Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rZ1sKUnMilbnXiloXIxT-k8T5-k.roa
File: rZ1sKUnMilbnXiloXIxT-k8T5-k.roa (raw, json)
Hash identifier: /fqliT5PIrCtpGhGrRtcZyE9OX3m4UK+slSenqYQleM=
Subject key identifier: AD:9D:6C:29:49:CC:8A:56:E7:5E:29:68:5C:8C:53:FA:4F:13:E7:E9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A3535E6A21FF8CDA79033F355D2791273
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rZ1sKUnMilbnXiloXIxT-k8T5-k.roa
Signing time: Sun 27 Aug 2023 04:17:19 +0000
ROA not before: Sun 27 Aug 2023 04:17:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:35:35:e6:a2:1f:f8:cd:a7:90:33:f3:55:d2:79:12:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 27 04:17:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad9d6c2949cc8a56e75e29685c8c53fa4f13e7e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f9:ef:a6:3d:fb:81:8c:2f:10:f9:3b:9c:a5:
c0:54:12:57:7a:8b:91:c9:1a:16:d4:fd:90:e2:0a:
3f:2e:38:16:09:6a:32:ed:1e:c6:d8:2d:20:5b:68:
c2:39:dd:14:ac:cf:59:ec:05:f7:71:e8:f0:2c:74:
91:aa:46:7d:9f:75:98:2b:63:3f:f3:73:f0:f8:08:
7f:86:d1:9f:fa:8f:f7:80:f3:c4:76:a6:ef:c0:fe:
6d:a6:a2:83:6a:f7:0e:a0:39:83:65:14:47:e4:b0:
c5:90:d7:f4:85:53:83:98:76:9a:ee:05:62:e1:1d:
a5:e7:7d:66:9b:89:66:4b:9f:68:de:12:cf:c7:9e:
2d:aa:50:9b:d2:af:6a:42:a3:f8:ff:45:db:18:1e:
a2:7f:ca:15:a2:15:30:b7:9d:e1:60:36:75:43:33:
3d:3c:4d:d2:f0:8f:e0:8e:4d:d1:8d:61:47:23:0a:
87:f2:ee:8d:87:fe:d5:03:cf:57:d2:c1:26:22:2c:
c8:ef:8f:a6:42:c0:81:04:50:6d:55:69:59:a4:c3:
9e:21:3b:0d:c5:ab:48:f0:65:a6:e5:5c:a5:6a:d0:
62:96:e7:a2:56:b2:10:ae:c5:10:a2:b2:c5:fa:cc:
26:28:cd:4d:c7:0d:4e:aa:f5:33:27:f3:f2:15:a2:
6a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:9D:6C:29:49:CC:8A:56:E7:5E:29:68:5C:8C:53:FA:4F:13:E7:E9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rZ1sKUnMilbnXiloXIxT-k8T5-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7c:b1:ae:f1:7b:b7:0b:80:77:5b:5b:06:23:c1:3b:90:e0:53:
f8:bc:b7:41:c4:94:de:e7:5d:c5:33:32:79:df:ea:bc:3d:27:
01:cc:d9:df:ef:2b:42:35:58:dd:4b:c4:82:be:ff:83:16:bc:
a6:0f:84:2a:64:5e:88:53:da:13:2a:4a:b8:34:98:0c:ea:a0:
ce:b8:94:a4:ef:02:ea:a1:09:7c:40:b5:d3:4a:56:f9:3c:e1:
16:48:40:cb:0d:a6:1e:11:69:cc:d9:ea:f1:84:a1:7c:d5:fb:
c3:64:4c:21:27:02:70:fa:4c:6c:cb:ba:2c:55:12:9d:fc:c7:
8b:64:47:ec:f5:77:e6:f1:2e:7c:c0:06:a2:c0:87:4b:2d:24:
2a:b8:85:31:a3:3e:2e:55:c9:74:12:c2:00:70:dc:4d:fc:00:
75:9d:fa:b2:9e:06:7c:39:26:02:62:b9:8d:07:7d:6f:f0:d3:
35:cc:12:69:d5:a9:e7:cc:e9:39:7f:c9:b8:d9:3b:7c:86:03:
ce:62:c4:3c:cd:ee:e1:31:db:f9:21:77:4b:0c:ee:03:6e:c8:
29:dd:af:1c:5e:30:db:09:4f:90:9a:0b:7c:ee:f7:9d:20:82:
c5:c7:0a:d5:6c:72:c9:8d:14:e3:2c:3b:85:ed:0d:51:1d:de:
a3:75:03:2b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYo1NeaiH/jNp5Az81XSeRJzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODI3MDQxNzE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDlkNmMyOTQ5Y2M4YTU2ZTc1ZTI5Njg1YzhjNTNmYTRmMTNlN2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufnvpj37gYwvEPk7nKXAVBJXeouR
yRoW1P2Q4go/LjgWCWoy7R7G2C0gW2jCOd0UrM9Z7AX3cejwLHSRqkZ9n3WYK2M/
83Pw+Ah/htGf+o/3gPPEdqbvwP5tpqKDavcOoDmDZRRH5LDFkNf0hVODmHaa7gVi
4R2l531mm4lmS59o3hLPx54tqlCb0q9qQqP4/0XbGB6if8oVohUwt53hYDZ1QzM9
PE3S8I/gjk3RjWFHIwqH8u6Nh/7VA89X0sEmIizI74+mQsCBBFBtVWlZpMOeITsN
xatI8GWm5VylatBilueiVrIQrsUQorLF+swmKM1Nxw1OqvUzJ/PyFaJqwQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFK2dbClJzIpW514paFyMU/pPE+fpMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvcloxc0tVbk1pbGJuWGlsb1hJeFQtazhUNS1rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHyxrvF7twuAd1tbBiPB
O5DgU/i8t0HElN7nXcUzMnnf6rw9JwHM2d/vK0I1WN1LxIK+/4MWvKYPhCpkXohT
2hMqSrg0mAzqoM64lKTvAuqhCXxAtdNKVvk84RZIQMsNph4RaczZ6vGEoXzV+8Nk
TCEnAnD6TGzLuixVEp38x4tkR+z1d+bxLnzABqLAh0stJCq4hTGjPi5VyXQSwgBw
3E38AHWd+rKeBnw5JgJiuY0HfW/w0zXMEmnVqefM6Tl/ybjZO3yGA85ixDzN7uEx
2/khd0sM7gNuyCndrxxeMNsJT5CaC3zu950ggsXHCtVscsmNFOMsO4XtDVEd3qN1
Ays=
-----END CERTIFICATE-----
Generated at Wed Apr 30 18:24:11 2025 by rpki-client