Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/l5PfkpFvUKfuk3mjXZnOWwwG5Jw.roa
File: l5PfkpFvUKfuk3mjXZnOWwwG5Jw.roa (raw, json)
Hash identifier: tbg3uPFGRAK/YqAifGpbzcaqBQazPJs0OQN5+ZT4uyo=
Subject key identifier: 97:93:DF:92:91:6F:50:A7:EE:93:79:A3:5D:99:CE:5B:0C:06:E4:9C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185A83E2BF6CC66E0F98E1B61D21C454007
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/l5PfkpFvUKfuk3mjXZnOWwwG5Jw.roa
Signing time: Thu 12 Jan 2023 23:08:44 +0000
ROA not before: Thu 12 Jan 2023 23:08:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a8:3e:2b:f6:cc:66:e0:f9:8e:1b:61:d2:1c:45:40:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 12 23:08:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9793df92916f50a7ee9379a35d99ce5b0c06e49c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b4:dc:26:7a:9a:25:39:4a:21:32:d5:a2:47:
f9:73:9f:b2:06:e0:55:ef:9b:ee:82:9e:6e:be:d3:
52:f9:43:57:a3:91:22:eb:d2:12:c2:c0:f4:98:c6:
3c:69:55:59:a6:20:10:d0:b0:80:82:6e:30:ab:a4:
af:40:a1:9e:e0:d6:0c:ab:2a:ba:e0:0e:30:af:63:
c9:f6:7a:83:8e:0a:04:12:3b:82:83:5c:be:d7:19:
d5:06:45:1f:7a:59:f8:58:7c:85:0b:9c:d6:26:ce:
7e:a2:f7:4c:9f:ab:2a:8b:a8:0d:17:87:48:25:f6:
69:47:46:ab:ae:a9:62:08:65:88:74:8a:df:ec:d3:
c0:5e:66:f1:ca:21:7a:30:0a:be:54:86:17:e8:f1:
58:0c:7d:26:ff:ad:5d:40:19:a1:a0:a2:ff:41:83:
54:e7:a5:20:25:01:e3:51:5c:f4:cf:02:47:d6:ee:
a5:da:b9:c7:77:68:47:ed:64:e7:c7:c1:91:d5:10:
18:0c:64:45:41:f5:34:62:01:26:43:82:db:db:28:
94:73:81:cb:e6:96:29:f9:0e:1e:37:72:c5:15:ca:
45:fd:00:78:55:53:37:e2:60:1e:bf:50:4e:58:cc:
93:06:0b:b0:14:e3:33:94:61:eb:f4:23:81:03:3b:
16:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:93:DF:92:91:6F:50:A7:EE:93:79:A3:5D:99:CE:5B:0C:06:E4:9C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/l5PfkpFvUKfuk3mjXZnOWwwG5Jw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
94:47:bc:0d:44:a4:77:f0:30:e4:20:b6:7e:e4:57:cb:31:1f:
ad:17:bd:70:5a:60:a2:d5:5c:ef:ac:35:e7:98:68:e2:1d:f2:
23:22:0a:c5:6c:27:1e:a7:ad:fe:2b:6d:cb:7e:6d:87:63:94:
b4:70:c1:2b:50:05:74:9d:41:82:92:8c:ac:77:44:4b:ef:f1:
e3:13:cf:c4:be:b3:5e:69:67:3e:cd:8b:c3:06:f8:c9:48:3a:
4e:8f:cd:d5:21:65:80:e6:c1:fd:28:91:fa:40:ea:6e:e6:d3:
13:b8:b9:e0:ca:3b:b9:4a:51:5e:c5:24:d5:80:78:d5:0a:ea:
e7:35:64:da:8d:47:94:28:11:72:05:8d:16:75:2f:72:d9:78:
c2:53:dd:f4:e7:f1:12:56:12:ba:26:a6:e6:57:b9:35:08:2f:
19:a6:4c:d4:f4:4e:09:1d:db:1e:31:2e:44:8e:fa:be:e0:88:
46:e7:3a:34:5b:1c:7b:97:b3:a3:73:f1:bf:3c:a2:dc:27:2e:
d2:2f:55:63:1c:d5:5a:29:39:87:1f:21:63:72:92:8a:66:e0:
35:89:20:38:59:04:ee:63:e6:80:f1:d3:b0:4b:44:7d:97:ef:
a1:59:62:6f:72:a5:f0:5f:4b:f9:5b:27:2c:e5:c3:1b:b3:48:
ac:00:21:42
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYWoPiv2zGbg+Y4bYdIcRUAHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTEyMjMwODQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NzkzZGY5MjkxNmY1MGE3ZWU5Mzc5YTM1ZDk5Y2U1YjBjMDZlNDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrTcJnqaJTlKITLVokf5c5+yBuBV
75vugp5uvtNS+UNXo5Ei69ISwsD0mMY8aVVZpiAQ0LCAgm4wq6SvQKGe4NYMqyq6
4A4wr2PJ9nqDjgoEEjuCg1y+1xnVBkUfeln4WHyFC5zWJs5+ovdMn6sqi6gNF4dI
JfZpR0arrqliCGWIdIrf7NPAXmbxyiF6MAq+VIYX6PFYDH0m/61dQBmhoKL/QYNU
56UgJQHjUVz0zwJH1u6l2rnHd2hH7WTnx8GR1RAYDGRFQfU0YgEmQ4Lb2yiUc4HL
5pYp+Q4eN3LFFcpF/QB4VVM34mAev1BOWMyTBguwFOMzlGHr9COBAzsWGwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJeT35KRb1Cn7pN5o12ZzlsMBuScMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvbDVQZmtwRnZVS2Z1azNtalhabk9Xd3dHNUp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJRHvA1EpHfwMOQgtn7k
V8sxH60XvXBaYKLVXO+sNeeYaOId8iMiCsVsJx6nrf4rbct+bYdjlLRwwStQBXSd
QYKSjKx3REvv8eMTz8S+s15pZz7Ni8MG+MlIOk6PzdUhZYDmwf0okfpA6m7m0xO4
ueDKO7lKUV7FJNWAeNUK6uc1ZNqNR5QoEXIFjRZ1L3LZeMJT3fTn8RJWErompuZX
uTUILxmmTNT0Tgkd2x4xLkSO+r7giEbnOjRbHHuXs6Nz8b88otwnLtIvVWMc1Vop
OYcfIWNykopm4DWJIDhZBO5j5oDx07BLRH2X76FZYm9ypfBfS/lbJyzlwxuzSKwA
IUI=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:05 2025 by rpki-client