Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dU0P30iRiN7mZuA3lNmumwloDx0.roa
File: dU0P30iRiN7mZuA3lNmumwloDx0.roa (raw, json)
Hash identifier: jvmKLTcrhJIV0moGU+DDLFyTY6ynrjqVS/NgjGOhhfc=
Subject key identifier: 75:4D:0F:DF:48:91:88:DE:E6:66:E0:37:94:D9:AE:9B:09:68:0F:1D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8B0E3C4B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dU0P30iRiN7mZuA3lNmumwloDx0.roa
Signing time: Wed 08 Jun 2022 17:11:02 +0000
ROA not before: Wed 08 Jun 2022 17:11:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2332965963 (0x8b0e3c4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 8 17:11:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=754d0fdf489188dee666e03794d9ae9b09680f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b2:a6:af:51:5f:1e:52:bc:76:f5:cd:24:c4:
32:87:27:05:f2:08:aa:47:f5:a6:e1:91:05:07:e6:
e7:0c:ea:a3:84:b9:62:3e:3f:6f:14:db:af:13:a4:
56:e0:b1:de:78:c4:46:79:1f:64:fd:a6:21:d8:87:
4b:1f:40:a8:83:13:27:17:da:6b:2c:db:56:46:32:
ef:4c:e2:b7:e5:07:64:fc:de:65:fd:e4:a3:eb:e1:
a4:57:5f:70:b7:f5:98:61:98:81:09:f2:a8:58:43:
d6:4b:84:22:54:4b:4c:58:cf:94:d9:9e:26:d8:ce:
01:9a:f0:a4:47:a7:2f:c4:60:3e:f5:b0:1a:c3:6c:
e8:06:ce:f6:a1:74:2d:72:5d:c0:b0:a8:75:26:f3:
11:50:f5:5f:b7:7c:b1:3e:34:c5:83:90:d5:2a:ac:
26:13:8c:65:0c:13:c3:0e:99:bf:f3:59:b6:da:34:
94:9e:70:c3:7d:14:bc:c9:36:54:98:a9:eb:2f:b5:
3b:68:17:da:72:67:8b:fb:4f:c7:97:3a:7d:df:f4:
0b:de:f2:76:f3:de:68:3d:57:c1:47:a4:25:73:0f:
84:50:a3:1b:0b:44:9f:76:be:23:da:e0:2f:b7:5e:
35:6d:18:b8:c2:48:cf:a5:eb:07:a0:5f:2b:e5:1c:
fe:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:4D:0F:DF:48:91:88:DE:E6:66:E0:37:94:D9:AE:9B:09:68:0F:1D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dU0P30iRiN7mZuA3lNmumwloDx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
17:eb:a1:c2:9d:f9:ae:69:a5:0c:99:40:cf:76:95:34:21:03:
02:67:c3:a5:49:80:9d:3f:d4:0b:01:58:e2:87:c5:96:47:78:
8d:bd:bd:74:74:cf:0b:13:5d:cf:d4:31:5a:b7:4c:2e:11:a6:
37:fe:c1:4e:28:86:02:96:3e:d2:02:f3:46:9e:41:a9:78:f8:
12:f9:8d:14:9e:95:b5:e9:f3:1b:2e:d3:1b:ca:2a:35:11:28:
00:87:75:73:c4:d7:c3:2c:ad:10:87:48:e7:e8:bc:83:ea:4e:
d0:21:cf:73:d2:06:3f:75:08:5e:76:70:87:1d:d8:7c:7a:22:
6b:ce:f6:1c:a8:19:55:c8:05:c9:6f:26:e5:0b:15:96:e5:b1:
10:82:d2:7c:16:5a:40:fb:1a:cd:53:e2:9b:8a:d4:16:2b:2f:
82:64:10:46:da:a7:15:3d:5b:ab:76:8a:a9:2b:8c:f1:17:42:
f5:ef:8d:02:71:e7:90:16:92:2a:26:62:3d:75:81:bb:1a:c6:
af:de:f0:8d:60:49:41:d0:41:18:48:6b:cb:e8:1c:52:90:d2:
d3:70:a9:e6:5f:e0:2d:4a:0d:a0:2d:88:8f:5f:1e:e8:5d:50:
d9:05:52:7b:0b:bf:7e:85:24:85:2f:fe:b3:ba:08:5c:bc:c5:
2b:3b:59:a4
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAIsOPEswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA2
MDgxNzExMDJaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDc1NGQwZmRmNDg5
MTg4ZGVlNjY2ZTAzNzk0ZDlhZTliMDk2ODBmMWQwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCasqavUV8eUrx29c0kxDKHJwXyCKpH9abhkQUH5ucM6qOE
uWI+P28U268TpFbgsd54xEZ5H2T9piHYh0sfQKiDEycX2mss21ZGMu9M4rflB2T8
3mX95KPr4aRXX3C39ZhhmIEJ8qhYQ9ZLhCJUS0xYz5TZnibYzgGa8KRHpy/EYD71
sBrDbOgGzvahdC1yXcCwqHUm8xFQ9V+3fLE+NMWDkNUqrCYTjGUME8MOmb/zWbba
NJSecMN9FLzJNlSYqesvtTtoF9pyZ4v7T8eXOn3f9Ave8nbz3mg9V8FHpCVzD4RQ
oxsLRJ92viPa4C+3XjVtGLjCSM+l6wegXyvlHP7/AgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQUdU0P30iRiN7mZuA3lNmumwloDx0wHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS9kVTBQMzBpUmlON21adUEzbE5tdW13bG9EeDAucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEAF+uhwp35rmmlDJlAz3aVNCEDAmfDpUmAnT/U
CwFY4ofFlkd4jb29dHTPCxNdz9QxWrdMLhGmN/7BTiiGApY+0gLzRp5BqXj4EvmN
FJ6VtenzGy7TG8oqNREoAId1c8TXwyytEIdI5+i8g+pO0CHPc9IGP3UIXnZwhx3Y
fHoia872HKgZVcgFyW8m5QsVluWxEILSfBZaQPsazVPim4rUFisvgmQQRtqnFT1b
q3aKqSuM8RdC9e+NAnHnkBaSKiZiPXWBuxrGr97wjWBJQdBBGEhry+gcUpDS03Cp
5l/gLUoNoC2Ij18e6F1Q2QVSewu/foUkhS/+s7oIXLzFKztZpA==
-----END CERTIFICATE-----
Generated at Tue May 6 02:20:37 2025 by rpki-client