Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hPK7qkOwpuVuNtUz-jni5X3fU6U.roa
File: hPK7qkOwpuVuNtUz-jni5X3fU6U.roa (raw, json)
Hash identifier: 3TKSMwb8OMx1fzPis7aloUr5/DS1NkStautegrBETzo=
Subject key identifier: 84:F2:BB:AA:43:B0:A6:E5:6E:36:D5:33:FA:39:E2:E5:7D:DF:53:A5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185E2665BD414827BBFA6C943A97DABC7A3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hPK7qkOwpuVuNtUz-jni5X3fU6U.roa
Signing time: Tue 24 Jan 2023 06:10:37 +0000
ROA not before: Tue 24 Jan 2023 06:10:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e2:66:5b:d4:14:82:7b:bf:a6:c9:43:a9:7d:ab:c7:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 24 06:10:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=84f2bbaa43b0a6e56e36d533fa39e2e57ddf53a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fa:ba:34:17:39:78:a1:9c:93:6d:3f:da:fb:
22:47:e2:a1:83:ee:a6:dd:8e:47:1b:5e:4a:d7:04:
62:9d:a7:42:c0:01:2a:c6:ef:ce:cb:ba:92:6f:9b:
6c:79:a2:e7:c4:c7:2b:f6:11:55:3d:21:5f:f0:6b:
4c:1d:f5:44:f0:ec:76:ce:06:ca:19:6a:d4:26:81:
e9:43:95:53:64:54:af:cf:5d:82:22:0c:06:b6:a3:
1c:67:2b:10:7d:c5:0b:7a:f2:56:03:29:1a:1d:76:
b1:52:db:0f:39:88:f2:e6:2b:22:e4:90:25:09:bd:
50:1d:42:9e:0a:f6:20:03:3e:7d:c4:df:94:22:8c:
ab:c6:3d:ef:75:26:82:b0:67:c6:d5:db:92:8a:91:
cc:ac:12:c5:fa:44:7e:01:e7:ac:70:90:51:3d:ba:
88:25:78:3a:69:a9:53:5b:17:47:fa:92:42:f8:49:
4e:f0:18:0f:f7:c5:bf:fa:67:2f:c9:c0:09:36:45:
6b:24:14:81:ea:6f:4e:42:ca:d7:38:1e:86:9d:2a:
6a:33:eb:7a:a7:cd:7f:01:96:76:e3:2a:11:6a:c0:
6c:01:ba:81:fc:e0:ba:70:50:16:c0:21:9f:62:9d:
44:84:47:e1:a8:7b:0e:ea:69:84:54:fe:b0:ae:75:
cd:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F2:BB:AA:43:B0:A6:E5:6E:36:D5:33:FA:39:E2:E5:7D:DF:53:A5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hPK7qkOwpuVuNtUz-jni5X3fU6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a7:29:c1:d8:f4:cc:14:d6:c3:6e:95:ea:08:bc:6f:18:fe:32:
6a:f6:2a:76:2e:a9:4c:d4:af:13:39:d9:c7:c9:26:ce:c7:7d:
1f:58:6b:b0:50:a3:46:4b:98:66:0c:a3:0a:11:4b:83:43:02:
31:a8:70:41:65:93:2b:66:e4:a0:b7:d7:0a:e2:b6:0d:3e:b1:
6a:f3:d2:aa:48:3e:b1:0d:ca:bb:15:ce:a0:61:2c:c2:b6:72:
59:93:ab:3b:bb:04:4e:fc:c7:98:8a:28:0e:55:74:0e:0f:aa:
14:42:3e:28:30:eb:32:7b:13:e1:50:8a:ad:d4:99:85:df:02:
84:bf:a5:01:04:03:73:69:f8:00:d6:0b:07:c5:50:7f:87:bd:
60:38:a4:7c:41:28:b1:a2:bc:98:5c:32:92:c7:10:43:58:5c:
5d:8f:b4:8e:09:43:3b:98:66:13:0a:8a:18:64:fe:68:0e:eb:
7c:00:b4:d0:14:cf:7f:ce:eb:43:23:5e:4e:83:5f:ce:a4:0a:
5a:c3:ee:38:38:15:1f:b6:ec:38:fd:cf:cd:18:20:2c:46:95:
96:7f:c1:7f:85:cb:d9:16:1b:62:5f:e4:98:23:0c:4f:d4:0e:
5f:8b:e0:b0:ef:6c:ea:83:c0:69:f4:05:2e:8e:a2:35:d5:5e:
22:7e:06:1c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYXiZlvUFIJ7v6bJQ6l9q8ejMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTI0MDYxMDM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NGYyYmJhYTQzYjBhNmU1NmUzNmQ1MzNmYTM5ZTJlNTdkZGY1M2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfq6NBc5eKGck20/2vsiR+Khg+6m
3Y5HG15K1wRinadCwAEqxu/Oy7qSb5tseaLnxMcr9hFVPSFf8GtMHfVE8Ox2zgbK
GWrUJoHpQ5VTZFSvz12CIgwGtqMcZysQfcULevJWAykaHXaxUtsPOYjy5isi5JAl
Cb1QHUKeCvYgAz59xN+UIoyrxj3vdSaCsGfG1duSipHMrBLF+kR+AeescJBRPbqI
JXg6aalTWxdH+pJC+ElO8BgP98W/+mcvycAJNkVrJBSB6m9OQsrXOB6GnSpqM+t6
p81/AZZ24yoRasBsAbqB/OC6cFAWwCGfYp1EhEfhqHsO6mmEVP6wrnXN1QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFITyu6pDsKblbjbVM/o54uV931OlMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvaFBLN3FrT3dwdVZ1TnRVei1qbmk1WDNmVTZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKcpwdj0zBTWw26V6gi8
bxj+Mmr2KnYuqUzUrxM52cfJJs7HfR9Ya7BQo0ZLmGYMowoRS4NDAjGocEFlkytm
5KC31writg0+sWrz0qpIPrENyrsVzqBhLMK2clmTqzu7BE78x5iKKA5VdA4PqhRC
Pigw6zJ7E+FQiq3UmYXfAoS/pQEEA3Np+ADWCwfFUH+HvWA4pHxBKLGivJhcMpLH
EENYXF2PtI4JQzuYZhMKihhk/mgO63wAtNAUz3/O60MjXk6DX86kClrD7jg4FR+2
7Dj9z80YICxGlZZ/wX+Fy9kWG2Jf5JgjDE/UDl+L4LDvbOqDwGn0BS6OojXVXiJ+
Bhw=
-----END CERTIFICATE-----
Generated at Thu May 1 03:44:17 2025 by rpki-client