Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iw4aZVJDCbdABVDD7DNeFu-JWlA.roa
File: iw4aZVJDCbdABVDD7DNeFu-JWlA.roa (raw, json)
Hash identifier: Otq+sKJCONJvYvrnmDl62NMyYhUSkgR4FcCNtNaE8zI=
Subject key identifier: 8B:0E:1A:65:52:43:09:B7:40:05:50:C3:EC:33:5E:16:EF:89:5A:50
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018621B3B0CDD9FCF231CEE09D0096B69DF8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iw4aZVJDCbdABVDD7DNeFu-JWlA.roa
Signing time: Sun 05 Feb 2023 13:11:09 +0000
ROA not before: Sun 05 Feb 2023 13:11:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:21:b3:b0:cd:d9:fc:f2:31:ce:e0:9d:00:96:b6:9d:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 5 13:11:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b0e1a65524309b7400550c3ec335e16ef895a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1b:74:a4:0e:d0:7d:11:86:8d:0e:ba:6c:49:
1f:8d:6e:be:4e:4c:06:47:21:52:c2:4f:2b:dc:01:
91:8e:58:54:97:24:85:2e:16:a5:27:ab:47:1e:5f:
c0:b6:ca:bb:7d:5e:c3:82:8a:b6:46:5c:66:22:42:
fb:fa:82:cb:67:2e:9e:7c:8b:87:cd:95:3f:9d:e3:
47:5c:7c:ab:fe:af:cb:6e:b7:2e:53:90:1d:0c:96:
3d:f5:50:5e:03:3b:ea:d2:d1:51:5f:40:58:78:a7:
e2:29:78:32:e4:7d:6c:c0:2d:b2:39:e5:5e:44:dd:
4a:6a:8f:74:36:d6:60:87:cf:df:6b:ae:61:9d:67:
8d:1b:df:cb:e3:18:e6:0f:5a:a3:5f:97:ab:51:74:
0e:72:2f:df:f9:dd:4f:95:66:54:13:d8:a8:a9:87:
7d:1b:76:0a:a1:86:04:ac:d2:b5:3a:8f:f2:20:ed:
5e:c0:28:0a:14:63:0f:37:6a:92:f3:35:43:c3:7f:
40:7a:1e:71:9d:4b:2c:d2:3a:ee:63:a9:a6:4b:5b:
74:5b:bb:1d:fc:67:36:67:10:54:49:5a:2b:3f:94:
f3:35:e4:b1:93:50:82:91:56:ca:1c:01:73:4f:78:
43:04:e6:73:79:f9:ac:86:17:58:02:77:64:9c:22:
d4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:0E:1A:65:52:43:09:B7:40:05:50:C3:EC:33:5E:16:EF:89:5A:50
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iw4aZVJDCbdABVDD7DNeFu-JWlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
29:66:47:e4:59:ee:2b:bc:bc:a1:8d:4b:7b:9e:eb:a1:15:6b:
e3:88:ae:67:88:51:9d:77:1a:ee:84:17:27:c7:2a:c9:4e:98:
03:bd:40:cd:ee:4d:d8:e0:5c:43:0b:0d:1b:75:5e:34:b6:90:
e6:26:45:d2:80:e7:da:eb:01:dd:d1:58:76:a1:63:65:2e:12:
be:b5:c9:62:8d:ec:fd:ef:93:4f:76:05:2d:a2:c4:06:be:74:
a3:86:84:11:e3:fb:9d:5c:b6:47:b4:77:48:e6:4c:6f:04:f4:
c6:98:70:d3:5a:39:5d:58:bb:fd:f5:65:4e:70:cd:20:59:69:
eb:34:cf:d8:9b:f4:b3:62:33:38:1a:25:0e:4a:a0:74:8f:c6:
e0:99:fa:cc:f0:4c:c1:d1:be:59:f8:4e:dd:6f:82:95:0d:1c:
59:35:28:bf:0b:05:bf:41:02:32:01:56:eb:1c:3b:dd:3f:d5:
a1:b5:09:56:d5:a3:a6:4b:2b:f9:ee:c3:29:c7:9f:7f:ee:86:
76:f7:5f:f9:d5:23:8a:2c:06:6f:9f:83:a7:f1:dc:aa:66:53:
54:47:54:59:f8:26:2c:71:53:e7:ca:40:6d:ec:59:ff:c8:69:
2d:99:ea:e5:ec:13:87:65:1d:7d:55:dc:98:dd:ae:cd:19:11:
5a:e3:29:56
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYYhs7DN2fzyMc7gnQCWtp34MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjA1MTMxMTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YjBlMWE2NTUyNDMwOWI3NDAwNTUwYzNlYzMzNWUxNmVmODk1YTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkht0pA7QfRGGjQ66bEkfjW6+TkwG
RyFSwk8r3AGRjlhUlySFLhalJ6tHHl/Atsq7fV7Dgoq2RlxmIkL7+oLLZy6efIuH
zZU/neNHXHyr/q/LbrcuU5AdDJY99VBeAzvq0tFRX0BYeKfiKXgy5H1swC2yOeVe
RN1Kao90NtZgh8/fa65hnWeNG9/L4xjmD1qjX5erUXQOci/f+d1PlWZUE9ioqYd9
G3YKoYYErNK1Oo/yIO1ewCgKFGMPN2qS8zVDw39Aeh5xnUss0jruY6mmS1t0W7sd
/Gc2ZxBUSVorP5TzNeSxk1CCkVbKHAFzT3hDBOZzefmshhdYAndknCLUTwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIsOGmVSQwm3QAVQw+wzXhbviVpQMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvaXc0YVpWSkRDYmRBQlZERDdETmVGdS1KV2xBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAClmR+RZ7iu8vKGNS3ue
66EVa+OIrmeIUZ13Gu6EFyfHKslOmAO9QM3uTdjgXEMLDRt1XjS2kOYmRdKA59rr
Ad3RWHahY2UuEr61yWKN7P3vk092BS2ixAa+dKOGhBHj+51ctke0d0jmTG8E9MaY
cNNaOV1Yu/31ZU5wzSBZaes0z9ib9LNiMzgaJQ5KoHSPxuCZ+szwTMHRvln4Tt1v
gpUNHFk1KL8LBb9BAjIBVuscO90/1aG1CVbVo6ZLK/nuwynHn3/uhnb3X/nVI4os
Bm+fg6fx3KpmU1RHVFn4JixxU+fKQG3sWf/IaS2Z6uXsE4dlHX1V3Jjdrs0ZEVrj
KVY=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:42 2025 by rpki-client