Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sNbCZp2wkTl9LDiKGFI31utForY.roa
File: sNbCZp2wkTl9LDiKGFI31utForY.roa (raw, json)
Hash identifier: tAu8g19OMdxAae8px56+qrgn9C6AQqXnCBbcUuviMTY=
Subject key identifier: B0:D6:C2:66:9D:B0:91:39:7D:2C:38:8A:18:52:37:D6:EB:45:A2:B6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A0218594A2B383459742827908E16D5AA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sNbCZp2wkTl9LDiKGFI31utForY.roa
Signing time: Thu 17 Aug 2023 06:04:24 +0000
ROA not before: Thu 17 Aug 2023 06:04:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:18a:218:5031/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:02:18:59:4a:2b:38:34:59:74:28:27:90:8e:16:d5:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 17 06:04:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b0d6c2669db091397d2c388a185237d6eb45a2b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:74:c5:41:fe:80:ac:09:da:a1:3a:21:b8:8c:
c2:39:cb:d7:5f:44:fa:e0:b8:06:51:5f:56:2d:23:
b4:8c:69:ae:3a:8f:6c:9f:d1:ff:3f:9d:4c:11:ae:
aa:2e:89:ca:2d:ea:e5:f9:92:dd:aa:9b:78:28:ff:
98:98:ad:3f:87:27:57:5d:7b:f4:de:5f:fb:8f:0f:
ba:91:46:0f:a0:b7:d6:74:01:ef:4b:af:66:f6:ad:
c2:49:70:c2:38:ed:f2:48:57:c6:c6:cf:c3:5a:0b:
7f:82:64:eb:5b:cc:cd:99:99:e7:d8:5e:44:ed:5c:
91:f7:2e:14:d0:c7:b0:26:e6:e3:ad:a2:aa:23:d8:
0d:3f:23:5b:28:6b:52:ca:38:d9:f4:8d:ce:44:31:
c0:0e:73:d7:2e:e2:81:9a:e0:24:d3:dc:6d:3a:6e:
9a:79:33:ec:13:59:fb:54:a6:79:37:7e:c8:9c:2d:
df:c6:e5:36:38:7e:c8:43:de:42:df:94:07:14:a8:
57:5b:00:e9:91:08:b6:24:e4:7c:79:e3:5b:ea:2a:
2e:fa:98:fd:2f:fa:93:60:ec:30:8d:b2:4a:01:5d:
8b:67:44:ef:da:93:08:73:e7:72:55:db:49:63:56:
a3:62:2f:6b:40:1d:be:42:58:f6:70:46:d0:90:b0:
9d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D6:C2:66:9D:B0:91:39:7D:2C:38:8A:18:52:37:D6:EB:45:A2:B6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sNbCZp2wkTl9LDiKGFI31utForY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
41:09:dc:5b:f9:fe:2b:fd:59:4d:f8:f0:a0:6e:2f:0a:5c:92:
50:55:a0:bf:ee:8a:4c:2f:56:3d:47:df:ab:9b:25:11:3f:f3:
7d:bb:04:87:76:14:aa:b4:b5:52:12:5a:4b:bb:0a:64:d9:1c:
e1:bc:27:94:ea:35:64:5c:09:1a:6f:e6:3a:fc:f1:2f:d5:0f:
4d:71:25:fa:fb:48:a2:09:7e:c9:a0:aa:6c:c5:8d:c9:2f:4f:
31:30:80:6f:fb:40:81:6d:dd:ec:04:21:0b:a1:2a:a5:ad:93:
ae:58:ff:8e:9d:14:f4:a5:45:f9:97:9b:5f:5e:a9:ae:29:8f:
8c:04:e6:55:61:30:38:86:0c:6a:bf:26:84:1a:5b:91:61:ef:
42:69:4e:d2:58:16:80:f3:9d:93:57:c9:74:1b:82:d8:04:48:
af:d2:28:82:1e:aa:82:0a:25:38:bd:25:63:5a:f4:6c:8f:40:
fd:ad:f6:74:64:d6:46:ee:80:66:b3:cf:53:10:79:e2:63:65:
cf:be:e5:d4:e3:e7:ab:1c:34:b4:13:2d:1b:62:ea:91:2b:a2:
2f:53:bb:85:81:07:5b:eb:38:d8:0d:bb:fe:d5:d1:21:e9:ba:
81:78:98:38:e1:c2:ab:d4:73:2c:07:19:4c:c3:eb:57:1c:89:
8c:d9:c4:ec
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYoCGFlKKzg0WXQoJ5COFtWqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODE3MDYwNDI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMGQ2YzI2NjlkYjA5MTM5N2QyYzM4OGExODUyMzdkNmViNDVhMmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnTFQf6ArAnaoTohuIzCOcvXX0T6
4LgGUV9WLSO0jGmuOo9sn9H/P51MEa6qLonKLerl+ZLdqpt4KP+YmK0/hydXXXv0
3l/7jw+6kUYPoLfWdAHvS69m9q3CSXDCOO3ySFfGxs/DWgt/gmTrW8zNmZnn2F5E
7VyR9y4U0MewJubjraKqI9gNPyNbKGtSyjjZ9I3ORDHADnPXLuKBmuAk09xtOm6a
eTPsE1n7VKZ5N37InC3fxuU2OH7IQ95C35QHFKhXWwDpkQi2JOR8eeNb6iou+pj9
L/qTYOwwjbJKAV2LZ0Tv2pMIc+dyVdtJY1ajYi9rQB2+Qlj2cEbQkLCdiQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLDWwmadsJE5fSw4ihhSN9brRaK2MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvc05iQ1pwMndrVGw5TERpS0dGSTMxdXRGb3JZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEEJ3Fv5/iv9WU348KBu
LwpcklBVoL/uikwvVj1H36ubJRE/8327BId2FKq0tVISWku7CmTZHOG8J5TqNWRc
CRpv5jr88S/VD01xJfr7SKIJfsmgqmzFjckvTzEwgG/7QIFt3ewEIQuhKqWtk65Y
/46dFPSlRfmXm19eqa4pj4wE5lVhMDiGDGq/JoQaW5Fh70JpTtJYFoDznZNXyXQb
gtgESK/SKIIeqoIKJTi9JWNa9GyPQP2t9nRk1kbugGazz1MQeeJjZc++5dTj56sc
NLQTLRti6pEroi9Tu4WBB1vrONgNu/7V0SHpuoF4mDjhwqvUcywHGUzD61cciYzZ
xOw=
-----END CERTIFICATE-----
Generated at Fri May 2 10:50:29 2025 by rpki-client