Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/myS1CmjXISj11GWcLn10JfhHgxs.roa
File: myS1CmjXISj11GWcLn10JfhHgxs.roa (raw, json)
Hash identifier: J/X4W8uktkJqLRocKsXLeSCZV45Og4xsU/O+fUVz9ls=
Subject key identifier: 9B:24:B5:0A:68:D7:21:28:F5:D4:65:9C:2E:7D:74:25:F8:47:83:1B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183124B88740B04B2A8405CA36D7064236C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/myS1CmjXISj11GWcLn10JfhHgxs.roa
Signing time: Tue 06 Sep 2022 10:14:43 +0000
ROA not before: Tue 06 Sep 2022 10:14:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:12:4b:88:74:0b:04:b2:a8:40:5c:a3:6d:70:64:23:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 6 10:14:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9b24b50a68d72128f5d4659c2e7d7425f847831b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d0:2e:f6:bd:ea:69:5c:03:c5:a2:83:e1:2b:
1b:67:f2:f5:4e:a8:11:2b:04:b2:71:fc:e1:de:b7:
a4:88:a6:ba:ca:98:5c:4d:4c:54:18:8e:8c:19:3e:
09:82:b2:d7:77:5a:de:f8:94:2c:8f:38:68:e2:2b:
fe:ff:4b:7b:60:08:c6:f0:e9:f8:65:e3:7b:0c:ef:
0f:cb:09:4e:e2:59:d9:c2:70:81:02:d8:c3:55:3a:
df:ca:5b:d6:a3:45:e4:bc:56:2e:6f:b5:eb:a3:c0:
7a:29:c3:90:c2:97:32:86:6b:80:0e:3a:e5:47:96:
5d:96:c8:1e:e9:69:46:25:e7:e8:54:f5:5f:1a:ef:
03:6f:28:db:0e:a2:d5:59:32:28:05:88:8e:42:e1:
d7:25:20:dd:2b:29:49:d0:5a:b8:64:89:b5:e1:a3:
cc:4f:f3:9d:b5:08:0b:80:c5:25:ee:ba:ec:62:9c:
56:20:61:03:02:7e:8d:a6:21:32:1e:a4:99:5e:4d:
af:26:42:2b:ec:de:8f:dd:a4:8c:84:a7:4a:ca:fc:
28:7e:32:47:1b:76:7d:b4:36:b6:ae:c8:b7:5f:ef:
f1:72:6e:dc:e1:58:97:94:de:a5:c2:86:ec:d9:a4:
cb:36:87:36:67:c5:e8:c5:33:88:13:3e:6a:cd:35:
ca:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:24:B5:0A:68:D7:21:28:F5:D4:65:9C:2E:7D:74:25:F8:47:83:1B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/myS1CmjXISj11GWcLn10JfhHgxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6a:4c:17:e1:1a:99:23:c2:75:85:1b:21:63:bf:d7:93:a0:1d:
b5:d1:09:0d:4c:90:3f:fb:00:4c:44:10:0e:bd:76:6e:3b:43:
ff:97:ed:ca:e7:34:4a:90:5b:6e:8e:3b:75:3c:04:9a:f5:c4:
65:48:25:e8:b7:29:06:fc:6c:b7:2c:c5:29:7f:85:79:a2:bd:
3b:3e:c2:9c:23:df:4d:eb:d7:b3:0f:4f:06:0b:85:3a:44:5b:
d9:70:c5:1f:4c:4a:61:79:7c:b9:ab:02:ba:6f:49:ea:d0:2f:
70:b3:7f:77:ad:ed:b1:fe:f2:d4:cf:c8:ce:99:f0:80:61:f3:
ba:12:42:af:46:a6:56:e9:75:42:e4:45:b2:4b:c8:ff:e7:aa:
13:4d:8d:0f:c0:53:a6:7f:51:68:66:37:d6:63:9c:d4:f2:a9:
7b:51:65:d4:f7:4b:d9:34:d5:94:b0:80:3b:37:6f:ce:68:09:
b7:0f:b3:c9:50:d2:82:e9:a2:ff:60:2f:77:14:c1:5b:00:f0:
4d:40:cc:9a:07:01:b3:3b:00:79:48:39:97:76:b5:67:3b:08:
1f:de:24:83:df:eb:22:51:69:3a:34:64:35:82:7f:f8:9b:9b:
31:4d:93:91:9e:51:9a:f5:29:48:e9:07:45:19:ae:a9:77:64:
34:3d:62:4b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYMSS4h0CwSyqEBco21wZCNsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwOTA2MTAxNDQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YjI0YjUwYTY4ZDcyMTI4ZjVkNDY1OWMyZTdkNzQyNWY4NDc4MzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotAu9r3qaVwDxaKD4SsbZ/L1TqgR
KwSycfzh3rekiKa6yphcTUxUGI6MGT4JgrLXd1re+JQsjzho4iv+/0t7YAjG8On4
ZeN7DO8PywlO4lnZwnCBAtjDVTrfylvWo0XkvFYub7Xro8B6KcOQwpcyhmuADjrl
R5Zdlsge6WlGJefoVPVfGu8DbyjbDqLVWTIoBYiOQuHXJSDdKylJ0Fq4ZIm14aPM
T/OdtQgLgMUl7rrsYpxWIGEDAn6NpiEyHqSZXk2vJkIr7N6P3aSMhKdKyvwofjJH
G3Z9tDa2rsi3X+/xcm7c4ViXlN6lwobs2aTLNoc2Z8XoxTOIEz5qzTXK6QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJsktQpo1yEo9dRlnC59dCX4R4MbMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvbXlTMUNtalhJU2oxMUdXY0xuMTBKZmhIZ3hzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGpMF+EamSPCdYUbIWO/
15OgHbXRCQ1MkD/7AExEEA69dm47Q/+X7crnNEqQW26OO3U8BJr1xGVIJei3KQb8
bLcsxSl/hXmivTs+wpwj303r17MPTwYLhTpEW9lwxR9MSmF5fLmrArpvSerQL3Cz
f3et7bH+8tTPyM6Z8IBh87oSQq9GplbpdULkRbJLyP/nqhNNjQ/AU6Z/UWhmN9Zj
nNTyqXtRZdT3S9k01ZSwgDs3b85oCbcPs8lQ0oLpov9gL3cUwVsA8E1AzJoHAbM7
AHlIOZd2tWc7CB/eJIPf6yJRaTo0ZDWCf/ibmzFNk5GeUZr1KUjpB0UZrql3ZDQ9
Yks=
-----END CERTIFICATE-----
Generated at Sun May 4 22:12:14 2025 by rpki-client