Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/g0wWZPeF7G3pRQiIcJZPWCYnf_c.roa
File: g0wWZPeF7G3pRQiIcJZPWCYnf_c.roa (raw, json)
Hash identifier: 4OENFjBouD1FPeHWhx/X9CI34ZmNzvyAsjdluTvXgh4=
Subject key identifier: 83:4C:16:64:F7:85:EC:6D:E9:45:08:88:70:96:4F:58:26:27:7F:F7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8E0A5D46
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/g0wWZPeF7G3pRQiIcJZPWCYnf_c.roa
Signing time: Sun 19 Jun 2022 07:09:44 +0000
ROA not before: Sun 19 Jun 2022 07:09:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:56ba:5b78/128 maxlen: 128
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2383043910 (0x8e0a5d46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 19 07:09:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=834c1664f785ec6de945088870964f5826277ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:24:38:ef:8a:5a:76:2c:f4:6c:16:0a:ad:ba:
78:6e:c1:c2:53:3b:a7:16:72:73:7e:9d:f8:b2:8a:
c2:19:6b:88:44:2e:68:0c:c3:1f:8e:99:b7:b7:04:
21:31:42:f5:51:da:ff:b6:34:c1:b4:01:e0:a0:b8:
a1:97:5e:ea:ed:80:30:b9:43:dc:d3:c0:19:87:a8:
57:2a:21:bb:27:1a:f1:21:27:82:bb:9a:24:78:cf:
98:52:9c:04:b9:1f:28:67:46:d3:1d:8c:2d:8d:87:
02:f3:f8:2b:42:a8:21:93:b0:81:45:15:2f:dd:fd:
e3:ab:63:bc:33:a9:6b:36:44:f2:89:b3:24:b7:e0:
94:16:ba:5c:df:2f:bc:0a:60:cd:a6:8e:a5:0d:a4:
ca:06:a3:26:ba:81:61:96:d4:1a:37:cf:c4:02:fa:
36:a9:4f:67:09:c3:27:6b:e3:ac:4f:35:02:24:6b:
ff:98:c1:37:25:ef:b0:17:34:82:5b:37:ad:1f:9e:
43:19:87:72:ef:e8:18:02:06:91:f0:7a:c7:25:63:
6c:96:bf:ac:ab:eb:e5:4c:e8:01:36:88:85:45:aa:
52:08:8b:70:a5:53:ee:c3:51:ca:2b:8d:5e:e5:64:
81:24:f9:2a:ae:ba:2b:5e:11:e7:38:d5:e2:71:c1:
88:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:4C:16:64:F7:85:EC:6D:E9:45:08:88:70:96:4F:58:26:27:7F:F7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/g0wWZPeF7G3pRQiIcJZPWCYnf_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a4:54:6f:cb:07:bf:0b:e8:82:b8:30:6c:2f:02:77:07:9d:80:
c5:30:fb:83:92:e1:a2:7b:38:30:27:99:74:d0:8f:8d:f4:89:
c4:2c:92:8f:4c:6e:84:10:cb:13:e4:ef:3f:61:98:93:1b:6b:
4a:1e:f5:f8:29:9d:ab:a6:62:99:9b:85:d6:40:71:0d:7d:c9:
29:6e:5e:af:10:29:20:0c:91:4e:99:47:1b:a5:81:e8:fa:fa:
58:cd:d0:26:f5:49:04:51:29:97:bf:5d:59:4e:73:1c:9b:71:
2c:97:9d:ba:e0:a9:2d:f4:1b:18:97:88:5e:90:c7:2e:79:25:
64:bb:4b:79:0e:96:d5:7b:cd:ae:f2:93:50:c2:c8:e9:30:b7:
d0:b7:a6:8d:45:2a:c9:c2:15:12:6f:1c:f3:bc:2c:e5:74:fc:
73:ba:f6:35:36:07:2d:f4:24:e5:aa:ae:a3:10:e8:ba:2a:e8:
2c:05:fa:28:5d:00:47:87:87:6c:2d:08:a5:dc:db:00:7c:52:
7a:b4:ff:45:d2:02:e0:2f:e2:01:6b:a3:b0:97:64:32:b1:05:
42:fa:67:72:34:6c:f9:53:55:af:aa:f4:80:11:24:c1:f4:41:
d9:c7:2f:56:0d:16:af:24:f8:c3:c5:dd:52:5b:e9:b5:8b:88:
f3:49:c9:29
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAI4KXUYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA2
MTkwNzA5NDRaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDgzNGMxNjY0Zjc4
NWVjNmRlOTQ1MDg4ODcwOTY0ZjU4MjYyNzdmZjcwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCaJDjvilp2LPRsFgqtunhuwcJTO6cWcnN+nfiyisIZa4hE
LmgMwx+Ombe3BCExQvVR2v+2NMG0AeCguKGXXurtgDC5Q9zTwBmHqFcqIbsnGvEh
J4K7miR4z5hSnAS5HyhnRtMdjC2NhwLz+CtCqCGTsIFFFS/d/eOrY7wzqWs2RPKJ
syS34JQWulzfL7wKYM2mjqUNpMoGoya6gWGW1Bo3z8QC+japT2cJwydr46xPNQIk
a/+YwTcl77AXNIJbN60fnkMZh3Lv6BgCBpHwesclY2yWv6yr6+VM6AE2iIVFqlII
i3ClU+7DUcorjV7lZIEk+SquuiteEec41eJxwYgXAgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQUg0wWZPeF7G3pRQiIcJZPWCYnf/cwHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS9nMHdXWlBlRjdHM3BSUWlJY0paUFdDWW5mX2Mucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEApFRvywe/C+iCuDBsLwJ3B52AxTD7g5Lhons4
MCeZdNCPjfSJxCySj0xuhBDLE+TvP2GYkxtrSh71+Cmdq6ZimZuF1kBxDX3JKW5e
rxApIAyRTplHG6WB6Pr6WM3QJvVJBFEpl79dWU5zHJtxLJeduuCpLfQbGJeIXpDH
LnklZLtLeQ6W1XvNrvKTUMLI6TC30LemjUUqycIVEm8c87ws5XT8c7r2NTYHLfQk
5aquoxDouiroLAX6KF0AR4eHbC0IpdzbAHxSerT/RdIC4C/iAWujsJdkMrEFQvpn
cjRs+VNVr6r0gBEkwfRB2ccvVg0WryT4w8XdUlvptYuI80nJKQ==
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:45 2025 by rpki-client