Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sKEQCcdKiASGqsjJXcLKOKK5Wmw.roa
File: sKEQCcdKiASGqsjJXcLKOKK5Wmw.roa (raw, json)
Hash identifier: 0cWRDI8INFj98vrkFORSjtec3XG3xfXXeSNKMPXupoc=
Subject key identifier: B0:A1:10:09:C7:4A:88:04:86:AA:C8:C9:5D:C2:CA:38:A2:B9:5A:6C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A25576B032A4281B4317F225632DFFD5D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sKEQCcdKiASGqsjJXcLKOKK5Wmw.roa
Signing time: Thu 24 Aug 2023 02:20:00 +0000
ROA not before: Thu 24 Aug 2023 02:20:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:178d:7ed9/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:25:57:6b:03:2a:42:81:b4:31:7f:22:56:32:df:fd:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 24 02:20:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b0a11009c74a880486aac8c95dc2ca38a2b95a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ef:aa:54:14:8e:f9:ad:52:51:bc:bc:86:07:
ea:a8:12:ee:93:fc:bb:5f:22:1a:09:6f:29:ee:47:
26:12:a7:2c:06:f2:e5:58:80:03:20:2e:f2:7a:97:
ca:07:09:16:1a:23:7c:00:c9:03:54:ab:13:be:58:
2e:42:85:78:2f:83:6b:cd:67:95:99:42:36:a2:3b:
8a:2e:bc:a1:9a:34:9c:3d:05:ee:56:d8:fb:07:ec:
1e:60:c2:17:92:9a:eb:8c:8b:9a:2e:8f:01:5a:37:
74:b5:9a:55:32:cb:a4:c3:f8:88:11:06:7f:d4:aa:
52:2a:1e:e4:10:24:e3:a0:7f:13:f9:fa:33:e8:54:
0d:81:d8:ed:e8:6f:e3:61:18:20:16:73:c0:78:99:
79:f2:35:f3:06:bf:bc:af:cf:c6:6c:0d:38:40:88:
ad:bf:dd:84:c5:5c:e3:ce:c9:55:bf:41:1c:d7:9f:
f6:4a:71:7e:42:7b:31:f4:31:e4:02:6e:58:18:15:
f5:92:42:58:31:fe:aa:bd:08:8f:09:97:19:f2:c5:
66:19:57:bd:e6:9c:52:20:db:e9:ab:e1:41:cd:15:
d0:d4:71:2e:e2:c0:14:11:7f:22:71:13:06:b5:83:
a6:d3:b7:94:c3:c8:81:7e:51:bf:35:e2:3a:41:ca:
b0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A1:10:09:C7:4A:88:04:86:AA:C8:C9:5D:C2:CA:38:A2:B9:5A:6C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sKEQCcdKiASGqsjJXcLKOKK5Wmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
22:7a:81:bd:5b:44:38:bc:3f:a5:cf:77:28:a2:12:c2:b5:a3:
04:32:63:3f:e7:ec:48:a4:2e:2f:6a:50:31:bf:2d:74:98:fc:
61:5b:fd:6e:b0:07:ba:cd:c0:61:82:01:6e:c0:e1:b9:28:ea:
69:c6:a3:6d:e4:10:aa:1e:b9:13:be:a4:18:cf:63:bc:52:ea:
ce:38:04:8d:91:80:44:79:05:b2:60:16:6e:69:68:7f:f3:6d:
83:39:59:e5:2b:16:73:da:0a:57:c7:30:a4:2a:70:d6:79:d6:
d8:43:ac:45:50:98:7d:4f:1f:bb:3c:20:d9:fd:b0:75:e4:d3:
3a:f7:85:2b:9e:9b:eb:6c:79:40:a8:59:0f:20:e0:62:59:fb:
54:aa:cb:50:98:7e:01:b5:e1:6f:c7:1c:3b:f7:be:41:11:f3:
c3:55:d2:1c:c4:1c:bf:ac:32:d1:19:d6:9e:3b:cf:2e:f3:4a:
29:49:67:d3:c8:81:7f:e7:bb:42:a0:d9:2e:d2:68:30:38:0d:
2a:78:2e:fb:8a:f5:97:26:ae:b2:85:c0:00:7a:18:33:92:d5:
b6:5e:aa:7d:a1:53:01:ff:b7:11:3c:27:84:2d:f9:8d:cb:ce:
15:f1:3a:21:fc:1f:cd:6c:74:c9:de:3e:1f:42:17:3c:bc:3d:
8a:e4:14:ac
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYolV2sDKkKBtDF/IlYy3/1dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODI0MDIyMDAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMGExMTAwOWM3NGE4ODA0ODZhYWM4Yzk1ZGMyY2EzOGEyYjk1YTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAou+qVBSO+a1SUby8hgfqqBLuk/y7
XyIaCW8p7kcmEqcsBvLlWIADIC7yepfKBwkWGiN8AMkDVKsTvlguQoV4L4NrzWeV
mUI2ojuKLryhmjScPQXuVtj7B+weYMIXkprrjIuaLo8BWjd0tZpVMsukw/iIEQZ/
1KpSKh7kECTjoH8T+foz6FQNgdjt6G/jYRggFnPAeJl58jXzBr+8r8/GbA04QIit
v92ExVzjzslVv0Ec15/2SnF+Qnsx9DHkAm5YGBX1kkJYMf6qvQiPCZcZ8sVmGVe9
5pxSINvpq+FBzRXQ1HEu4sAUEX8icRMGtYOm07eUw8iBflG/NeI6QcqwEQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLChEAnHSogEhqrIyV3CyjiiuVpsMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvc0tFUUNjZEtpQVNHcXNqSlhjTEtPS0s1V213LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACJ6gb1bRDi8P6XPdyii
EsK1owQyYz/n7EikLi9qUDG/LXSY/GFb/W6wB7rNwGGCAW7A4bko6mnGo23kEKoe
uRO+pBjPY7xS6s44BI2RgER5BbJgFm5paH/zbYM5WeUrFnPaClfHMKQqcNZ51thD
rEVQmH1PH7s8INn9sHXk0zr3hSuem+tseUCoWQ8g4GJZ+1Sqy1CYfgG14W/HHDv3
vkER88NV0hzEHL+sMtEZ1p47zy7zSilJZ9PIgX/nu0Kg2S7SaDA4DSp4LvuK9Zcm
rrKFwAB6GDOS1bZeqn2hUwH/txE8J4Qt+Y3LzhXxOiH8H81sdMnePh9CFzy8PYrk
FKw=
-----END CERTIFICATE-----
Generated at Thu May 1 14:02:05 2025 by rpki-client