Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/j3Y4yVqlpAjjOGEZsyxCmnZ98RM.roa
File: j3Y4yVqlpAjjOGEZsyxCmnZ98RM.roa (raw, json)
Hash identifier: V1+G8QlB7laFJ86BQaB/lmyRsq22EhWVBPddl6a1AOY=
Subject key identifier: 8F:76:38:C9:5A:A5:A4:08:E3:38:61:19:B3:2C:42:9A:76:7D:F1:13
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01861577AAADA3A851962AD4AAB2C14D3105
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/j3Y4yVqlpAjjOGEZsyxCmnZ98RM.roa
Signing time: Fri 03 Feb 2023 04:10:09 +0000
ROA not before: Fri 03 Feb 2023 04:10:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:15:77:aa:ad:a3:a8:51:96:2a:d4:aa:b2:c1:4d:31:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 3 04:10:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f7638c95aa5a408e3386119b32c429a767df113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:e9:f4:a0:ad:bc:b7:cc:15:eb:57:f2:5e:65:
65:64:45:ca:bb:96:dd:ec:25:d2:8f:23:21:24:85:
a8:c8:1d:81:3d:0b:3d:69:ae:90:ed:39:61:8c:a4:
bc:66:8f:52:8c:65:e0:c9:99:35:5d:e4:25:21:49:
5f:c3:25:4d:b2:46:ba:c2:2a:72:c3:9d:e5:35:02:
eb:2c:dc:e6:7c:67:61:77:7f:30:83:30:7a:72:65:
35:db:98:db:43:e4:66:e6:33:f9:f8:17:45:57:06:
f2:7e:80:64:c6:c3:17:fb:db:a9:4d:71:36:c9:79:
1a:86:93:16:cd:35:08:2c:66:11:62:61:ba:53:a6:
42:a0:51:f1:3c:64:60:77:a6:6d:69:f0:0e:29:2d:
f2:18:ce:ad:99:7b:a1:06:0a:79:db:2f:a2:13:bc:
6e:7c:43:bf:1d:93:84:e3:4e:7c:41:e1:69:bc:d3:
dd:ee:26:ff:26:3d:80:fe:31:75:67:52:5c:32:59:
b9:dc:fa:88:5a:71:ac:39:c9:98:6b:9a:89:7c:44:
22:89:1c:85:53:7b:13:78:c8:b5:79:1b:cf:ee:12:
72:68:5d:a7:25:4e:6a:2d:d7:fa:e2:56:40:bc:1f:
7e:a3:70:2d:68:02:0d:c9:28:da:80:bb:0c:1d:ce:
8d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:76:38:C9:5A:A5:A4:08:E3:38:61:19:B3:2C:42:9A:76:7D:F1:13
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/j3Y4yVqlpAjjOGEZsyxCmnZ98RM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
21:d4:fa:3f:c9:29:81:c6:6a:0d:6e:e7:b6:9c:16:4d:01:63:
46:f1:a8:c5:6c:e5:5c:29:03:f9:bc:6b:26:a2:60:d4:c2:e4:
6e:e4:e1:1c:98:b3:9b:82:8b:2c:76:39:d7:98:8a:3c:38:f9:
0f:04:78:c5:8c:e7:bf:73:ef:0d:c3:b4:fb:a4:60:6e:7e:87:
04:bc:d4:89:bd:1c:9b:0f:0a:dc:ec:4e:a1:7b:c7:b4:69:14:
ca:4d:f4:de:a3:05:df:16:4c:d1:86:8c:e5:0c:aa:d2:51:97:
ce:ac:c7:ef:fe:cb:dd:54:87:e2:87:54:ae:42:91:39:92:65:
05:ee:41:0e:b6:5f:63:b3:3a:78:2a:4f:60:5d:95:06:13:c2:
ec:38:4d:db:11:eb:9a:91:aa:54:3f:26:d9:2b:a8:44:39:90:
d3:a6:b2:1b:30:8c:a8:ba:18:47:c6:de:8a:9f:20:a9:c0:e7:
80:af:12:98:4a:ba:81:3e:c4:b1:72:d5:89:16:dc:f8:5f:d0:
8e:df:3a:6d:64:da:36:de:1b:e9:7d:1d:f5:f2:6f:f3:b2:f0:
0b:93:06:86:61:57:8d:c8:72:a7:b8:b2:6b:e2:1b:1b:48:a1:
5c:07:da:8f:79:d0:95:12:b4:00:57:c0:4d:73:d3:c5:07:34:
25:bc:96:4c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYYVd6qto6hRlirUqrLBTTEFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjAzMDQxMDA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Zjc2MzhjOTVhYTVhNDA4ZTMzODYxMTliMzJjNDI5YTc2N2RmMTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7+n0oK28t8wV61fyXmVlZEXKu5bd
7CXSjyMhJIWoyB2BPQs9aa6Q7TlhjKS8Zo9SjGXgyZk1XeQlIUlfwyVNska6wipy
w53lNQLrLNzmfGdhd38wgzB6cmU125jbQ+Rm5jP5+BdFVwbyfoBkxsMX+9upTXE2
yXkahpMWzTUILGYRYmG6U6ZCoFHxPGRgd6ZtafAOKS3yGM6tmXuhBgp52y+iE7xu
fEO/HZOE4058QeFpvNPd7ib/Jj2A/jF1Z1JcMlm53PqIWnGsOcmYa5qJfEQiiRyF
U3sTeMi1eRvP7hJyaF2nJU5qLdf64lZAvB9+o3AtaAINySjagLsMHc6NhwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFI92OMlapaQI4zhhGbMsQpp2ffETMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvajNZNHlWcWxwQWpqT0dFWnN5eENtblo5OFJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACHU+j/JKYHGag1u57ac
Fk0BY0bxqMVs5VwpA/m8ayaiYNTC5G7k4RyYs5uCiyx2OdeYijw4+Q8EeMWM579z
7w3DtPukYG5+hwS81Im9HJsPCtzsTqF7x7RpFMpN9N6jBd8WTNGGjOUMqtJRl86s
x+/+y91Uh+KHVK5CkTmSZQXuQQ62X2OzOngqT2BdlQYTwuw4TdsR65qRqlQ/Jtkr
qEQ5kNOmshswjKi6GEfG3oqfIKnA54CvEphKuoE+xLFy1YkW3Phf0I7fOm1k2jbe
G+l9HfXyb/Oy8AuTBoZhV43Icqe4smviGxtIoVwH2o950JUStABXwE1z08UHNCW8
lkw=
-----END CERTIFICATE-----
Generated at Thu May 1 12:52:55 2025 by rpki-client