Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/n2v64EAoQJqNBY3PX4pdkO7exv4.roa
File: n2v64EAoQJqNBY3PX4pdkO7exv4.roa (raw, json)
Hash identifier: Q7uQgr52EIk9w/f9xdUQ1DlyfaT3dKbZchuCMNO7uYE=
Subject key identifier: 9F:6B:FA:E0:40:28:40:9A:8D:05:8D:CF:5F:8A:5D:90:EE:DE:C6:FE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A361634BD0A808E256AFD82C7AD0F956C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/n2v64EAoQJqNBY3PX4pdkO7exv4.roa
Signing time: Sun 27 Aug 2023 08:22:19 +0000
ROA not before: Sun 27 Aug 2023 08:22:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:36:16:34:bd:0a:80:8e:25:6a:fd:82:c7:ad:0f:95:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 27 08:22:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f6bfae04028409a8d058dcf5f8a5d90eedec6fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f3:15:0f:c9:4a:f0:40:b0:6d:da:03:5b:f9:
06:fc:97:b4:c4:29:6a:05:c2:b8:ab:8e:8b:72:da:
66:c0:b7:be:21:8c:ea:37:73:a5:a2:c9:0e:50:37:
0b:83:d4:c7:6e:9b:13:ac:d0:f2:e6:b4:6c:22:08:
89:89:c6:7c:6f:63:c2:c4:56:a7:8d:0b:91:d1:4e:
a4:aa:c9:98:7d:82:ee:f9:6d:9f:3f:25:67:26:81:
9f:0b:75:77:a4:e0:b0:bc:f6:92:50:80:7c:65:b1:
a8:a8:b7:07:21:47:7e:a3:59:12:bf:28:f5:44:f9:
36:fc:6f:7e:6b:9d:dc:cd:59:b5:d0:6e:59:7a:94:
ed:72:f1:0a:af:b9:80:8b:2b:17:e1:2f:40:80:bb:
07:4d:10:35:52:c2:5a:62:65:76:23:27:33:da:5f:
13:0d:9d:5c:db:9a:6b:97:c8:f4:a7:e3:f4:ae:fc:
5e:68:7b:e7:78:d5:85:b2:4b:18:af:6e:d9:57:90:
1c:1c:eb:e4:1c:e4:d2:aa:69:14:5c:77:7e:4a:19:
c3:5a:cf:d7:96:ba:2c:83:40:ca:10:af:b2:bf:8c:
81:24:0c:ff:ed:52:84:2f:6b:90:2e:4a:1c:cc:c2:
b9:45:c9:9f:2c:22:eb:44:28:63:55:1d:cb:c7:6f:
71:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:6B:FA:E0:40:28:40:9A:8D:05:8D:CF:5F:8A:5D:90:EE:DE:C6:FE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/n2v64EAoQJqNBY3PX4pdkO7exv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
73:e3:d9:fb:27:d4:49:7d:b3:1d:bc:da:64:38:96:6c:d8:4c:
7e:dd:5b:14:a8:ca:b2:a7:01:9d:65:7e:fd:5f:cc:c8:c6:10:
a1:47:26:bf:f9:c4:c9:91:f1:13:1f:13:03:85:eb:cf:16:a7:
a9:78:34:5c:2c:97:6c:05:f8:e4:ea:2e:2d:d8:33:c9:2a:f7:
2d:ff:90:30:d6:e6:64:85:6d:ec:ef:2e:6e:11:e0:58:66:22:
82:26:57:ac:e3:f4:32:fd:57:bc:c8:49:46:ef:ab:8a:d6:0e:
38:4c:4b:5b:44:ac:59:6a:de:fa:03:ac:1d:94:5c:64:d7:b1:
0e:ca:b5:7e:d9:7b:e3:f6:a8:43:e0:26:bc:5f:55:a3:76:42:
30:8f:b7:a3:dd:3d:97:ca:ff:db:20:6a:60:9b:69:c8:8b:bf:
68:df:ac:b0:d2:fa:30:62:50:cb:0a:8d:c9:7d:2b:4a:78:0c:
3b:a9:17:a3:29:86:9e:8a:c7:bf:a3:2b:8d:dc:3a:2f:81:80:
38:ab:52:7e:43:fd:8b:90:6f:52:42:55:7d:ea:39:77:e5:d2:
d7:f2:da:2f:63:2d:58:b8:0d:40:f4:92:59:79:3a:07:66:1e:
f4:04:71:9f:be:88:47:fe:e1:97:17:a9:09:f0:45:2c:cb:b7:
a0:f6:b8:33
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYo2FjS9CoCOJWr9gsetD5VsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODI3MDgyMjE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjZiZmFlMDQwMjg0MDlhOGQwNThkY2Y1ZjhhNWQ5MGVlZGVjNmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPMVD8lK8ECwbdoDW/kG/Je0xClq
BcK4q46LctpmwLe+IYzqN3OloskOUDcLg9THbpsTrNDy5rRsIgiJicZ8b2PCxFan
jQuR0U6kqsmYfYLu+W2fPyVnJoGfC3V3pOCwvPaSUIB8ZbGoqLcHIUd+o1kSvyj1
RPk2/G9+a53czVm10G5ZepTtcvEKr7mAiysX4S9AgLsHTRA1UsJaYmV2Iycz2l8T
DZ1c25prl8j0p+P0rvxeaHvneNWFsksYr27ZV5AcHOvkHOTSqmkUXHd+ShnDWs/X
lrosg0DKEK+yv4yBJAz/7VKEL2uQLkoczMK5RcmfLCLrRChjVR3Lx29xWQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJ9r+uBAKECajQWNz1+KXZDu3sb+MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvbjJ2NjRFQW9RSnFOQlkzUFg0cGRrTzdleHY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHPj2fsn1El9sx282mQ4
lmzYTH7dWxSoyrKnAZ1lfv1fzMjGEKFHJr/5xMmR8RMfEwOF688Wp6l4NFwsl2wF
+OTqLi3YM8kq9y3/kDDW5mSFbezvLm4R4FhmIoImV6zj9DL9V7zISUbvq4rWDjhM
S1tErFlq3voDrB2UXGTXsQ7KtX7Ze+P2qEPgJrxfVaN2QjCPt6PdPZfK/9sgamCb
aciLv2jfrLDS+jBiUMsKjcl9K0p4DDupF6Mphp6Kx7+jK43cOi+BgDirUn5D/YuQ
b1JCVX3qOXfl0tfy2i9jLVi4DUD0kll5OgdmHvQEcZ++iEf+4ZcXqQnwRSzLt6D2
uDM=
-----END CERTIFICATE-----
Generated at Thu May 1 12:50:52 2025 by rpki-client