Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lBSb9bJLa0bElVq5Xeb4_wiKFq4.roa
File: lBSb9bJLa0bElVq5Xeb4_wiKFq4.roa (raw, json)
Hash identifier: G79Qyr4CHraaE1MdWqaClFDj+1EDwmdMvG+gxMCu9Pc=
Subject key identifier: 94:14:9B:F5:B2:4B:6B:46:C4:95:5A:B9:5D:E6:F8:FF:08:8A:16:AE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183B9E0D0536BBA654717E0A92A7440F4FC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lBSb9bJLa0bElVq5Xeb4_wiKFq4.roa
Signing time: Sat 08 Oct 2022 23:14:21 +0000
ROA not before: Sat 08 Oct 2022 23:14:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b9:e0:d0:53:6b:ba:65:47:17:e0:a9:2a:74:40:f4:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 8 23:14:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=94149bf5b24b6b46c4955ab95de6f8ff088a16ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2a:11:b1:db:98:04:ac:a4:43:c0:de:b4:0c:
75:a5:24:82:fc:4a:97:7e:43:93:8d:70:87:39:01:
29:a6:fc:35:5b:23:53:b6:cb:f8:97:11:85:4f:48:
73:5c:62:fc:d8:5e:14:0a:98:4a:79:f4:08:19:1e:
6b:e6:fe:35:ae:23:32:b8:bd:e9:14:c8:7e:d0:89:
8f:13:df:57:9e:41:fe:1b:34:c1:8f:fe:81:26:b7:
d1:18:3b:b2:b2:39:e0:8e:4c:46:66:4c:c9:ff:fd:
d5:59:82:38:5b:3d:49:7f:bd:fc:77:04:71:0b:7f:
03:30:ce:50:1b:ad:dc:98:27:7a:da:18:d5:42:ea:
60:7e:c4:2d:5c:04:fa:f5:86:80:d9:2e:db:7a:cf:
38:df:05:23:72:82:88:cf:ff:a4:43:77:b4:85:2e:
46:c8:21:20:44:0b:e6:44:86:3f:f9:f5:4b:0c:20:
8b:25:6c:1d:ad:ef:ef:45:2b:0f:25:44:7e:73:8d:
05:f3:7c:c9:0b:6e:32:73:b3:d5:00:0b:3a:24:ac:
49:db:42:ae:26:a9:ae:55:ee:06:37:7b:97:21:1d:
c8:c2:61:8b:4b:9c:5d:65:fb:db:5c:2d:1b:5e:53:
5e:f7:09:f0:c0:62:5e:82:e1:ff:3b:12:c5:8e:4e:
54:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:14:9B:F5:B2:4B:6B:46:C4:95:5A:B9:5D:E6:F8:FF:08:8A:16:AE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lBSb9bJLa0bElVq5Xeb4_wiKFq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
92:e4:8b:c2:b7:7e:32:86:87:f9:0b:39:40:72:3e:7a:38:df:
8d:7c:41:b7:ec:14:87:30:93:4e:3b:08:1e:f3:d1:05:7d:5d:
e5:dc:21:62:9c:ad:4a:39:aa:e7:d7:ba:cb:2a:86:b8:86:b2:
f5:9d:52:60:12:39:65:9d:3d:ca:c9:1b:68:c5:f0:3d:14:87:
09:30:0d:58:3f:07:8e:0e:7e:9b:ba:5f:55:64:3a:8e:a5:fd:
4b:78:40:29:85:e3:30:98:ad:e3:18:71:ff:32:89:7a:9a:08:
cb:f4:d9:a9:a6:b2:6f:7b:55:a3:34:9d:93:08:e4:a8:de:d5:
28:ae:d0:77:0b:42:d7:e1:2a:50:10:d7:6a:b5:69:f0:72:a9:
c2:f5:18:fd:f0:d1:57:5a:1d:48:c7:ad:4b:ba:4e:5a:38:b8:
b4:74:74:3c:c2:f7:97:6a:fd:b0:79:f4:7f:1f:71:8f:42:46:
88:8b:9e:cb:52:68:3b:0c:68:51:76:56:b2:97:c1:7e:d2:14:
16:0e:8a:94:84:74:c9:c2:ca:92:ed:5c:42:12:60:75:a3:01:
e3:79:d2:01:84:0a:60:df:9c:20:1d:07:cb:1a:55:c7:2e:dc:
8e:40:f6:0c:c7:c0:db:e3:6e:1c:f9:3a:df:35:d5:6e:bb:5b:
39:9c:ff:44
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYO54NBTa7plRxfgqSp0QPT8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMDA4MjMxNDIxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDE0OWJmNWIyNGI2YjQ2YzQ5NTVhYjk1ZGU2ZjhmZjA4OGExNmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCoRsduYBKykQ8DetAx1pSSC/EqX
fkOTjXCHOQEppvw1WyNTtsv4lxGFT0hzXGL82F4UCphKefQIGR5r5v41riMyuL3p
FMh+0ImPE99XnkH+GzTBj/6BJrfRGDuysjngjkxGZkzJ//3VWYI4Wz1Jf738dwRx
C38DMM5QG63cmCd62hjVQupgfsQtXAT69YaA2S7bes843wUjcoKIz/+kQ3e0hS5G
yCEgRAvmRIY/+fVLDCCLJWwdre/vRSsPJUR+c40F83zJC24yc7PVAAs6JKxJ20Ku
JqmuVe4GN3uXIR3IwmGLS5xdZfvbXC0bXlNe9wnwwGJeguH/OxLFjk5UDQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJQUm/WyS2tGxJVauV3m+P8IihauMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvbEJTYjliSkxhMGJFbFZxNVhlYjRfd2lLRnE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJLki8K3fjKGh/kLOUBy
Pno43418QbfsFIcwk047CB7z0QV9XeXcIWKcrUo5qufXussqhriGsvWdUmASOWWd
PcrJG2jF8D0UhwkwDVg/B44Ofpu6X1VkOo6l/Ut4QCmF4zCYreMYcf8yiXqaCMv0
2ammsm97VaM0nZMI5Kje1Siu0HcLQtfhKlAQ12q1afByqcL1GP3w0VdaHUjHrUu6
Tlo4uLR0dDzC95dq/bB59H8fcY9CRoiLnstSaDsMaFF2VrKXwX7SFBYOipSEdMnC
ypLtXEISYHWjAeN50gGECmDfnCAdB8saVccu3I5A9gzHwNvjbhz5Ot811W67Wzmc
/0Q=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:02 2025 by rpki-client