Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iagKRawHvK7NgxFTkl-AciWRF1w.roa
File: iagKRawHvK7NgxFTkl-AciWRF1w.roa (raw, json)
Hash identifier: B3jcC6Rb8WDHyaca/rGGYD2nr4DLQrv1AvO6llcXpbA=
Subject key identifier: 89:A8:0A:45:AC:07:BC:AE:CD:83:11:53:92:5F:80:72:25:91:17:5C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01869FD963614992A940164EF21EBBE54479
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iagKRawHvK7NgxFTkl-AciWRF1w.roa
Signing time: Thu 02 Mar 2023 01:04:29 +0000
ROA not before: Thu 02 Mar 2023 01:04:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:9fd9:33b2/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9f:d9:63:61:49:92:a9:40:16:4e:f2:1e:bb:e5:44:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 2 01:04:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89a80a45ac07bcaecd831153925f80722591175c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:66:a9:a5:0a:30:ba:5c:76:b1:3f:9a:8f:60:
48:eb:f4:cb:f9:df:2c:47:41:b6:fe:e3:cb:e0:31:
a3:64:8f:b0:cd:d4:2f:e7:f4:b3:c3:55:4e:a9:88:
8e:8f:87:86:6b:68:bb:68:27:c8:b1:f4:10:97:7a:
67:47:09:44:87:ad:9e:10:1b:7b:1c:81:0b:cd:88:
50:39:aa:0a:f2:57:b0:6a:c9:de:a8:d2:ff:93:27:
df:cb:ef:ec:bb:d5:3d:5b:c0:48:5f:24:4f:9f:c1:
a7:58:20:d1:8c:c3:30:64:7e:ea:17:e4:96:b4:e2:
21:b4:19:3a:d3:53:db:92:a8:49:52:89:16:c7:a9:
3e:69:9a:aa:ab:c0:48:2c:99:32:d2:1b:f9:ee:7a:
a7:b6:7f:e4:cc:d2:5c:75:3e:4e:b4:dc:0a:35:ee:
6a:52:6d:51:30:a4:5c:ff:85:3e:95:bc:9b:4d:75:
7c:ba:e6:df:9d:57:f6:87:9f:23:5f:7d:ad:19:c4:
8b:c9:97:3d:2a:cb:aa:8c:f4:39:70:48:ff:59:78:
ed:9c:a3:fb:fe:96:7a:fa:2f:aa:95:fe:33:69:62:
70:f5:d5:d4:72:94:41:ad:8e:05:b7:4f:30:74:dc:
32:84:8f:1d:cb:77:bd:06:51:84:04:d3:66:83:3b:
94:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A8:0A:45:AC:07:BC:AE:CD:83:11:53:92:5F:80:72:25:91:17:5C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iagKRawHvK7NgxFTkl-AciWRF1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2f:95:0d:59:8d:d4:3d:1f:c8:17:1c:d6:6e:0f:77:82:e0:56:
0f:22:15:62:25:c9:ea:bb:7c:45:17:b3:cb:a7:dd:1e:fe:d0:
d3:0d:c7:fb:f5:13:6a:29:e1:03:6f:13:cf:80:d5:d2:3d:0a:
39:69:85:85:69:46:4f:7c:ee:3d:74:4b:e3:8a:14:e6:d1:58:
64:bf:4c:f5:bc:fd:0d:3f:ec:9f:70:a5:c7:7c:e7:ed:77:21:
b6:9d:99:12:5d:19:10:80:a1:54:57:16:fe:14:09:bb:62:53:
24:33:ea:60:76:de:01:92:46:b2:8e:b3:42:99:b8:54:2b:7b:
67:13:9b:22:b1:4a:3c:4d:5a:7f:b1:c0:fc:4c:63:9a:99:ad:
35:50:ff:1f:3b:22:0f:4d:03:bf:c9:74:0a:8a:07:bc:5d:10:
75:f4:82:fc:22:cc:ff:71:72:bf:db:c0:fc:ea:20:c6:20:04:
a1:51:e8:91:a0:b1:39:96:6f:35:78:c6:c1:ff:84:86:7a:a2:
97:23:fe:d3:9c:aa:86:ef:7c:b4:60:93:89:5a:fb:63:f7:e7:
15:f3:f0:46:12:13:e5:5a:a5:98:12:39:67:75:b4:99:44:b6:
ad:da:ac:cc:5a:19:c2:84:da:10:27:9f:02:37:d2:af:ba:00:
88:5b:9b:50
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYaf2WNhSZKpQBZO8h675UR5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzAyMDEwNDI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OWE4MGE0NWFjMDdiY2FlY2Q4MzExNTM5MjVmODA3MjI1OTExNzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2appQowulx2sT+aj2BI6/TL+d8s
R0G2/uPL4DGjZI+wzdQv5/Szw1VOqYiOj4eGa2i7aCfIsfQQl3pnRwlEh62eEBt7
HIELzYhQOaoK8lewasneqNL/kyffy+/su9U9W8BIXyRPn8GnWCDRjMMwZH7qF+SW
tOIhtBk601PbkqhJUokWx6k+aZqqq8BILJky0hv57nqntn/kzNJcdT5OtNwKNe5q
Um1RMKRc/4U+lbybTXV8uubfnVf2h58jX32tGcSLyZc9KsuqjPQ5cEj/WXjtnKP7
/pZ6+i+qlf4zaWJw9dXUcpRBrY4Ft08wdNwyhI8dy3e9BlGEBNNmgzuUiQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFImoCkWsB7yuzYMRU5JfgHIlkRdcMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvaWFnS1Jhd0h2SzdOZ3hGVGtsLUFjaVdSRjF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAC+VDVmN1D0fyBcc1m4P
d4LgVg8iFWIlyeq7fEUXs8un3R7+0NMNx/v1E2op4QNvE8+A1dI9CjlphYVpRk98
7j10S+OKFObRWGS/TPW8/Q0/7J9wpcd85+13IbadmRJdGRCAoVRXFv4UCbtiUyQz
6mB23gGSRrKOs0KZuFQre2cTmyKxSjxNWn+xwPxMY5qZrTVQ/x87Ig9NA7/JdAqK
B7xdEHX0gvwizP9xcr/bwPzqIMYgBKFR6JGgsTmWbzV4xsH/hIZ6opcj/tOcqobv
fLRgk4la+2P35xXz8EYSE+VapZgSOWd1tJlEtq3arMxaGcKE2hAnnwI30q+6AIhb
m1A=
-----END CERTIFICATE-----
Generated at Thu May 1 10:03:53 2025 by rpki-client