Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/p5aGMwtcZyuu6VZVXSv-IqHoSr8.roa
File: p5aGMwtcZyuu6VZVXSv-IqHoSr8.roa (raw, json)
Hash identifier: 8lOkek+agUmLc1hvirznkB3EK6hIPTZMyhDDFskDFkE=
Subject key identifier: A7:96:86:33:0B:5C:67:2B:AE:E9:56:55:5D:2B:FE:22:A1:E8:4A:BF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018659B4E6CFE963857D1100661A97873620
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/p5aGMwtcZyuu6VZVXSv-IqHoSr8.roa
Signing time: Thu 16 Feb 2023 10:11:13 +0000
ROA not before: Thu 16 Feb 2023 10:11:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:59:b4:e6:cf:e9:63:85:7d:11:00:66:1a:97:87:36:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 16 10:11:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a79686330b5c672baee956555d2bfe22a1e84abf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:60:bc:12:18:42:9c:35:e5:52:14:a0:c6:92:
02:80:4e:da:02:08:0e:e0:d6:8a:59:c3:11:58:cb:
5d:4d:39:a6:66:a4:a2:4e:d9:91:8a:8f:2d:fa:f9:
1d:86:e5:66:c0:1e:34:f9:ba:e1:fc:0b:9c:71:5a:
e9:39:c0:d0:47:52:e6:63:d1:78:3e:e8:35:a8:0d:
90:e6:80:28:6b:3d:52:a1:72:26:3f:91:6a:67:09:
50:12:01:7a:e4:e6:6b:b5:1a:f3:5b:63:ad:80:44:
c0:bb:d0:13:9d:ef:4e:b1:ac:87:cd:1c:6a:13:3c:
81:38:65:67:1b:f4:ff:94:b7:d6:35:16:31:fe:0b:
8d:f7:06:92:31:ba:b8:55:8e:c1:fe:9c:25:f8:78:
91:d5:2a:b7:e3:d2:ab:89:cd:37:bf:a8:4d:d4:e7:
94:2f:9e:cd:9c:a1:31:26:54:47:ae:8d:dc:8a:94:
f1:11:70:8c:d8:e7:18:9b:fd:87:54:ab:39:f6:5b:
63:49:d9:1a:d5:6a:47:0b:db:5d:c0:c1:3c:39:e9:
e5:28:0c:ab:b2:af:20:ce:ea:21:07:3c:e1:f2:d3:
51:ed:92:86:72:e6:4f:11:e5:0f:21:1f:ac:87:9d:
36:da:e9:3a:33:32:15:10:05:f4:33:d3:50:df:1e:
2b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:96:86:33:0B:5C:67:2B:AE:E9:56:55:5D:2B:FE:22:A1:E8:4A:BF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/p5aGMwtcZyuu6VZVXSv-IqHoSr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
99:8f:0f:70:c8:0b:ef:11:55:0b:c7:ea:74:4b:02:51:ae:eb:
d8:0a:3e:6b:66:38:a7:8e:83:be:3c:7a:7b:c8:52:1f:4b:be:
d3:79:7a:25:a9:5c:89:b7:08:41:5c:54:9b:d1:20:cd:3b:7d:
49:29:62:66:b3:39:c6:24:6b:0e:e5:fc:2b:52:7e:ff:46:9b:
82:0a:71:11:06:90:61:b0:d8:9a:04:dc:3a:33:56:2b:ae:0d:
69:31:2f:70:6a:5f:f9:c7:72:e0:21:a2:1f:a2:ca:2c:e8:05:
1e:b7:bd:a7:6b:fe:28:6d:f3:28:7d:39:f4:1b:7c:63:c7:bf:
a8:b1:1b:a6:ad:2d:f7:b8:2b:d8:02:a5:b2:a9:99:07:90:72:
f6:d8:5d:26:4a:1a:74:96:1d:90:f5:b7:a8:74:30:79:98:fd:
36:3c:5d:3e:4a:92:0e:29:f7:79:33:81:87:d2:6c:8d:8c:82:
a2:17:7a:63:cc:d5:96:62:6a:f1:5c:1f:e0:5f:e4:5b:eb:b7:
58:2d:60:43:10:78:e8:e1:d1:b5:c8:d0:a2:d4:11:a7:fc:03:
39:86:0b:08:e9:c0:26:cc:f0:57:f7:80:38:ef:b9:1f:a4:ef:
79:06:5a:45:9e:29:50:3c:4d:49:6d:b7:9e:a6:8a:3d:ba:e7:
54:9e:c1:8c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYZZtObP6WOFfREAZhqXhzYgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjE2MTAxMTEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzk2ODYzMzBiNWM2NzJiYWVlOTU2NTU1ZDJiZmUyMmExZTg0YWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2C8EhhCnDXlUhSgxpICgE7aAggO
4NaKWcMRWMtdTTmmZqSiTtmRio8t+vkdhuVmwB40+brh/AuccVrpOcDQR1LmY9F4
Pug1qA2Q5oAoaz1SoXImP5FqZwlQEgF65OZrtRrzW2OtgETAu9ATne9OsayHzRxq
EzyBOGVnG/T/lLfWNRYx/guN9waSMbq4VY7B/pwl+HiR1Sq349Kric03v6hN1OeU
L57NnKExJlRHro3cipTxEXCM2OcYm/2HVKs59ltjSdka1WpHC9tdwME8OenlKAyr
sq8gzuohBzzh8tNR7ZKGcuZPEeUPIR+sh5022uk6MzIVEAX0M9NQ3x4rrQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKeWhjMLXGcrrulWVV0r/iKh6Eq/MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvcDVhR013dGNaeXV1NlZaVlhTdi1JcUhvU3I4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJmPD3DIC+8RVQvH6nRL
AlGu69gKPmtmOKeOg748envIUh9LvtN5eiWpXIm3CEFcVJvRIM07fUkpYmazOcYk
aw7l/CtSfv9Gm4IKcREGkGGw2JoE3DozViuuDWkxL3BqX/nHcuAhoh+iyizoBR63
vadr/iht8yh9OfQbfGPHv6ixG6atLfe4K9gCpbKpmQeQcvbYXSZKGnSWHZD1t6h0
MHmY/TY8XT5Kkg4p93kzgYfSbI2MgqIXemPM1ZZiavFcH+Bf5Fvrt1gtYEMQeOjh
0bXI0KLUEaf8AzmGCwjpwCbM8Ff3gDjvuR+k73kGWkWeKVA8TUltt56mij2651Se
wYw=
-----END CERTIFICATE-----
Generated at Thu May 1 09:05:48 2025 by rpki-client