Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dl-_4iOZ9Ul9S5aq80VjAWEOchY.roa
File: dl-_4iOZ9Ul9S5aq80VjAWEOchY.roa (raw, json)
Hash identifier: v2H34jZAQ2yQvHfH/e64hkx9K/R9YMWmte6qoHm1wNY=
Subject key identifier: 76:5F:BF:E2:23:99:F5:49:7D:4B:96:AA:F3:45:63:01:61:0E:72:16
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8372BDFB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dl-_4iOZ9Ul9S5aq80VjAWEOchY.roa
Signing time: Thu 12 May 2022 19:14:02 +0000
ROA not before: Thu 12 May 2022 19:14:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2205335035 (0x8372bdfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 12 19:14:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=765fbfe22399f5497d4b96aaf3456301610e7216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5b:50:fa:dc:28:25:db:f4:c8:fa:6a:11:8b:
74:e1:86:07:56:3b:98:b8:f1:8a:21:92:9b:e8:93:
be:1d:57:b6:a5:71:58:fa:3e:30:c4:b6:4d:13:e8:
17:9c:da:a4:06:a9:c0:8d:03:eb:d2:26:f1:0a:7b:
b9:28:bd:fc:51:ee:a7:f7:97:ba:8a:39:c2:5d:bf:
0f:19:69:2d:e9:d0:e4:52:d4:2d:15:69:1d:31:f4:
9d:a5:17:cc:88:c9:9a:8d:88:e9:f2:a8:bc:36:9d:
26:c4:e4:0b:f7:1f:4f:23:4c:c0:46:0d:12:b7:f7:
fe:4d:21:8e:ae:ee:dc:6a:2d:3d:5f:aa:78:c8:66:
f3:a9:65:f3:c1:47:62:7d:11:64:bf:87:da:bf:cf:
4a:e3:27:21:78:6f:02:e3:33:18:52:04:ac:27:1f:
d5:ea:51:0b:65:ff:3a:d0:01:e9:b9:a8:ca:04:25:
56:b8:f5:e5:9f:ec:cb:27:1c:c7:58:72:b0:fc:8e:
5d:58:4a:fd:73:93:46:6d:73:85:11:f8:e6:25:e4:
cb:9f:fb:04:a6:10:9d:6a:b2:15:4d:14:26:15:9d:
60:64:4d:72:e8:4c:99:05:aa:fa:93:8e:71:58:03:
95:a6:4a:93:49:db:c2:d3:c1:ef:d7:d5:ba:df:0d:
45:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:5F:BF:E2:23:99:F5:49:7D:4B:96:AA:F3:45:63:01:61:0E:72:16
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dl-_4iOZ9Ul9S5aq80VjAWEOchY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a4:76:9b:8e:9d:66:34:14:d2:e3:96:65:b7:e3:9d:c0:78:cd:
d0:a3:e1:ed:45:61:65:c7:80:ef:3b:3a:aa:6d:2c:c0:b8:87:
c5:c4:5e:29:f5:ac:eb:35:da:aa:ff:2f:06:b6:aa:2e:85:40:
4d:28:d2:b4:c7:75:ec:bf:d8:77:ef:1f:ca:c9:e9:8f:a0:2c:
f0:7f:59:a0:bf:d4:dc:59:a3:98:3b:b6:a5:0a:6e:db:63:4c:
4d:c7:09:c2:20:08:60:47:63:25:a5:8f:8f:76:a7:87:23:c1:
ba:fa:bb:c3:0f:a9:a6:93:dd:9e:11:86:22:fe:f1:e1:d5:9e:
b2:85:d7:29:73:5b:a6:8b:d6:27:e1:be:e6:1b:27:97:6d:6f:
89:a2:e0:b4:1a:d6:92:f5:c7:3b:a6:bd:16:9a:2a:c5:f1:3f:
f4:63:eb:96:72:4a:8c:74:f8:71:44:e6:35:36:19:a6:d0:91:
3a:16:c9:4d:e0:da:14:0a:26:0a:8d:4d:7c:d7:90:29:fa:eb:
2c:e4:e4:47:19:93:cf:51:1a:c9:89:12:d9:0b:43:15:57:f0:
16:c2:08:95:6d:ca:bf:b8:76:f8:17:c1:00:2c:f2:c0:fd:34:
38:50:9b:dc:74:ca:90:1b:3e:84:84:d2:c9:d9:5f:b8:05:2c:
e6:2f:0e:fa
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAINyvfswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA1
MTIxOTE0MDJaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDc2NWZiZmUyMjM5
OWY1NDk3ZDRiOTZhYWYzNDU2MzAxNjEwZTcyMTYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCyW1D63Cgl2/TI+moRi3ThhgdWO5i48Yohkpvok74dV7al
cVj6PjDEtk0T6Bec2qQGqcCNA+vSJvEKe7kovfxR7qf3l7qKOcJdvw8ZaS3p0ORS
1C0VaR0x9J2lF8yIyZqNiOnyqLw2nSbE5Av3H08jTMBGDRK39/5NIY6u7txqLT1f
qnjIZvOpZfPBR2J9EWS/h9q/z0rjJyF4bwLjMxhSBKwnH9XqUQtl/zrQAem5qMoE
JVa49eWf7MsnHMdYcrD8jl1YSv1zk0Ztc4UR+OYl5Muf+wSmEJ1qshVNFCYVnWBk
TXLoTJkFqvqTjnFYA5WmSpNJ28LTwe/X1brfDUWTAgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQUdl+/4iOZ9Ul9S5aq80VjAWEOchYwHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS9kbC1fNGlPWjlVbDlTNWFxODBWakFXRU9jaFkucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEApHabjp1mNBTS45Zlt+OdwHjN0KPh7UVhZceA
7zs6qm0swLiHxcReKfWs6zXaqv8vBraqLoVATSjStMd17L/Yd+8fysnpj6As8H9Z
oL/U3FmjmDu2pQpu22NMTccJwiAIYEdjJaWPj3anhyPBuvq7ww+pppPdnhGGIv7x
4dWesoXXKXNbpovWJ+G+5hsnl21viaLgtBrWkvXHO6a9FpoqxfE/9GPrlnJKjHT4
cUTmNTYZptCROhbJTeDaFAomCo1NfNeQKfrrLOTkRxmTz1EayYkS2QtDFVfwFsII
lW3Kv7h2+BfBACzywP00OFCb3HTKkBs+hITSydlfuAUs5i8O+g==
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:50 2025 by rpki-client