Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/du9n6mN-xuFmLUX5b8G05lY_6hQ.roa
File: du9n6mN-xuFmLUX5b8G05lY_6hQ.roa (raw, json)
Hash identifier: Ji7JW92b9OOCKS9spHZRl2i5CoyROR/LtnR3AiZ/Pec=
Subject key identifier: 76:EF:67:EA:63:7E:C6:E1:66:2D:45:F9:6F:C1:B4:E6:56:3F:EA:14
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181DDB7DE23D7C283F6C1F142D19C18A2F8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/du9n6mN-xuFmLUX5b8G05lY_6hQ.roa
Signing time: Fri 08 Jul 2022 12:10:23 +0000
ROA not before: Fri 08 Jul 2022 12:10:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:dd:b7:de:23:d7:c2:83:f6:c1:f1:42:d1:9c:18:a2:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 8 12:10:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=76ef67ea637ec6e1662d45f96fc1b4e6563fea14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c2:38:55:ff:08:c4:5e:fb:5f:d4:80:17:ce:
4f:18:d9:25:c9:e6:68:5f:9b:58:f9:4e:b7:1b:66:
7b:21:25:5e:51:b1:94:32:fd:dd:20:7f:08:7f:f3:
a9:30:bb:40:5f:90:50:8f:9b:ca:0a:45:72:ff:07:
b3:8c:5a:ac:4c:2b:fc:42:e2:c1:96:1c:ed:99:9a:
71:e2:7d:1c:ba:e4:49:ac:a0:af:6b:74:82:65:7a:
17:9c:51:11:90:9e:c7:d3:c3:e0:ec:23:3a:62:82:
c2:4b:f4:fc:39:19:53:89:c1:4d:fd:9f:c1:ee:ee:
84:2b:1d:46:98:4f:82:8d:a5:78:1c:29:54:b4:1b:
9f:7c:a6:c1:54:96:06:ed:af:d9:75:e9:73:95:0a:
d9:38:bb:4c:99:91:a8:8d:3a:f8:11:c9:0e:48:dc:
2e:46:dd:1b:8a:65:b4:f0:e8:a7:af:b2:18:f3:19:
b5:07:d8:52:51:22:ed:33:92:c0:4b:d8:74:e1:f4:
b0:fb:3f:83:df:08:9c:3a:9d:c5:c8:2c:dd:74:ef:
b0:ad:4d:cc:0a:33:90:b9:25:a2:81:87:aa:c4:69:
f1:88:a0:ef:02:a4:b4:fc:bd:3a:89:a8:df:67:28:
27:94:89:26:e6:04:87:e7:96:4d:5c:f1:c9:67:6f:
ba:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:EF:67:EA:63:7E:C6:E1:66:2D:45:F9:6F:C1:B4:E6:56:3F:EA:14
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/du9n6mN-xuFmLUX5b8G05lY_6hQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
70:0c:49:1c:f2:c0:8a:a3:52:bb:ac:b9:ac:3d:b6:19:d1:44:
77:c2:40:67:fe:f1:07:7d:d8:ad:3a:40:f7:41:15:4d:59:59:
60:48:76:fd:19:1a:44:25:6a:40:42:d5:31:2f:a6:6a:2e:56:
b0:cd:ad:0b:c6:d0:07:9c:d9:8f:3c:32:3d:fc:99:71:fa:3b:
45:c4:7c:22:da:33:8a:63:ec:25:50:10:85:18:ed:59:14:a5:
8a:e1:f7:4d:9a:56:87:81:bb:c2:0e:b7:79:aa:52:56:bf:0b:
58:e8:25:ce:2b:66:b5:85:60:18:57:e3:36:3e:25:8d:2f:63:
51:dc:4c:87:ee:82:bc:52:61:ae:78:82:1b:93:db:96:6b:0c:
18:66:b0:67:8a:8b:b8:fb:5a:b9:02:ca:54:5c:f5:17:ac:9f:
a7:75:15:8a:ae:2f:f8:fb:d4:d2:ce:b8:39:30:eb:fd:fb:23:
9c:11:d2:80:79:fc:0b:f0:02:a3:d4:d5:38:5d:4d:3f:65:c1:
c2:96:f2:bf:4c:94:b6:eb:e3:9f:cd:ec:ae:9d:96:a1:e7:7e:
8d:7c:58:1c:4a:f7:be:01:fb:74:0e:c8:2c:32:10:9e:30:ee:
62:dd:48:d6:84:2c:8c:37:ba:e0:98:8f:61:70:57:36:c2:95:
05:8c:44:ce
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYHdt94j18KD9sHxQtGcGKL4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwNzA4MTIxMDIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NmVmNjdlYTYzN2VjNmUxNjYyZDQ1Zjk2ZmMxYjRlNjU2M2ZlYTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMI4Vf8IxF77X9SAF85PGNklyeZo
X5tY+U63G2Z7ISVeUbGUMv3dIH8If/OpMLtAX5BQj5vKCkVy/wezjFqsTCv8QuLB
lhztmZpx4n0cuuRJrKCva3SCZXoXnFERkJ7H08Pg7CM6YoLCS/T8ORlTicFN/Z/B
7u6EKx1GmE+CjaV4HClUtBuffKbBVJYG7a/ZdelzlQrZOLtMmZGojTr4EckOSNwu
Rt0bimW08Oinr7IY8xm1B9hSUSLtM5LAS9h04fSw+z+D3wicOp3FyCzddO+wrU3M
CjOQuSWigYeqxGnxiKDvAqS0/L06iajfZygnlIkm5gSH55ZNXPHJZ2+6FQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHbvZ+pjfsbhZi1F+W/BtOZWP+oUMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZHU5bjZtTi14dUZtTFVYNWI4RzA1bFlfNmhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHAMSRzywIqjUrusuaw9
thnRRHfCQGf+8Qd92K06QPdBFU1ZWWBIdv0ZGkQlakBC1TEvpmouVrDNrQvG0Aec
2Y88Mj38mXH6O0XEfCLaM4pj7CVQEIUY7VkUpYrh902aVoeBu8IOt3mqUla/C1jo
Jc4rZrWFYBhX4zY+JY0vY1HcTIfugrxSYa54ghuT25ZrDBhmsGeKi7j7WrkCylRc
9Resn6d1FYquL/j71NLOuDkw6/37I5wR0oB5/AvwAqPU1ThdTT9lwcKW8r9MlLbr
45/N7K6dlqHnfo18WBxK974B+3QOyCwyEJ4w7mLdSNaELIw3uuCYj2FwVzbClQWM
RM4=
-----END CERTIFICATE-----
Generated at Sun May 4 15:50:40 2025 by rpki-client