:25:22:62:ea:20:27:ee:3b:25:ca:8a:
a5:63:8d:5b:e9:69:2e:4a:85:fa:2c:69:3a:ed:56:
b8:25:b6:8e:48:43:d0:5d:1f:9f:a8:53:be:5e:bd:
85:e7:28:15:0a:f1:21:20:bf:e7:e3:8c:07:24:82:
74:9d:91:cc:d9:a3:62:b8:37:bf:3b:fb:fe:6e:d0:
2e:b6:82:63:3c:82:d7:d0:9b:68:79:a4:c0:2b:96:
1e:f5:a8:5e:39:9b:9f:ce:6b:46:22:bf:ec:04:a4:
1a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:AF:6C:B5:FA:E0:D4:28:2D:CC:32:7C:42:3B:06:27:EC:08:BB:7B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d69stfrg1CgtzDJ8QjsGJ-wIu3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
67:14:0b:81:1e:7f:5c:63:93:ac:94:fa:f7:5c:02:59:35:bd:
99:27:ce:8f:eb:3a:97:7a:4c:5d:77:1b:a7:02:6b:e5:aa:39:
61:a8:fb:85:2d:8a:75:34:88:61:39:8c:c1:4c:63:9f:e3:7d:
28:e9:83:fe:31:f1:9d:3d:8c:df:ca:b0:59:8d:00:0d:3b:3e:
51:ef:e3:54:00:f7:53:80:77:1c:e7:da:fd:dd:bc:8f:fe:2e:
cd:98:65:77:e0:3b:05:c5:bf:41:06:a9:cf:60:9c:ea:91:d7:
82:2f:c1:c2:95:7a:b6:72:e3:4b:88:a9:e9:0d:0d:03:05:a8:
eb:aa:78:c3:68:55:03:21:b3:86:d8:d9:99:e9:02:e0:e5:41:
f4:02:67:d1:c3:83:f9:27:77:0b:67:9a:30:cf:17:c5:4a:91:
a1:3a:42:76:84:14:6d:8f:2c:98:7a:33:14:bc:6b:1c:44:47:
44:16:81:6a:b0:07:fa:0c:58:88:a5:0d:6b:33:06:88:c0:d6:
8c:6d:16:5b:24:3a:b4:b4:2a:f0:36:5f:06:c1:8d:b9:90:57:
8c:a8:58:53:56:26:5d:58:cd:db:0b:c1:07:c4:11:27:47:00:
d4:b2:2f:73:dc:7b:9f:eb:93:45:27:72:78:58:eb:e8:a2:23:
5f:ed:04:65
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAIO8QQswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA1
MTMxODA4NDFaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDc3YWY2Y2I1ZmFl
MGQ0MjgyZGNjMzI3YzQyM2IwNjI3ZWMwOGJiN2IwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDOHez9H+/LcBlEKZuVwKRNP5bEX8CTQpeelSBlJOGGm0BZ
6YJ/0X1CwT7++BEpPWDFdQ2tzWSWV/D3x6a4BSNDzOx8ic3D5CbVp5MW0QGov7OD
z1UKQe57uq+R3RBG2+9IzKTFy1W2YVFzAZIgSrS3GL3//rjPIjWoGL/IXgr/GveR
/3uKRGbpqbZU3mfkFZqPTzERoVmg3vUlImLqICfuOyXKiqVjjVvpaS5KhfosaTrt
Vrglto5IQ9BdH5+oU75evYXnKBUK8SEgv+fjjAckgnSdkczZo2K4N787+/5u0C62
gmM8gtfQm2h5pMArlh71qF45m5/Oa0Yiv+wEpBqXAgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQUd69stfrg1CgtzDJ8QjsGJ+wIu3swHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS9kNjlzdGZyZzFDZ3R6REo4UWpzR0otd0l1M3Mucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEAZxQLgR5/XGOTrJT691wCWTW9mSfOj+s6l3pM
XXcbpwJr5ao5Yaj7hS2KdTSIYTmMwUxjn+N9KOmD/jHxnT2M38qwWY0ADTs+Ue/j
VAD3U4B3HOfa/d28j/4uzZhld+A7BcW/QQapz2Cc6pHXgi/BwpV6tnLjS4ip6Q0N
AwWo66p4w2hVAyGzhtjZmekC4OVB9AJn0cOD+Sd3C2eaMM8XxUqRoTpCdoQUbY8s
mHozFLxrHERHRBaBarAH+gxYiKUNazMGiMDWjG0WWyQ6tLQq8DZfBsGNuZBXjKhY
U1YmXVjN2wvBB8QRJ0cA1LIvc9x7n+uTRSdyeFjr6KIjX+0EZQ==
-----END CERTIFICATE-----
Generated at Thu May 1 03:24:16 2025 by rpki-client