Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rLqLO47McIMe8vwQpfTNeTxLAhM.roa
File: rLqLO47McIMe8vwQpfTNeTxLAhM.roa (raw, json)
Hash identifier: BkHp1/h2P7mB3qa8bwN3KMxIzEg35+BXuxlOLj6RGIs=
Subject key identifier: AC:BA:8B:3B:8E:CC:70:83:1E:F2:FC:10:A5:F4:CD:79:3C:4B:02:13
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A017DA065B9AC4227CDCEAB0B058EB044
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rLqLO47McIMe8vwQpfTNeTxLAhM.roa
Signing time: Thu 17 Aug 2023 03:15:24 +0000
ROA not before: Thu 17 Aug 2023 03:15:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:01:7d:a0:65:b9:ac:42:27:cd:ce:ab:0b:05:8e:b0:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 17 03:15:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=acba8b3b8ecc70831ef2fc10a5f4cd793c4b0213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:06:a0:0d:b2:db:d2:08:81:16:78:c8:34:9c:
ee:23:8a:e4:55:cc:34:e7:a7:89:4b:8f:ce:8a:48:
15:55:1e:2c:81:28:26:04:ff:36:15:bc:4e:3e:c6:
97:07:4b:67:a5:78:9d:e9:be:18:2f:5c:c3:be:66:
d2:13:20:b0:df:3a:dd:c5:92:3a:cd:13:32:dd:35:
3f:f1:22:16:af:dc:1e:b4:ea:b0:e5:e3:ac:e9:a9:
33:02:59:06:3d:02:25:cd:89:01:11:d9:01:07:d4:
34:7e:e8:af:ca:5c:b9:58:d1:b0:8c:76:e3:15:2a:
5f:2b:c1:0a:50:19:d5:e0:8b:ec:56:cd:f6:41:f6:
f8:7e:f3:cc:1d:46:47:a8:6e:f6:69:52:16:c2:24:
ea:44:ba:14:a5:90:53:f1:54:a8:5f:78:0e:8a:b8:
e1:78:b2:2b:af:69:a4:8b:59:f6:ee:65:0b:24:c7:
ce:43:85:95:24:47:33:ad:a5:c6:d9:be:f8:df:28:
73:4e:1c:a8:84:16:8c:da:5b:5c:b8:be:34:ce:78:
4b:4e:aa:c7:29:b6:7b:0b:5e:92:88:e0:39:05:40:
39:f4:d0:a9:b6:a3:24:90:49:9d:ff:94:03:ba:3a:
34:ef:e1:d7:a3:94:99:9c:15:c8:b3:a7:e5:93:81:
3a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:BA:8B:3B:8E:CC:70:83:1E:F2:FC:10:A5:F4:CD:79:3C:4B:02:13
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rLqLO47McIMe8vwQpfTNeTxLAhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2e:ec:b7:83:6c:bb:fa:0f:a2:ec:5a:b3:b0:65:5a:d6:d7:ce:
d1:db:a7:a8:c1:b7:6c:fa:c3:51:41:00:f6:11:68:98:5e:78:
f8:78:b9:ba:bb:87:5e:12:b0:9d:66:ce:aa:40:c1:12:c6:49:
75:18:a9:ad:89:f3:06:49:28:6b:d9:37:1c:fb:ca:b1:43:28:
af:db:b6:fe:2b:e3:18:29:58:cf:58:ff:d1:8a:97:c5:28:ca:
5b:7f:d8:02:02:ab:ac:b9:59:00:58:a7:14:1b:a7:f4:83:4d:
65:52:50:d4:2b:a7:59:50:ba:50:14:9e:7f:a7:b3:69:19:0e:
19:ae:d5:aa:27:79:71:56:d2:37:a5:08:e7:bf:df:ae:0b:b5:
0d:4b:f6:6a:b4:5c:1e:d9:c3:45:ca:0a:28:30:ea:82:59:42:
ce:0b:38:5a:d9:eb:cb:18:ba:a3:69:2b:00:e7:8d:93:0d:26:
57:56:1f:f0:2b:78:86:9c:9e:89:f1:8c:74:06:e3:4b:7f:23:
8e:2b:36:f2:19:48:25:a9:50:db:08:a0:da:80:78:e3:29:31:
03:f3:31:ac:40:3c:3b:66:95:3d:c4:3d:f9:a9:22:35:80:14:
78:9c:07:5f:42:52:39:47:6a:7c:2f:a7:86:2a:a6:c3:1e:a9:
24:5a:15:e8
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYoBfaBluaxCJ83OqwsFjrBEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODE3MDMxNTI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhY2JhOGIzYjhlY2M3MDgzMWVmMmZjMTBhNWY0Y2Q3OTNjNGIwMjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAagDbLb0giBFnjINJzuI4rkVcw0
56eJS4/OikgVVR4sgSgmBP82FbxOPsaXB0tnpXid6b4YL1zDvmbSEyCw3zrdxZI6
zRMy3TU/8SIWr9wetOqw5eOs6akzAlkGPQIlzYkBEdkBB9Q0fuivyly5WNGwjHbj
FSpfK8EKUBnV4IvsVs32Qfb4fvPMHUZHqG72aVIWwiTqRLoUpZBT8VSoX3gOirjh
eLIrr2mki1n27mULJMfOQ4WVJEczraXG2b743yhzThyohBaM2ltcuL40znhLTqrH
KbZ7C16SiOA5BUA59NCptqMkkEmd/5QDujo07+HXo5SZnBXIs6flk4E6kQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKy6izuOzHCDHvL8EKX0zXk8SwITMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvckxxTE80N01jSU1lOHZ3UXBmVE5lVHhMQWhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAC7st4Nsu/oPouxas7Bl
WtbXztHbp6jBt2z6w1FBAPYRaJheePh4ubq7h14SsJ1mzqpAwRLGSXUYqa2J8wZJ
KGvZNxz7yrFDKK/btv4r4xgpWM9Y/9GKl8Uoylt/2AICq6y5WQBYpxQbp/SDTWVS
UNQrp1lQulAUnn+ns2kZDhmu1aoneXFW0jelCOe/364LtQ1L9mq0XB7Zw0XKCigw
6oJZQs4LOFrZ68sYuqNpKwDnjZMNJldWH/AreIacnonxjHQG40t/I44rNvIZSCWp
UNsIoNqAeOMpMQPzMaxAPDtmlT3EPfmpIjWAFHicB19CUjlHanwvp4YqpsMeqSRa
Feg=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:55 2025 by rpki-client