Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mNJgUwhAW0PiEqGGHckvE0Oo1hY.roa
File: mNJgUwhAW0PiEqGGHckvE0Oo1hY.roa (raw, json)
Hash identifier: HNOW79xFkQeX63YnaT+GWMeYKcvL0gdg3biZ7yfHEtA=
Subject key identifier: 98:D2:60:53:08:40:5B:43:E2:12:A1:86:1D:C9:2F:13:43:A8:D6:16
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01842D50A784D801BC8879E9A8A69A8811BC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mNJgUwhAW0PiEqGGHckvE0Oo1hY.roa
Signing time: Mon 31 Oct 2022 09:12:51 +0000
ROA not before: Mon 31 Oct 2022 09:12:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:2d:50:a7:84:d8:01:bc:88:79:e9:a8:a6:9a:88:11:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 31 09:12:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=98d2605308405b43e212a1861dc92f1343a8d616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:13:bc:f2:c6:c2:69:36:54:db:3e:1b:d0:07:
ca:a5:62:f2:da:aa:3b:ee:1e:77:03:0e:9d:46:e0:
8e:0c:bf:74:9c:6a:11:b3:d8:a1:45:02:b5:29:d9:
91:a4:8f:3e:47:bf:a5:1f:b5:4e:0a:23:6e:e2:c2:
8d:32:9b:80:28:5e:81:f8:22:56:6e:f3:b3:fa:ad:
9f:50:60:c0:19:53:ab:40:25:d9:03:71:06:c3:91:
c3:fe:6a:bb:64:b6:34:9e:31:6a:b8:06:10:4f:a5:
16:81:7d:74:15:dc:96:dc:72:49:82:9d:61:1e:af:
7e:d8:cb:a8:97:29:6a:d9:71:fe:a1:cb:9c:84:84:
45:26:bd:90:75:25:ce:ec:19:0e:ef:50:3d:be:ab:
83:8a:f2:c4:a3:03:a6:1d:61:6a:fe:cb:44:a0:34:
bb:47:f6:b1:8d:8a:ee:46:bc:78:9f:80:d3:72:d3:
4d:a3:29:af:b4:42:38:3a:37:fe:9b:3c:f5:01:21:
51:4e:9d:a4:58:68:87:a3:cc:25:72:e5:c0:95:c6:
c4:82:b8:a1:2b:c3:79:15:df:a3:1c:3f:4c:72:f3:
95:90:68:ae:49:ea:5c:7c:23:3e:ed:81:db:16:df:
92:38:ca:82:eb:c3:bd:92:97:29:1f:22:3b:d6:5c:
a8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D2:60:53:08:40:5B:43:E2:12:A1:86:1D:C9:2F:13:43:A8:D6:16
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mNJgUwhAW0PiEqGGHckvE0Oo1hY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5b:64:e8:ad:e3:0b:eb:5e:6a:93:31:9a:cb:a2:97:7d:58:44:
3b:af:d0:54:24:ce:f8:2d:7e:00:ba:e0:76:df:53:86:5f:db:
f2:9c:8b:77:43:24:5e:31:fa:25:9b:7f:02:e3:9d:88:b0:77:
54:8c:60:aa:ff:56:3b:35:2f:a1:1d:fe:f4:85:5e:1b:9e:ab:
cc:e9:f6:b2:6d:35:28:20:6b:12:1d:db:c4:7f:3f:ec:e5:79:
d2:ce:59:4f:06:14:09:16:09:ac:b7:48:15:b9:ea:c7:c9:e7:
46:54:a1:b5:e7:d3:af:ad:f4:71:87:8d:b6:79:ea:46:d3:37:
3a:6a:9b:a8:c2:95:52:02:5e:91:b7:e8:10:61:80:4a:ac:a8:
28:31:ca:5a:23:7d:72:70:67:00:73:66:83:75:8a:65:71:ed:
9e:5b:5c:2e:77:ef:ad:9d:01:34:67:a3:87:08:5e:0e:71:ad:
f5:4d:b3:5c:0f:f8:10:8d:6e:57:68:68:4c:5f:3a:f7:6e:69:
41:1e:14:0a:a1:33:af:f2:10:3a:0e:96:ec:1e:79:d1:54:e4:
c2:bf:be:5a:9f:0e:5a:b1:70:71:4f:d4:e0:8b:09:8b:86:ce:
23:57:bb:2d:99:d4:0f:0f:b8:04:25:fb:79:77:aa:a2:72:24:
bc:d0:cd:fd
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYQtUKeE2AG8iHnpqKaaiBG8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMDMxMDkxMjUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OGQyNjA1MzA4NDA1YjQzZTIxMmExODYxZGM5MmYxMzQzYThkNjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBO88sbCaTZU2z4b0AfKpWLy2qo7
7h53Aw6dRuCODL90nGoRs9ihRQK1KdmRpI8+R7+lH7VOCiNu4sKNMpuAKF6B+CJW
bvOz+q2fUGDAGVOrQCXZA3EGw5HD/mq7ZLY0njFquAYQT6UWgX10FdyW3HJJgp1h
Hq9+2Muolylq2XH+ocuchIRFJr2QdSXO7BkO71A9vquDivLEowOmHWFq/stEoDS7
R/axjYruRrx4n4DTctNNoymvtEI4Ojf+mzz1ASFRTp2kWGiHo8wlcuXAlcbEgrih
K8N5Fd+jHD9McvOVkGiuSepcfCM+7YHbFt+SOMqC68O9kpcpHyI71lyoPwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJjSYFMIQFtD4hKhhh3JLxNDqNYWMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvbU5KZ1V3aEFXMFBpRXFHR0hja3ZFME9vMWhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFtk6K3jC+teapMxmsui
l31YRDuv0FQkzvgtfgC64HbfU4Zf2/Kci3dDJF4x+iWbfwLjnYiwd1SMYKr/Vjs1
L6Ed/vSFXhueq8zp9rJtNSggaxId28R/P+zledLOWU8GFAkWCay3SBW56sfJ50ZU
obXn06+t9HGHjbZ56kbTNzpqm6jClVICXpG36BBhgEqsqCgxylojfXJwZwBzZoN1
imVx7Z5bXC53762dATRno4cIXg5xrfVNs1wP+BCNbldoaExfOvduaUEeFAqhM6/y
EDoOluweedFU5MK/vlqfDlqxcHFP1OCLCYuGziNXuy2Z1A8PuAQl+3l3qqJyJLzQ
zf0=
-----END CERTIFICATE-----
Generated at Wed Apr 30 20:20:43 2025 by rpki-client