Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pJhQteDKGeftHK4csUoAJgH_pgY.roa
File: pJhQteDKGeftHK4csUoAJgH_pgY.roa (raw, json)
Hash identifier: NbPsxB4k5BF7JMgnohtJjkeUVDqXLusRB5ApUd+FjVc=
Subject key identifier: A4:98:50:B5:E0:CA:19:E7:ED:1C:AE:1C:B1:4A:00:26:01:FF:A6:06
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182CB44BC432C2579ACC43DAB7E99EAF68A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pJhQteDKGeftHK4csUoAJgH_pgY.roa
Signing time: Tue 23 Aug 2022 15:14:15 +0000
ROA not before: Tue 23 Aug 2022 15:14:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:cb:44:bc:43:2c:25:79:ac:c4:3d:ab:7e:99:ea:f6:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 23 15:14:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a49850b5e0ca19e7ed1cae1cb14a002601ffa606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:36:cb:70:ae:7d:5e:8d:80:90:30:5d:ab:2d:
75:60:23:5c:a8:f9:5c:0a:94:d8:a1:81:57:7d:13:
3b:3d:32:46:30:de:21:ae:5c:d7:19:c7:16:f7:fe:
69:2c:e4:72:92:de:a4:36:39:5a:23:21:b7:4b:3a:
a9:74:fd:b5:10:4b:11:ff:fe:28:42:f3:ae:b5:88:
82:6a:45:96:9a:44:af:96:8d:e6:55:bc:6b:5a:3f:
76:b5:17:1a:6e:ef:b8:39:15:5c:e7:65:e5:fc:63:
68:f2:1a:7b:88:3a:86:0c:d4:1a:42:a8:45:43:90:
98:dd:91:fc:59:e9:32:c1:e8:26:c6:32:c1:32:22:
78:22:a9:81:21:28:20:f3:71:4b:90:00:6d:6c:65:
18:b5:00:70:53:21:0c:15:d2:ea:6c:41:42:d9:b3:
0d:a4:43:3f:40:2d:25:3a:36:55:c9:0d:8d:31:1c:
a8:01:f4:1c:1e:9c:4c:69:df:f5:70:fb:f5:56:77:
8c:87:0c:a8:7a:7f:ce:85:7d:46:a6:d9:0c:78:0e:
e8:3a:35:f5:43:e2:94:0d:9c:8d:03:c2:f5:cf:99:
90:b1:a2:aa:3c:fe:e6:2b:53:2a:99:e4:6a:d3:f9:
96:62:e6:7b:7e:7c:12:8a:9e:dc:9a:b1:0c:a4:76:
24:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:98:50:B5:E0:CA:19:E7:ED:1C:AE:1C:B1:4A:00:26:01:FF:A6:06
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pJhQteDKGeftHK4csUoAJgH_pgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
75:35:0d:53:62:40:67:e2:0c:bf:6f:75:d7:56:24:69:fd:aa:
b4:b0:1b:5b:0d:1f:ff:d7:b6:7e:fb:ff:81:79:19:39:62:ff:
7d:39:de:b3:fe:41:a3:f8:dc:cd:56:9b:f3:9e:2c:76:5c:f6:
59:cd:15:1d:72:c4:ac:78:59:16:4b:2f:5f:21:7c:b4:6a:17:
c9:79:1d:fe:ea:be:ea:39:b0:0d:31:fb:6c:db:01:8c:81:60:
da:40:97:d0:ea:13:7a:b6:85:5a:fc:28:cd:b1:51:08:b7:94:
a8:f9:1c:01:41:d4:92:30:18:04:1b:05:1b:d2:89:39:a0:bf:
c3:3c:40:bc:ea:f5:12:06:0d:c3:c1:65:3a:a0:1b:54:a8:66:
9e:c1:ca:8e:30:b3:db:58:c5:71:d8:63:2d:8f:17:18:87:13:
33:75:31:de:6e:71:95:30:a9:e5:02:82:36:20:aa:33:59:6e:
36:d4:9e:4f:6e:b2:4e:77:a8:f4:bc:be:7b:b6:ba:45:85:21:
09:bc:5b:88:12:18:fb:23:64:16:7a:21:50:14:4a:af:01:56:
ba:cf:43:9b:ae:ee:98:96:ba:61:49:4e:66:08:38:2d:6a:f1:
10:8e:ed:d4:f1:42:13:6e:99:b3:3d:12:aa:d3:16:cd:74:14:
70:82:f8:fc
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYLLRLxDLCV5rMQ9q36Z6vaKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwODIzMTUxNDE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNDk4NTBiNWUwY2ExOWU3ZWQxY2FlMWNiMTRhMDAyNjAxZmZhNjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjbLcK59Xo2AkDBdqy11YCNcqPlc
CpTYoYFXfRM7PTJGMN4hrlzXGccW9/5pLORykt6kNjlaIyG3SzqpdP21EEsR//4o
QvOutYiCakWWmkSvlo3mVbxrWj92tRcabu+4ORVc52Xl/GNo8hp7iDqGDNQaQqhF
Q5CY3ZH8WekywegmxjLBMiJ4IqmBISgg83FLkABtbGUYtQBwUyEMFdLqbEFC2bMN
pEM/QC0lOjZVyQ2NMRyoAfQcHpxMad/1cPv1VneMhwyoen/OhX1GptkMeA7oOjX1
Q+KUDZyNA8L1z5mQsaKqPP7mK1MqmeRq0/mWYuZ7fnwSip7cmrEMpHYkIQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKSYULXgyhnn7RyuHLFKACYB/6YGMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvcEpoUXRlREtHZWZ0SEs0Y3NVb0FKZ0hfcGdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHU1DVNiQGfiDL9vdddW
JGn9qrSwG1sNH//Xtn77/4F5GTli/3053rP+QaP43M1Wm/OeLHZc9lnNFR1yxKx4
WRZLL18hfLRqF8l5Hf7qvuo5sA0x+2zbAYyBYNpAl9DqE3q2hVr8KM2xUQi3lKj5
HAFB1JIwGAQbBRvSiTmgv8M8QLzq9RIGDcPBZTqgG1SoZp7Byo4ws9tYxXHYYy2P
FxiHEzN1Md5ucZUwqeUCgjYgqjNZbjbUnk9usk53qPS8vnu2ukWFIQm8W4gSGPsj
ZBZ6IVAUSq8BVrrPQ5uu7piWumFJTmYIOC1q8RCO7dTxQhNumbM9EqrTFs10FHCC
+Pw=
-----END CERTIFICATE-----
Generated at Wed Apr 30 18:17:23 2025 by rpki-client