Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rSq3reippXkSytPeuM8niAP6wvM.roa
File: rSq3reippXkSytPeuM8niAP6wvM.roa (raw, json)
Hash identifier: fdMvJ57XfxqdVL5397EntavvR/ypK2wjZoYltOLo+rE=
Subject key identifier: AD:2A:B7:AD:E8:A9:A5:79:12:CA:D3:DE:B8:CF:27:88:03:FA:C2:F3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01863F4ABF2714E19F13B449B738B1108B2A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rSq3reippXkSytPeuM8niAP6wvM.roa
Signing time: Sat 11 Feb 2023 07:05:08 +0000
ROA not before: Sat 11 Feb 2023 07:05:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:3f49:df94/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3f:4a:bf:27:14:e1:9f:13:b4:49:b7:38:b1:10:8b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 11 07:05:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad2ab7ade8a9a57912cad3deb8cf278803fac2f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:50:ab:ee:5f:7f:dd:8b:1c:9b:ee:82:ec:56:
7d:56:e6:fe:bb:31:05:55:18:a2:a5:b0:b9:f5:8c:
39:24:8b:16:8e:dd:a1:29:0b:bb:a2:e5:cd:32:0f:
42:a6:2a:12:b0:a9:d2:3f:de:d1:ec:14:45:e0:f4:
27:22:71:f5:f8:22:25:2a:6b:b3:fc:bc:ed:23:17:
16:08:96:1b:6c:ae:a7:87:0e:f5:24:cf:35:94:aa:
d2:54:60:1c:d0:a6:33:f3:7d:a9:d5:26:d0:30:a5:
36:6e:c3:73:e1:9a:50:d4:fb:13:12:8b:aa:a4:68:
87:8b:b3:9c:78:1e:2f:2a:b0:f1:87:b5:ad:7a:6a:
53:0e:55:1a:d6:c1:82:62:c2:cb:08:40:8a:45:bc:
99:dd:0c:6b:17:a5:f5:80:83:fc:22:c3:e9:4d:45:
d1:38:58:d6:9c:31:d6:ce:51:b4:d0:08:15:c9:02:
e0:e9:0d:7b:fa:89:97:b4:2d:a2:47:74:cc:5b:b1:
10:bf:f1:1b:7b:9f:46:a9:e2:ec:0b:c8:b5:76:c9:
d2:2e:08:9c:73:ad:9c:5e:cc:f4:b7:05:02:32:77:
13:4d:bf:5e:fa:8d:39:4d:d7:62:e3:76:a9:ee:d2:
e1:63:6b:c5:4d:fe:f1:15:3e:f0:90:59:4d:ed:06:
ad:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:2A:B7:AD:E8:A9:A5:79:12:CA:D3:DE:B8:CF:27:88:03:FA:C2:F3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rSq3reippXkSytPeuM8niAP6wvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
72:06:1d:67:52:76:0d:d1:a7:79:11:9d:89:4e:cb:a6:f4:5a:
b3:ad:84:14:20:7a:2d:14:07:48:14:13:f1:d6:90:42:39:6a:
dc:82:01:b9:08:7c:ce:9a:ba:5f:24:9e:c8:be:22:42:9a:4f:
f8:e1:65:eb:50:07:4b:9e:58:11:f2:af:b2:c6:b9:4a:61:92:
3a:64:e0:d2:b9:0e:ff:ad:f1:d7:5d:f1:72:ae:b0:a9:34:ab:
e4:d7:31:2b:4a:64:c7:22:c6:91:67:f4:eb:b4:6f:89:dc:6f:
b0:dd:12:d7:68:dc:63:71:5f:64:3d:a9:7d:ac:2e:d4:bc:1a:
a3:bb:e0:ce:dc:11:78:89:fc:a3:98:14:1f:7d:e3:f3:09:04:
ec:87:db:a9:89:ca:89:e9:1c:17:23:85:66:42:9c:96:81:99:
36:da:c5:93:e3:1c:b2:61:35:23:91:91:55:27:52:65:5c:5c:
f4:d1:ee:45:b4:78:59:eb:96:8d:89:79:5a:e0:95:1c:6a:02:
6f:25:20:9a:3a:e6:05:36:bd:bb:0b:ae:21:9a:50:84:a1:8f:
7e:97:ab:1e:85:73:ad:81:b6:83:81:7f:3d:4a:81:9f:8e:31:
51:c9:e5:99:de:9e:ad:7d:86:80:25:40:7a:8d:2e:5e:76:7c:
a0:83:36:7c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYY/Sr8nFOGfE7RJtzixEIsqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjExMDcwNTA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDJhYjdhZGU4YTlhNTc5MTJjYWQzZGViOGNmMjc4ODAzZmFjMmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVCr7l9/3Yscm+6C7FZ9Vub+uzEF
VRiipbC59Yw5JIsWjt2hKQu7ouXNMg9CpioSsKnSP97R7BRF4PQnInH1+CIlKmuz
/LztIxcWCJYbbK6nhw71JM81lKrSVGAc0KYz832p1SbQMKU2bsNz4ZpQ1PsTEouq
pGiHi7OceB4vKrDxh7WtempTDlUa1sGCYsLLCECKRbyZ3QxrF6X1gIP8IsPpTUXR
OFjWnDHWzlG00AgVyQLg6Q17+omXtC2iR3TMW7EQv/Ebe59GqeLsC8i1dsnSLgic
c62cXsz0twUCMncTTb9e+o05Tddi43ap7tLhY2vFTf7xFT7wkFlN7Qat2wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFK0qt63oqaV5EsrT3rjPJ4gD+sLzMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvclNxM3JlaXBwWGtTeXRQZXVNOG5pQVA2d3ZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHIGHWdSdg3Rp3kRnYlO
y6b0WrOthBQgei0UB0gUE/HWkEI5atyCAbkIfM6aul8knsi+IkKaT/jhZetQB0ue
WBHyr7LGuUphkjpk4NK5Dv+t8ddd8XKusKk0q+TXMStKZMcixpFn9Ou0b4ncb7Dd
Etdo3GNxX2Q9qX2sLtS8GqO74M7cEXiJ/KOYFB994/MJBOyH26mJyonpHBcjhWZC
nJaBmTbaxZPjHLJhNSORkVUnUmVcXPTR7kW0eFnrlo2JeVrglRxqAm8lIJo65gU2
vbsLriGaUIShj36Xqx6Fc62BtoOBfz1KgZ+OMVHJ5Znenq19hoAlQHqNLl52fKCD
Nnw=
-----END CERTIFICATE-----
Generated at Thu May 1 17:31:39 2025 by rpki-client