Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/o0U2tBs42QtumgkWTYm3N11X6jk.roa
File: o0U2tBs42QtumgkWTYm3N11X6jk.roa (raw, json)
Hash identifier: QZdXBLlE2sw5Pn5HXeVoj36wak5cLE4G9/BdNVtP5As=
Subject key identifier: A3:45:36:B4:1B:38:D9:0B:6E:9A:09:16:4D:89:B7:37:5D:57:EA:39
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01852C6EA20E8194A3778E6C29D42C3AF462
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/o0U2tBs42QtumgkWTYm3N11X6jk.roa
Signing time: Mon 19 Dec 2022 22:08:46 +0000
ROA not before: Mon 19 Dec 2022 22:08:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2c:6e:a2:0e:81:94:a3:77:8e:6c:29:d4:2c:3a:f4:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 19 22:08:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a34536b41b38d90b6e9a09164d89b7375d57ea39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1f:40:34:b1:18:60:2b:8f:2c:0b:aa:83:45:
fe:dd:c2:2f:21:f9:fd:7b:ab:c3:f9:db:98:cc:3e:
b3:77:fb:68:2f:55:a4:7c:ac:57:02:6c:78:0e:00:
f3:cf:8f:a5:97:a4:c1:6a:c0:7e:b1:20:3c:be:ba:
f9:e5:76:0b:1a:b6:26:bc:52:66:d8:52:65:80:1d:
01:2e:99:d9:28:0f:e8:21:38:d0:2a:51:23:60:72:
a9:71:28:09:6e:37:5c:26:3a:4b:b2:03:e1:ff:8a:
d5:10:00:21:0b:60:5f:53:28:fc:2d:fd:37:6f:80:
e5:02:df:6b:5e:d9:f7:10:7f:ca:c8:e1:3d:86:ce:
62:ba:1a:f5:ba:5c:6a:f9:2a:da:96:93:c4:1a:13:
66:56:e2:a2:24:ef:75:a8:0e:49:15:f3:f9:85:c6:
00:8d:4d:67:0e:ad:b4:78:63:59:f1:47:9b:64:df:
99:71:b9:84:56:5f:54:cb:b7:d6:14:38:ce:44:8f:
4f:19:2b:bb:36:fa:5a:b2:54:eb:cc:e7:a1:da:c2:
a5:02:d5:b6:2d:5e:44:0b:e8:33:fc:94:78:01:60:
2c:3f:35:5e:b8:f1:08:2d:ff:f2:dc:46:c8:63:36:
e1:c7:01:c5:04:85:49:96:b3:bb:12:05:c6:64:58:
37:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:45:36:B4:1B:38:D9:0B:6E:9A:09:16:4D:89:B7:37:5D:57:EA:39
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/o0U2tBs42QtumgkWTYm3N11X6jk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5e:e5:01:26:75:31:8c:7d:ea:8f:ce:a4:6e:7f:8c:b9:52:6f:
71:28:b0:72:7f:df:c8:8e:54:05:5b:f1:10:75:a5:16:77:44:
1d:9f:05:05:57:dc:7c:6e:65:50:68:b6:22:96:c3:7a:82:1f:
4d:b3:6c:4d:36:0d:74:ae:77:87:8a:d1:d5:08:b6:7a:4f:3d:
5f:64:e0:33:10:ee:c8:58:9c:67:32:e7:59:c9:bc:72:27:de:
a8:30:2b:91:02:6a:3e:14:cc:43:5b:63:58:28:0c:9b:cc:ee:
2d:b2:77:6e:e9:7b:e6:21:c7:26:f8:d5:8b:d3:5d:cc:c6:96:
c8:aa:b6:8c:af:b2:33:cf:8f:e2:53:71:38:7d:64:44:39:4e:
1a:d2:fe:07:33:99:0a:0d:13:43:d2:e0:f4:4b:0f:de:ef:ce:
86:75:2f:9e:7c:7e:37:36:f2:08:7b:3b:26:6d:86:c1:8e:0e:
1d:55:a9:3d:7a:95:2c:31:48:d4:d4:92:6b:e4:9a:42:83:91:
83:37:05:cd:ec:db:a6:08:af:56:c3:49:93:33:ea:ca:c8:ca:
e7:8b:a2:1f:92:9c:3f:d3:a8:7b:e4:93:0a:03:b1:87:03:86:
5c:a9:14:cc:13:eb:1f:09:b9:6b:c2:fe:d7:e7:3d:db:9f:d5:
b0:79:5d:4f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYUsbqIOgZSjd45sKdQsOvRiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjE5MjIwODQ2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMzQ1MzZiNDFiMzhkOTBiNmU5YTA5MTY0ZDg5YjczNzVkNTdlYTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0x9ANLEYYCuPLAuqg0X+3cIvIfn9
e6vD+duYzD6zd/toL1WkfKxXAmx4DgDzz4+ll6TBasB+sSA8vrr55XYLGrYmvFJm
2FJlgB0BLpnZKA/oITjQKlEjYHKpcSgJbjdcJjpLsgPh/4rVEAAhC2BfUyj8Lf03
b4DlAt9rXtn3EH/KyOE9hs5iuhr1ulxq+SralpPEGhNmVuKiJO91qA5JFfP5hcYA
jU1nDq20eGNZ8UebZN+ZcbmEVl9Uy7fWFDjORI9PGSu7NvpaslTrzOeh2sKlAtW2
LV5EC+gz/JR4AWAsPzVeuPEILf/y3EbIYzbhxwHFBIVJlrO7EgXGZFg3GwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKNFNrQbONkLbpoJFk2JtzddV+o5MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvbzBVMnRCczQyUXR1bWdrV1RZbTNOMTFYNmprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAF7lASZ1MYx96o/OpG5/
jLlSb3EosHJ/38iOVAVb8RB1pRZ3RB2fBQVX3HxuZVBotiKWw3qCH02zbE02DXSu
d4eK0dUItnpPPV9k4DMQ7shYnGcy51nJvHIn3qgwK5ECaj4UzENbY1goDJvM7i2y
d27pe+Yhxyb41YvTXczGlsiqtoyvsjPPj+JTcTh9ZEQ5ThrS/gczmQoNE0PS4PRL
D97vzoZ1L558fjc28gh7OyZthsGODh1VqT16lSwxSNTUkmvkmkKDkYM3Bc3s26YI
r1bDSZMz6srIyueLoh+SnD/TqHvkkwoDsYcDhlypFMwT6x8JuWvC/tfnPduf1bB5
XU8=
-----END CERTIFICATE-----
Generated at Thu May 1 09:01:43 2025 by rpki-client