Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lLAlRqriYYZiNbDJcZ-d_cdjBVE.roa
File: lLAlRqriYYZiNbDJcZ-d_cdjBVE.roa (raw, json)
Hash identifier: Qho0yOY4P6rzBL7nktheh5y/F/36rT1R2Dds1GuP09w=
Subject key identifier: 94:B0:25:46:AA:E2:61:86:62:35:B0:C9:71:9F:9D:FD:C7:63:05:51
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01863A5FE410A6E01B26D8653420141C4471
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lLAlRqriYYZiNbDJcZ-d_cdjBVE.roa
Signing time: Fri 10 Feb 2023 08:10:08 +0000
ROA not before: Fri 10 Feb 2023 08:10:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3a:5f:e4:10:a6:e0:1b:26:d8:65:34:20:14:1c:44:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 10 08:10:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94b02546aae261866235b0c9719f9dfdc7630551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d2:24:7c:81:48:e3:25:db:69:04:dd:7f:41:
e9:e2:5d:72:86:7b:03:24:61:85:5b:b0:2b:65:54:
f7:67:5f:df:d5:e4:94:40:7d:6f:a6:93:75:09:25:
cf:18:40:22:61:b0:3d:e8:5e:d0:04:a1:d3:7e:d5:
78:12:f6:61:a8:74:40:d5:f7:0e:e1:e8:e6:66:37:
50:2c:2c:56:5f:b7:2d:fa:b3:fb:cc:94:6c:11:ad:
e0:e8:f6:a0:21:bc:a5:15:ce:70:64:b4:ad:21:9d:
2c:49:4c:2a:70:b6:cd:23:1d:8e:7b:3c:fe:ac:1d:
05:1b:95:db:93:27:e4:e1:f1:01:84:1b:a9:29:83:
93:df:1f:32:78:73:e8:91:6a:f8:d4:3b:89:2a:c8:
f4:9e:a1:c1:ed:9f:e9:88:cf:b7:12:76:b0:bc:58:
00:46:e9:55:3d:aa:d9:ec:27:bd:1e:c9:00:1d:22:
31:34:fc:99:92:bf:54:69:23:b9:0f:4b:f5:9a:9e:
4e:5f:e1:ee:8a:e7:17:b5:7a:f3:79:9c:8b:b7:13:
e0:c6:38:e4:a0:de:56:3c:8e:90:dd:5b:5a:3c:50:
1f:ac:7b:58:b8:56:68:ac:ce:72:a1:2f:4f:44:30:
30:7a:4c:2f:ef:86:4b:da:ea:8f:97:57:c4:5a:5d:
42:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B0:25:46:AA:E2:61:86:62:35:B0:C9:71:9F:9D:FD:C7:63:05:51
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lLAlRqriYYZiNbDJcZ-d_cdjBVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
66:4b:dc:e5:f8:36:e6:a5:2e:8a:3a:53:32:01:27:b4:08:09:
be:bc:25:32:8d:2b:3c:a8:09:f9:be:01:d6:0e:d1:6a:1d:5f:
5a:f8:c6:e4:cb:a7:b3:0a:ac:12:50:6a:1d:60:0d:8b:d6:4b:
2e:bf:30:8e:84:71:95:ca:32:9a:97:fe:0c:99:8f:f6:97:b3:
a0:09:c4:66:13:3f:5a:e1:f9:09:2e:2b:2b:a8:3e:7b:60:b9:
4b:7c:61:c4:6c:81:7e:fc:2f:21:bf:72:02:85:f7:83:c1:52:
78:eb:9b:64:80:d8:bb:d3:8e:f6:67:18:81:b5:42:8d:cc:60:
ce:a9:31:69:76:2d:af:b3:ec:c6:02:9e:67:49:dd:e3:b4:cc:
b0:13:61:31:34:d9:51:8e:31:9a:05:b7:3a:47:bb:57:b3:bb:
3b:be:53:ed:26:ee:5d:32:fa:74:4a:b3:91:a3:2a:f0:3c:e0:
72:70:5d:b9:cd:5e:b1:24:cc:f1:a7:7c:7b:98:57:61:c8:5d:
4c:21:7f:0f:4a:97:2e:82:e3:4d:7d:3b:47:62:16:cd:8e:0e:
94:39:a6:ad:e2:5a:f7:68:cb:6d:0f:20:33:ba:db:1f:06:93:
b8:60:84:84:2c:f3:44:89:3e:eb:7c:75:91:43:ef:ce:13:af:
f1:34:38:14
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYY6X+QQpuAbJthlNCAUHERxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjEwMDgxMDA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NGIwMjU0NmFhZTI2MTg2NjIzNWIwYzk3MTlmOWRmZGM3NjMwNTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtIkfIFI4yXbaQTdf0Hp4l1yhnsD
JGGFW7ArZVT3Z1/f1eSUQH1vppN1CSXPGEAiYbA96F7QBKHTftV4EvZhqHRA1fcO
4ejmZjdQLCxWX7ct+rP7zJRsEa3g6PagIbylFc5wZLStIZ0sSUwqcLbNIx2Oezz+
rB0FG5Xbkyfk4fEBhBupKYOT3x8yeHPokWr41DuJKsj0nqHB7Z/piM+3EnawvFgA
RulVParZ7Ce9HskAHSIxNPyZkr9UaSO5D0v1mp5OX+HuiucXtXrzeZyLtxPgxjjk
oN5WPI6Q3VtaPFAfrHtYuFZorM5yoS9PRDAwekwv74ZL2uqPl1fEWl1CeQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJSwJUaq4mGGYjWwyXGfnf3HYwVRMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvbExBbFJxcmlZWVppTmJESmNaLWRfY2RqQlZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGZL3OX4NualLoo6UzIB
J7QICb68JTKNKzyoCfm+AdYO0WodX1r4xuTLp7MKrBJQah1gDYvWSy6/MI6EcZXK
MpqX/gyZj/aXs6AJxGYTP1rh+QkuKyuoPntguUt8YcRsgX78LyG/cgKF94PBUnjr
m2SA2LvTjvZnGIG1Qo3MYM6pMWl2La+z7MYCnmdJ3eO0zLATYTE02VGOMZoFtzpH
u1ezuzu+U+0m7l0y+nRKs5GjKvA84HJwXbnNXrEkzPGnfHuYV2HIXUwhfw9Kly6C
4019O0diFs2ODpQ5pq3iWvdoy20PIDO62x8Gk7hghIQs80SJPut8dZFD784Tr/E0
OBQ=
-----END CERTIFICATE-----
Generated at Thu May 1 06:45:29 2025 by rpki-client