Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lsFvHPRxr8zMZMRO4sVkuP0pzFc.roa
File: lsFvHPRxr8zMZMRO4sVkuP0pzFc.roa (raw, json)
Hash identifier: aBVzeBRk3sevaQTeooHtQm74RCeSCVsfZfTNfNShloQ=
Subject key identifier: 96:C1:6F:1C:F4:71:AF:CC:CC:64:C4:4E:E2:C5:64:B8:FD:29:CC:57
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A349030BC950329C3750C0C5D94496268
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lsFvHPRxr8zMZMRO4sVkuP0pzFc.roa
Signing time: Sun 27 Aug 2023 01:16:19 +0000
ROA not before: Sun 27 Aug 2023 01:16:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:34:90:30:bc:95:03:29:c3:75:0c:0c:5d:94:49:62:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 27 01:16:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=96c16f1cf471afcccc64c44ee2c564b8fd29cc57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:94:2c:20:3a:a3:97:59:95:55:67:f9:ea:c3:
a3:cc:69:ad:44:d7:43:e7:d3:8a:52:0d:8c:ef:f2:
5f:ea:36:be:c9:13:0d:ec:33:d4:f2:a4:34:6c:c8:
9b:3b:8e:89:0b:1a:f5:3b:bc:01:06:45:15:22:12:
6a:7a:f7:d4:82:21:e5:95:95:d2:2c:b5:ba:62:9b:
51:73:05:90:09:2d:6a:4a:ea:74:72:fa:b6:f3:2a:
b4:b4:8f:82:f1:2b:a6:5c:ab:b8:73:75:03:e8:56:
00:eb:42:c6:5a:2e:f4:9a:dc:8f:21:c8:d7:19:a4:
12:4f:b0:04:c4:98:70:78:c6:a9:1a:9b:f5:3d:e1:
cc:0b:06:b8:d0:20:8b:20:86:3e:81:4e:84:33:fc:
69:8c:d0:b4:ca:cf:12:a4:00:28:1d:95:b5:45:04:
fa:73:3f:ba:ce:b6:04:31:65:84:c9:d7:b2:1c:cd:
8d:8a:39:29:0c:50:ec:95:56:3c:97:89:cc:82:eb:
9c:bf:0b:11:00:aa:a4:04:e3:a0:38:af:56:b9:09:
e7:23:fe:0c:50:b3:67:e8:33:17:78:98:bb:a3:8c:
82:6b:cb:22:5f:5a:d8:d7:cb:52:44:75:73:d4:3c:
d3:e7:a7:2d:f1:3d:92:3d:d0:9b:a8:3c:a8:e3:dc:
ed:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C1:6F:1C:F4:71:AF:CC:CC:64:C4:4E:E2:C5:64:B8:FD:29:CC:57
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lsFvHPRxr8zMZMRO4sVkuP0pzFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
29:ed:dc:8b:b9:53:b0:9d:3b:72:82:28:44:81:d7:3b:6c:86:
4c:96:73:92:45:95:58:c4:58:bd:7f:3d:d6:11:d7:47:8e:a2:
bf:48:db:ae:75:c3:eb:c8:d9:a1:8d:9b:08:28:92:6d:7c:46:
34:62:d8:e0:30:8b:81:9c:f1:02:5d:6c:44:12:6f:1d:50:6c:
8e:4e:0d:16:52:5e:d9:30:44:e7:ac:70:34:38:27:31:f9:1a:
84:a7:ef:5c:bb:93:19:9f:2f:fe:3d:24:48:82:99:ee:17:13:
e5:f9:a1:91:88:22:1e:0f:de:b3:d9:cc:dc:f1:61:90:8f:52:
ac:4e:61:f7:0c:30:3c:ad:b9:83:b5:52:b0:15:33:4e:be:84:
d3:bc:79:2f:9a:f0:11:49:6b:f1:ac:7f:a7:3b:6e:25:4e:7f:
e3:36:63:26:0f:f6:f1:04:6f:2b:84:a3:34:47:0c:02:1b:c0:
3f:09:67:2a:f0:85:42:d9:63:8a:7c:e6:73:19:31:7e:28:95:
6b:6e:c2:74:68:23:4e:c7:53:05:a2:cd:59:38:d1:dd:4d:66:
88:25:a8:fd:32:13:11:c9:42:55:4e:18:8d:34:bf:e2:af:ed:
9e:98:d1:a6:1c:e9:95:8b:e2:5e:92:d9:be:83:0e:13:3e:00:
a7:f0:af:fe
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYo0kDC8lQMpw3UMDF2USWJoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODI3MDExNjE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NmMxNmYxY2Y0NzFhZmNjY2M2NGM0NGVlMmM1NjRiOGZkMjljYzU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJQsIDqjl1mVVWf56sOjzGmtRNdD
59OKUg2M7/Jf6ja+yRMN7DPU8qQ0bMibO46JCxr1O7wBBkUVIhJqevfUgiHllZXS
LLW6YptRcwWQCS1qSup0cvq28yq0tI+C8SumXKu4c3UD6FYA60LGWi70mtyPIcjX
GaQST7AExJhweMapGpv1PeHMCwa40CCLIIY+gU6EM/xpjNC0ys8SpAAoHZW1RQT6
cz+6zrYEMWWEydeyHM2NijkpDFDslVY8l4nMguucvwsRAKqkBOOgOK9WuQnnI/4M
ULNn6DMXeJi7o4yCa8siX1rY18tSRHVz1DzT56ct8T2SPdCbqDyo49ztmwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJbBbxz0ca/MzGTETuLFZLj9KcxXMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvbHNGdkhQUnhyOHpNWk1STzRzVmt1UDBwekZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACnt3Iu5U7CdO3KCKESB
1ztshkyWc5JFlVjEWL1/PdYR10eOor9I2651w+vI2aGNmwgokm18RjRi2OAwi4Gc
8QJdbEQSbx1QbI5ODRZSXtkwROescDQ4JzH5GoSn71y7kxmfL/49JEiCme4XE+X5
oZGIIh4P3rPZzNzxYZCPUqxOYfcMMDytuYO1UrAVM06+hNO8eS+a8BFJa/Gsf6c7
biVOf+M2YyYP9vEEbyuEozRHDAIbwD8JZyrwhULZY4p85nMZMX4olWtuwnRoI07H
UwWizVk40d1NZoglqP0yExHJQlVOGI00v+Kv7Z6Y0aYc6ZWL4l6S2b6DDhM+AKfw
r/4=
-----END CERTIFICATE-----
Generated at Wed Apr 30 20:41:07 2025 by rpki-client