Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pvaDyAc0Jkl4cW6vtKRczIi0mCc.roa
File: pvaDyAc0Jkl4cW6vtKRczIi0mCc.roa (raw, json)
Hash identifier: /gNcpZLqiVBsL2PYVMa2UPde2JOk3EO7nEaZo1f6tXU=
Subject key identifier: A6:F6:83:C8:07:34:26:49:78:71:6E:AF:B4:A4:5C:CC:88:B4:98:27
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185172C922D0A01EAAA551075DC263B5138
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pvaDyAc0Jkl4cW6vtKRczIi0mCc.roa
Signing time: Thu 15 Dec 2022 19:04:35 +0000
ROA not before: Thu 15 Dec 2022 19:04:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:172c:31d0/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:17:2c:92:2d:0a:01:ea:aa:55:10:75:dc:26:3b:51:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 15 19:04:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a6f683c80734264978716eafb4a45ccc88b49827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:5e:19:c4:6e:37:60:7f:28:07:9a:ae:ab:9e:
b0:fe:e8:ac:7d:36:1b:84:a1:34:aa:ef:46:32:5c:
e4:56:76:b8:74:74:88:94:39:1d:c7:2e:d7:bd:a8:
8f:d0:da:f2:f0:67:d3:60:b6:bf:ae:50:4b:c2:a0:
4a:55:77:b6:e8:69:85:40:dd:73:a8:0e:71:ae:bd:
e1:a4:4c:2b:28:94:59:7b:9c:8c:39:d5:65:ce:5a:
97:c8:d3:ae:dd:4e:84:a0:9c:c8:a9:e2:dc:4f:80:
34:51:82:c5:c9:89:65:34:7b:3b:37:6e:55:ff:2d:
f5:83:ba:af:c2:9b:0e:a8:a2:12:c3:b3:47:ef:c8:
36:65:e1:12:02:bb:7c:10:5a:77:29:17:cc:d0:15:
ba:ad:ea:77:0c:44:44:74:92:a1:01:0d:02:bf:84:
18:0e:b5:31:35:c7:69:7c:aa:40:b5:9d:77:2b:ef:
34:64:82:ed:89:51:88:52:40:2d:73:bc:32:97:00:
47:35:bd:70:b4:54:75:66:81:86:4b:b7:b5:5b:ea:
07:bf:13:56:16:d6:18:62:37:b6:96:9f:da:a1:20:
24:59:95:e3:c1:11:7a:6d:fe:ee:aa:2a:47:fa:c8:
b9:06:c8:c3:04:19:f2:c6:50:50:fa:2e:dc:7b:56:
b4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F6:83:C8:07:34:26:49:78:71:6E:AF:B4:A4:5C:CC:88:B4:98:27
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pvaDyAc0Jkl4cW6vtKRczIi0mCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
48:b1:7b:82:4f:f0:6d:99:7f:00:bd:99:33:c0:4f:34:cb:12:
40:97:fd:65:53:cf:aa:2d:b4:df:a1:93:0f:7a:20:aa:b9:48:
f5:1a:b1:13:a5:9d:db:89:ed:2b:45:35:7e:90:f5:8d:7d:52:
92:df:69:0a:e0:dc:35:24:c1:55:3c:40:d7:d8:9b:43:5d:eb:
d8:91:8a:05:3f:1c:1d:cb:24:57:d0:7c:be:6a:20:cd:f4:a8:
7b:5d:b2:08:66:15:5a:87:bf:cc:c8:3b:8e:e6:e8:44:3f:84:
48:1a:9d:a4:ee:7d:4d:37:60:ec:88:e1:b2:29:20:5f:ff:dd:
1c:7d:f7:da:37:3d:24:a5:0a:5f:d2:e4:43:6d:56:83:12:16:
63:ad:bd:f3:4f:c7:da:dd:9d:4a:e6:67:b6:f4:d7:22:3f:c4:
35:e7:55:08:ed:14:ac:40:5f:1a:24:2c:7d:11:2c:8a:2e:d2:
43:36:25:17:d0:f8:a2:52:98:55:e3:e9:9e:97:37:08:33:b6:
b7:48:77:a6:e8:e8:3b:e7:b9:61:14:84:04:4b:47:09:8b:46:
dc:02:81:6a:15:a5:9f:a9:06:54:04:65:71:cf:48:87:ca:ae:
85:b1:50:a3:09:71:1b:6a:64:02:b6:14:47:5c:57:52:50:bd:
07:a1:1b:2c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYUXLJItCgHqqlUQddwmO1E4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjE1MTkwNDM1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNmY2ODNjODA3MzQyNjQ5Nzg3MTZlYWZiNGE0NWNjYzg4YjQ5ODI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5l4ZxG43YH8oB5quq56w/uisfTYb
hKE0qu9GMlzkVna4dHSIlDkdxy7XvaiP0Nry8GfTYLa/rlBLwqBKVXe26GmFQN1z
qA5xrr3hpEwrKJRZe5yMOdVlzlqXyNOu3U6EoJzIqeLcT4A0UYLFyYllNHs7N25V
/y31g7qvwpsOqKISw7NH78g2ZeESArt8EFp3KRfM0BW6rep3DEREdJKhAQ0Cv4QY
DrUxNcdpfKpAtZ13K+80ZILtiVGIUkAtc7wylwBHNb1wtFR1ZoGGS7e1W+oHvxNW
FtYYYje2lp/aoSAkWZXjwRF6bf7uqipH+si5BsjDBBnyxlBQ+i7ce1a0YwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKb2g8gHNCZJeHFur7SkXMyItJgnMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvcHZhRHlBYzBKa2w0Y1c2dnRLUmN6SWkwbUNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEixe4JP8G2ZfwC9mTPA
TzTLEkCX/WVTz6ottN+hkw96IKq5SPUasROlnduJ7StFNX6Q9Y19UpLfaQrg3DUk
wVU8QNfYm0Nd69iRigU/HB3LJFfQfL5qIM30qHtdsghmFVqHv8zIO47m6EQ/hEga
naTufU03YOyI4bIpIF//3Rx999o3PSSlCl/S5ENtVoMSFmOtvfNPx9rdnUrmZ7b0
1yI/xDXnVQjtFKxAXxokLH0RLIou0kM2JRfQ+KJSmFXj6Z6XNwgztrdId6bo6Dvn
uWEUhARLRwmLRtwCgWoVpZ+pBlQEZXHPSIfKroWxUKMJcRtqZAK2FEdcV1JQvQeh
Gyw=
-----END CERTIFICATE-----
Generated at Thu May 1 14:17:20 2025 by rpki-client