Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iMAdcCugagnrtiwn5HvSiT5iORo.roa
File: iMAdcCugagnrtiwn5HvSiT5iORo.roa (raw, json)
Hash identifier: Y5eSSJV24Rhz4Gjt2LUGfhCdlelnz4vEzDi5VuyPEMI=
Subject key identifier: 88:C0:1D:70:2B:A0:6A:09:EB:B6:2C:27:E4:7B:D2:89:3E:62:39:1A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6D8AA31C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iMAdcCugagnrtiwn5HvSiT5iORo.roa
Signing time: Fri 25 Feb 2022 08:04:20 +0000
ROA not before: Fri 25 Feb 2022 08:04:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:2fe8:cbfc/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1837802268 (0x6d8aa31c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 25 08:04:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=88c01d702ba06a09ebb62c27e47bd2893e62391a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:45:eb:87:c8:cb:05:ff:ad:6a:de:22:fa:9d:
e9:3d:22:56:c2:98:6a:21:93:6d:ae:3f:23:94:0a:
27:64:1e:b9:8d:49:85:86:95:cb:76:12:f4:54:5c:
12:7f:bd:ef:ee:01:c0:9e:82:0d:43:a0:89:f4:be:
6b:47:b5:b6:13:de:8a:9e:b5:80:2d:49:8f:7d:cd:
d4:8f:a8:7c:27:dd:b6:45:d3:9e:c4:60:69:4f:dc:
59:da:0d:c1:69:f5:c4:5a:64:17:e3:bd:6e:2e:bb:
fc:79:e3:2e:0d:ad:c3:40:29:bb:a5:9a:75:45:15:
fe:99:fe:bf:aa:e6:f8:29:59:84:11:2b:f0:cd:3a:
86:15:52:5a:03:02:b5:ec:5f:01:db:da:1b:54:6e:
13:38:49:e0:54:bc:89:5b:17:ad:84:5a:e6:36:9b:
58:71:00:fe:5b:3d:2c:57:94:b4:65:e4:11:dd:2a:
87:b7:57:84:b3:20:7e:17:29:ba:9e:de:b0:e9:1f:
86:10:ba:4e:d4:d2:34:9b:a3:5d:ba:3b:e4:36:c0:
7b:2d:41:10:92:4d:e9:35:d7:cc:85:78:23:d5:3e:
46:6c:c8:a0:e0:35:b0:ef:9d:ac:b4:66:a9:69:a5:
70:40:e9:52:9f:54:b3:18:df:83:c8:57:e4:4e:a3:
b6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C0:1D:70:2B:A0:6A:09:EB:B6:2C:27:E4:7B:D2:89:3E:62:39:1A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iMAdcCugagnrtiwn5HvSiT5iORo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2f:60:2e:68:3f:e7:f7:20:4d:22:12:3e:a9:e1:f6:0a:51:1e:
51:bd:37:b2:61:e3:40:d8:78:94:a6:94:53:97:02:14:79:9e:
cf:60:f7:fd:47:b1:c8:d0:73:e2:07:80:c6:80:a8:8c:43:ed:
fb:5c:c2:6b:e8:b3:e8:ac:34:80:2b:9c:69:94:be:fb:42:52:
1e:0a:35:f5:6e:59:ad:58:9c:81:d5:a5:72:1f:7f:e3:db:3f:
d6:09:b7:0d:7d:d8:40:73:55:dd:cc:76:b9:cf:10:b6:90:d5:
94:66:f6:67:24:6a:34:a5:4a:df:c5:e9:62:94:32:98:ee:17:
e1:de:2c:7e:18:15:9a:d7:b9:8a:21:15:9d:1a:74:d0:7c:2d:
ca:e0:2c:21:82:70:e9:46:da:8f:00:c0:12:e3:27:8c:7a:d9:
c8:41:f2:99:27:1e:b9:32:6c:ee:ff:d1:ab:e3:77:b9:45:75:
78:b3:da:56:bb:50:27:c1:74:5f:a2:b0:08:18:f6:fa:ee:70:
d0:cc:28:75:d8:f9:56:19:4d:20:64:80:e1:f4:52:3b:1d:00:
95:a6:45:45:27:86:49:02:22:01:51:53:8c:ac:b3:c8:25:06:
cc:3f:76:1e:47:11:9e:f0:05:06:d8:73:91:08:a5:45:9a:3d:
6e:f7:a9:d5
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEbYqjHDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDIy
NTA4MDQyMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODhjMDFkNzAyYmEw
NmEwOWViYjYyYzI3ZTQ3YmQyODkzZTYyMzkxYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAP1F64fIywX/rWreIvqd6T0iVsKYaiGTba4/I5QKJ2QeuY1J
hYaVy3YS9FRcEn+97+4BwJ6CDUOgifS+a0e1thPeip61gC1Jj33N1I+ofCfdtkXT
nsRgaU/cWdoNwWn1xFpkF+O9bi67/HnjLg2tw0Apu6WadUUV/pn+v6rm+ClZhBEr
8M06hhVSWgMCtexfAdvaG1RuEzhJ4FS8iVsXrYRa5jabWHEA/ls9LFeUtGXkEd0q
h7dXhLMgfhcpup7esOkfhhC6TtTSNJujXbo75DbAey1BEJJN6TXXzIV4I9U+RmzI
oOA1sO+drLRmqWmlcEDpUp9Usxjfg8hX5E6jtpkCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBSIwB1wK6BqCeu2LCfke9KJPmI5GjAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L2lNQWRjQ3VnYWducnRpd241SHZTaVQ1aU9Sby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQAvYC5oP+f3IE0iEj6p4fYKUR5RvTeyYeNA2HiU
ppRTlwIUeZ7PYPf9R7HI0HPiB4DGgKiMQ+37XMJr6LPorDSAK5xplL77QlIeCjX1
blmtWJyB1aVyH3/j2z/WCbcNfdhAc1XdzHa5zxC2kNWUZvZnJGo0pUrfxelilDKY
7hfh3ix+GBWa17mKIRWdGnTQfC3K4CwhgnDpRtqPAMAS4yeMetnIQfKZJx65Mmzu
/9Gr43e5RXV4s9pWu1AnwXRforAIGPb67nDQzCh12PlWGU0gZIDh9FI7HQCVpkVF
J4ZJAiIBUVOMrLPIJQbMP3YeRxGe8AUG2HORCKVFmj1u96nV
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:26 2025 by rpki-client