Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iHsyJvMz3J68KsPf6FZ5SF0vfPk.roa
File: iHsyJvMz3J68KsPf6FZ5SF0vfPk.roa (raw, json)
Hash identifier: c8cDJ8WSGmYAqjPQwJwR01gSfTqjIWlaJbusKyuh4Gs=
Subject key identifier: 88:7B:32:26:F3:33:DC:9E:BC:2A:C3:DF:E8:56:79:48:5D:2F:7C:F9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189DF8CDDE46139903D35AB1482C9CC9E71
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iHsyJvMz3J68KsPf6FZ5SF0vfPk.roa
Signing time: Thu 10 Aug 2023 13:04:58 +0000
ROA not before: Thu 10 Aug 2023 13:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:df8c:55f1/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:df:8c:dd:e4:61:39:90:3d:35:ab:14:82:c9:cc:9e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 10 13:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=887b3226f333dc9ebc2ac3dfe85679485d2f7cf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0e:7c:61:5a:f2:84:99:38:4e:06:21:cb:33:
43:a3:36:45:a9:d5:f3:c6:3b:d3:03:9c:f1:60:3e:
e6:ed:26:3b:7f:be:9f:dd:24:ed:1b:37:13:25:19:
ef:b0:b6:8b:51:5f:d7:5f:94:bc:b4:c3:9b:70:ff:
97:5e:11:ab:e8:b4:13:af:a4:56:6e:af:f0:a5:d0:
3f:c9:bd:4b:69:61:44:17:a6:d5:4c:16:e3:8d:98:
9e:0f:43:76:15:07:a7:09:89:a8:76:06:b4:54:f9:
72:97:09:31:b9:f0:8c:af:57:cd:6a:f8:0a:a7:64:
f5:c4:0b:04:b3:44:0d:b4:90:8e:7e:5b:f2:5d:8e:
1f:ad:ed:c6:75:d0:c2:6d:a6:ee:9a:77:f3:eb:6e:
7f:67:f1:a7:85:60:6c:9f:a3:9b:5e:ba:de:62:c4:
e5:72:69:dd:31:30:0f:a0:5b:43:a1:a1:97:e2:01:
73:4e:a6:75:7a:3a:89:40:f5:c0:4c:93:a3:de:d1:
e7:ef:fa:f7:17:e9:11:d7:fd:ca:d4:91:f2:5a:96:
58:ea:f9:5f:ef:67:01:e1:52:74:55:bd:ac:bb:d7:
74:c1:72:1f:16:3d:e8:83:93:af:20:dd:2c:53:4e:
9d:c5:a4:b4:66:02:15:58:68:d2:2e:09:82:2a:d8:
97:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:7B:32:26:F3:33:DC:9E:BC:2A:C3:DF:E8:56:79:48:5D:2F:7C:F9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iHsyJvMz3J68KsPf6FZ5SF0vfPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
55:c9:70:09:51:93:dd:01:57:9a:d3:ad:1d:8c:b1:18:20:0a:
c7:54:e5:e7:d9:f2:36:54:d8:d6:6a:9b:9f:ab:0b:fa:87:12:
92:aa:6b:c2:4b:84:e4:92:68:8d:51:28:a1:57:ce:f6:20:9d:
5e:08:fe:3c:45:5a:66:a4:5c:9b:01:8f:26:1b:14:78:f7:53:
05:47:b8:c3:5f:17:29:87:c5:e5:0a:10:17:c8:28:3e:43:ca:
1c:81:03:83:9e:2e:26:36:16:aa:ad:c9:e1:d7:e5:e0:10:78:
af:ea:63:54:56:fd:ff:c7:4d:cf:20:8f:3a:d0:b8:bc:2c:03:
84:e6:c8:77:1e:9c:ff:e1:5f:3b:68:41:78:88:21:c6:61:0e:
7e:ac:71:64:c8:61:05:33:1d:f0:39:a8:c9:33:f0:bf:76:4d:
34:88:05:4d:39:d2:86:b3:a3:21:dc:6c:ca:8d:1b:a0:78:be:
58:ac:dc:d0:84:47:0c:92:48:1d:8d:06:fb:64:5c:69:d1:57:
cd:02:23:28:3c:72:da:03:ab:1c:15:c7:01:2b:de:91:c3:b2:
86:81:71:34:ae:4b:14:d4:18:02:27:f9:0f:4a:4e:be:67:c8:
17:6a:23:db:09:cd:6d:cd:22:93:f6:4c:9e:5a:da:64:53:1b:
a5:6d:72:e0
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYnfjN3kYTmQPTWrFILJzJ5xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODEwMTMwNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ODdiMzIyNmYzMzNkYzllYmMyYWMzZGZlODU2Nzk0ODVkMmY3Y2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnA58YVryhJk4TgYhyzNDozZFqdXz
xjvTA5zxYD7m7SY7f76f3STtGzcTJRnvsLaLUV/XX5S8tMObcP+XXhGr6LQTr6RW
bq/wpdA/yb1LaWFEF6bVTBbjjZieD0N2FQenCYmodga0VPlylwkxufCMr1fNavgK
p2T1xAsEs0QNtJCOflvyXY4fre3GddDCbabumnfz625/Z/GnhWBsn6ObXrreYsTl
cmndMTAPoFtDoaGX4gFzTqZ1ejqJQPXATJOj3tHn7/r3F+kR1/3K1JHyWpZY6vlf
72cB4VJ0Vb2su9d0wXIfFj3og5OvIN0sU06dxaS0ZgIVWGjSLgmCKtiX2QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIh7MibzM9yevCrD3+hWeUhdL3z5MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvaUhzeUp2TXozSjY4S3NQZjZGWjVTRjB2ZlBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFXJcAlRk90BV5rTrR2M
sRggCsdU5efZ8jZU2NZqm5+rC/qHEpKqa8JLhOSSaI1RKKFXzvYgnV4I/jxFWmak
XJsBjyYbFHj3UwVHuMNfFymHxeUKEBfIKD5DyhyBA4OeLiY2FqqtyeHX5eAQeK/q
Y1RW/f/HTc8gjzrQuLwsA4TmyHcenP/hXztoQXiIIcZhDn6scWTIYQUzHfA5qMkz
8L92TTSIBU050oazoyHcbMqNG6B4vlis3NCERwySSB2NBvtkXGnRV80CIyg8ctoD
qxwVxwEr3pHDsoaBcTSuSxTUGAIn+Q9KTr5nyBdqI9sJzW3NIpP2TJ5a2mRTG6Vt
cuA=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:49 2025 by rpki-client