Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rBYooCTGxazI8uqy8BJX0ye28sU.roa
File: rBYooCTGxazI8uqy8BJX0ye28sU.roa (raw, json)
Hash identifier: 52slcs3R7lnr3dLvLIWf6FzVKYUd8EulWx3YILUNOFc=
Subject key identifier: AC:16:28:A0:24:C6:C5:AC:C8:F2:EA:B2:F0:12:57:D3:27:B6:F2:C5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 73ADA41C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rBYooCTGxazI8uqy8BJX0ye28sU.roa
Signing time: Sat 19 Mar 2022 00:09:38 +0000
ROA not before: Sat 19 Mar 2022 00:09:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1940759580 (0x73ada41c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 19 00:09:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ac1628a024c6c5acc8f2eab2f01257d327b6f2c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a6:e8:14:be:ea:bd:37:f5:17:b3:fb:fc:16:
1e:25:d0:50:c2:9b:e0:22:ea:a0:9a:9c:4e:1b:3f:
67:a2:9f:66:7c:f9:ea:66:49:41:df:cf:7c:28:78:
6c:72:42:f3:b9:ce:0e:82:9a:98:d9:a5:85:71:fa:
64:f4:6b:bc:16:13:d7:7a:82:fb:7a:a9:08:13:fd:
43:b0:11:c3:e6:ea:8f:84:ca:8b:5a:65:85:94:59:
b0:eb:13:32:83:5c:42:41:7f:37:22:56:ec:55:4d:
67:5b:06:32:d1:d2:95:a1:b7:20:89:b0:10:90:81:
f2:d9:19:a4:18:1a:fd:be:2c:95:58:6b:5e:88:40:
4a:e9:5a:2b:27:ad:2e:a6:5f:56:29:da:35:28:b3:
d7:4d:40:8e:64:6b:52:68:15:14:97:65:bc:f3:6a:
36:e0:6e:2a:f4:5a:0b:d5:31:e4:3b:44:26:73:4f:
f7:b7:be:ea:ae:6f:da:5a:d8:be:46:57:44:a6:b4:
9e:a5:c4:d9:2d:3e:31:46:16:35:da:02:19:da:32:
2f:ad:17:11:53:db:3c:5b:94:10:c1:3e:3d:71:2a:
f7:a1:65:23:e4:f3:30:48:1f:9f:1b:d3:ad:16:74:
95:84:9c:e5:50:4b:e8:8b:90:58:af:16:be:b3:e2:
71:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:16:28:A0:24:C6:C5:AC:C8:F2:EA:B2:F0:12:57:D3:27:B6:F2:C5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rBYooCTGxazI8uqy8BJX0ye28sU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5d:1f:ec:a1:0b:a2:44:c3:59:dd:0d:66:27:b1:77:dc:37:a0:
6f:db:d2:b1:fc:15:8e:ad:26:55:fc:a0:cb:51:01:85:87:f4:
ec:8e:de:0b:ef:de:96:aa:9d:a0:49:6e:09:4f:77:48:56:98:
ed:e6:35:a6:cf:8e:76:1b:ae:91:92:b6:6a:86:cd:4e:3d:f3:
3b:6e:1c:72:79:d3:b1:e7:ee:7b:ff:d7:ee:05:42:47:a2:77:
e6:ba:bb:70:7d:d4:5a:16:7b:14:bd:1a:0b:52:4f:26:54:58:
bc:d7:f0:54:06:5a:42:52:02:9e:a8:73:26:ad:ba:59:18:0b:
9b:30:d2:d8:25:ea:54:05:10:fa:57:6d:32:b8:2c:57:3a:8c:
f9:5b:6b:2c:ae:12:69:db:2f:26:3a:f6:1e:8b:e5:3f:f1:cb:
bc:4a:fb:07:62:87:df:65:5a:3c:9a:04:77:00:92:c7:4b:6d:
c6:b5:eb:04:ca:c2:ac:79:9a:21:73:dd:82:4c:8b:e0:7e:e4:
1b:7a:af:59:cc:0a:b8:d6:70:06:98:cf:d9:0c:b3:06:6c:5f:
36:40:eb:e1:7c:58:a8:d1:8c:0e:63:34:7d:15:30:49:78:97:
44:23:d6:0f:59:4d:df:5a:00:f8:5a:21:71:5f:e5:4f:c9:61:
ba:6f:50:4b
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEc62kHDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDMx
OTAwMDkzOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWMxNjI4YTAyNGM2
YzVhY2M4ZjJlYWIyZjAxMjU3ZDMyN2I2ZjJjNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANem6BS+6r039Rez+/wWHiXQUMKb4CLqoJqcThs/Z6KfZnz5
6mZJQd/PfCh4bHJC87nODoKamNmlhXH6ZPRrvBYT13qC+3qpCBP9Q7ARw+bqj4TK
i1plhZRZsOsTMoNcQkF/NyJW7FVNZ1sGMtHSlaG3IImwEJCB8tkZpBga/b4slVhr
XohASulaKyetLqZfVinaNSiz101AjmRrUmgVFJdlvPNqNuBuKvRaC9Ux5DtEJnNP
97e+6q5v2lrYvkZXRKa0nqXE2S0+MUYWNdoCGdoyL60XEVPbPFuUEME+PXEq96Fl
I+TzMEgfnxvTrRZ0lYSc5VBL6IuQWK8WvrPicZkCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBSsFiigJMbFrMjy6rLwElfTJ7byxTAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L3JCWW9vQ1RHeGF6STh1cXk4QkpYMHllMjhzVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQBdH+yhC6JEw1ndDWYnsXfcN6Bv29Kx/BWOrSZV
/KDLUQGFh/Tsjt4L796Wqp2gSW4JT3dIVpjt5jWmz452G66RkrZqhs1OPfM7bhxy
edOx5+57/9fuBUJHonfmurtwfdRaFnsUvRoLUk8mVFi81/BUBlpCUgKeqHMmrbpZ
GAubMNLYJepUBRD6V20yuCxXOoz5W2ssrhJp2y8mOvYei+U/8cu8SvsHYoffZVo8
mgR3AJLHS23GtesEysKseZohc92CTIvgfuQbeq9ZzAq41nAGmM/ZDLMGbF82QOvh
fFio0YwOYzR9FTBJeJdEI9YPWU3fWgD4WiFxX+VPyWG6b1BL
-----END CERTIFICATE-----
Generated at Sun May 4 17:44:02 2025 by rpki-client