Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pIzGpnbgEk1bFJoRBoxoKTvbKI0.roa
File: pIzGpnbgEk1bFJoRBoxoKTvbKI0.roa (raw, json)
Hash identifier: /83EdbKszLZHz1PeBqziQwUj6NBdXY/roMntZYlwra0=
Subject key identifier: A4:8C:C6:A6:76:E0:12:4D:5B:14:9A:11:06:8C:68:29:3B:DB:28:8D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01856A3737B5D178C0CE26A9234367886526
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pIzGpnbgEk1bFJoRBoxoKTvbKI0.roa
Signing time: Sat 31 Dec 2022 22:04:41 +0000
ROA not before: Sat 31 Dec 2022 22:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:6a36:b684/128 maxlen: 128
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6a:37:37:b5:d1:78:c0:ce:26:a9:23:43:67:88:65:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 31 22:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a48cc6a676e0124d5b149a11068c68293bdb288d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:50:77:71:c5:f0:61:5d:75:84:3e:c5:9f:bf:
5e:71:41:80:74:13:a6:d2:69:62:e0:91:a9:76:e3:
8e:b0:40:60:63:ab:77:5d:e0:57:df:39:8a:e6:3a:
24:d9:a8:ec:d5:c4:37:bc:86:c9:ae:7f:08:2a:8d:
2d:a8:03:3a:20:18:41:3f:d2:ce:4e:67:91:7d:aa:
52:61:c5:8e:de:23:5e:3a:d3:2a:c9:15:c4:33:54:
03:32:7a:e0:83:3a:4c:42:b6:0a:49:31:1f:da:74:
4e:8e:fa:c0:1f:94:51:f4:35:12:0f:d9:a3:2d:06:
f9:64:c4:b0:1e:f7:f6:f1:17:06:97:76:84:88:1a:
1e:c4:0d:ed:a5:03:08:31:55:4c:63:87:8a:c3:98:
cb:fa:74:e1:e3:7c:e3:b8:7a:36:e8:83:1a:0b:b9:
6c:4a:76:b4:a3:a2:f6:27:ed:bb:2f:16:46:2c:a2:
61:c1:fb:30:e7:00:95:52:3a:da:61:77:8b:00:f5:
51:69:b5:44:d0:81:7f:25:67:d8:b8:26:a5:51:00:
1c:fd:78:5f:57:9d:e8:10:19:20:c5:18:86:c1:34:
61:d8:b7:25:1c:3b:3c:78:34:fd:a6:e3:05:df:2d:
8d:08:11:8c:dd:c3:cf:0d:3e:78:e8:ae:cf:8c:d9:
93:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:8C:C6:A6:76:E0:12:4D:5B:14:9A:11:06:8C:68:29:3B:DB:28:8D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pIzGpnbgEk1bFJoRBoxoKTvbKI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
90:4d:75:c5:44:52:31:54:da:7d:c0:9d:cf:5e:15:10:ce:bf:
86:6a:b7:d8:b9:5d:61:32:f9:ef:9a:c0:c7:b3:79:7e:c6:3b:
69:89:c5:5c:a4:4f:6e:94:af:33:cd:5e:bc:ac:9f:ee:c7:20:
a5:c5:83:7b:e1:ea:11:ce:ed:58:89:54:99:9a:a9:00:7d:ef:
a3:5c:8d:71:92:67:05:5c:68:1e:c6:e1:62:4e:41:05:06:ba:
ad:74:d8:41:6a:5b:7e:74:b6:82:38:ca:87:75:bc:31:dc:f6:
79:5c:a2:34:77:a6:2d:56:33:32:84:2e:61:2b:51:5c:a5:52:
6c:97:93:41:2d:63:6e:bd:ac:1f:bf:2a:f4:96:d1:12:6e:d0:
1a:87:ca:61:99:9f:63:9b:d0:f0:b3:4b:37:ed:0a:65:e1:01:
96:16:73:35:e3:c2:9d:d1:80:81:f7:a8:a6:75:ef:15:ea:c5:
fa:2f:de:1e:91:e6:2f:0b:90:86:ca:2d:9d:9e:cc:32:61:c6:
e0:e3:08:c9:02:78:b4:9e:c0:ca:2a:c0:2a:56:f2:e9:75:2b:
25:00:be:18:a9:de:bf:9a:0f:3e:d4:fb:ca:c0:5d:1f:07:f2:
32:49:b9:fb:00:38:0e:c0:65:40:07:3c:8d:bc:44:62:f0:52:
f7:d8:15:83
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVqNze10XjAziapI0NniGUmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjMxMjIwNDQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNDhjYzZhNjc2ZTAxMjRkNWIxNDlhMTEwNjhjNjgyOTNiZGIyODhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1B3ccXwYV11hD7Fn79ecUGAdBOm
0mli4JGpduOOsEBgY6t3XeBX3zmK5jok2ajs1cQ3vIbJrn8IKo0tqAM6IBhBP9LO
TmeRfapSYcWO3iNeOtMqyRXEM1QDMnrggzpMQrYKSTEf2nROjvrAH5RR9DUSD9mj
LQb5ZMSwHvf28RcGl3aEiBoexA3tpQMIMVVMY4eKw5jL+nTh43zjuHo26IMaC7ls
Sna0o6L2J+27LxZGLKJhwfsw5wCVUjraYXeLAPVRabVE0IF/JWfYuCalUQAc/Xhf
V53oEBkgxRiGwTRh2LclHDs8eDT9puMF3y2NCBGM3cPPDT546K7PjNmTxwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKSMxqZ24BJNWxSaEQaMaCk72yiNMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvcEl6R3BuYmdFazFiRkpvUkJveG9LVHZiS0kwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJBNdcVEUjFU2n3Anc9e
FRDOv4Zqt9i5XWEy+e+awMezeX7GO2mJxVykT26UrzPNXrysn+7HIKXFg3vh6hHO
7ViJVJmaqQB976NcjXGSZwVcaB7G4WJOQQUGuq102EFqW350toI4yod1vDHc9nlc
ojR3pi1WMzKELmErUVylUmyXk0EtY269rB+/KvSW0RJu0BqHymGZn2Ob0PCzSzft
CmXhAZYWczXjwp3RgIH3qKZ17xXqxfov3h6R5i8LkIbKLZ2ezDJhxuDjCMkCeLSe
wMoqwCpW8ul1KyUAvhip3r+aDz7U+8rAXR8H8jJJufsAOA7AZUAHPI28RGLwUvfY
FYM=
-----END CERTIFICATE-----
Generated at Wed Apr 30 21:32:32 2025 by rpki-client