Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t5EtZ--4v7X6XNFPmjMvU3BC2ao.roa
File: t5EtZ--4v7X6XNFPmjMvU3BC2ao.roa (raw, json)
Hash identifier: YQrWzYTeG0wKPSyN3g4deDf7UzPy7oK3oK7s1M3esGg=
Subject key identifier: B7:91:2D:67:EF:B8:BF:B5:FA:5C:D1:4F:9A:33:2F:53:70:42:D9:AA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184EEA54B765252A6158FE5D9226063F891
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t5EtZ--4v7X6XNFPmjMvU3BC2ao.roa
Signing time: Wed 07 Dec 2022 22:12:00 +0000
ROA not before: Wed 07 Dec 2022 22:12:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ee:a5:4b:76:52:52:a6:15:8f:e5:d9:22:60:63:f8:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 7 22:12:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b7912d67efb8bfb5fa5cd14f9a332f537042d9aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:36:1b:24:4d:c9:04:fe:3c:2d:04:8a:10:5d:
be:72:79:0f:7c:f8:de:39:f2:88:73:21:55:39:cb:
2f:ac:68:ca:37:c6:7d:78:b4:9b:58:32:48:2f:7c:
71:e9:3f:3f:af:5e:8a:36:44:76:71:73:a5:cf:ef:
9c:cb:27:c3:72:b2:3c:fb:86:85:25:d9:88:91:19:
9a:15:de:3f:3c:e3:09:d1:9b:d4:e0:08:61:45:24:
21:56:99:13:3b:59:93:e3:24:ed:95:7e:04:81:a8:
5c:b8:2e:95:48:c5:09:bf:40:23:7e:da:df:3c:fe:
4f:1c:c7:43:d2:2b:97:93:6a:81:80:7e:6f:34:df:
5a:0d:16:a0:69:e2:49:e9:8f:b7:a7:88:05:3d:75:
7c:3a:50:b3:e3:6c:6e:05:65:8b:92:34:b8:da:0b:
a6:23:4d:10:1f:4b:de:30:be:fc:3d:8b:8b:1c:ec:
fc:aa:65:ea:52:b8:f5:eb:70:63:c4:55:d4:eb:34:
75:36:40:0a:45:55:67:38:e4:38:19:c1:fa:ab:87:
38:ac:9f:16:39:87:bb:13:04:d2:f5:13:5b:33:32:
5e:80:37:fc:d5:5a:ac:46:d9:71:91:9c:b8:18:c1:
c4:d9:79:15:1f:c1:82:f7:64:8a:05:a8:5f:b3:c1:
79:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:91:2D:67:EF:B8:BF:B5:FA:5C:D1:4F:9A:33:2F:53:70:42:D9:AA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t5EtZ--4v7X6XNFPmjMvU3BC2ao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
82:32:53:f2:77:c2:5c:7e:0d:c3:e9:d4:e4:c4:19:e9:d6:1a:
55:cd:dc:41:cf:67:35:54:34:8e:1b:2f:bb:09:00:8e:08:91:
40:67:72:72:e2:c7:0c:a0:84:7c:44:78:16:b6:f0:99:a2:ac:
05:ab:88:eb:ce:c4:70:53:87:a3:b3:92:40:09:d0:64:22:e0:
55:7a:01:de:95:79:b5:79:1c:2b:ac:fb:ef:be:29:d6:97:c4:
a2:65:7b:31:ff:c4:18:38:eb:97:c7:6b:a1:ea:68:0c:74:03:
37:26:74:25:9b:b1:f1:10:e8:14:66:d9:d0:ea:58:d6:1e:a1:
f2:86:10:61:a4:78:6a:cc:ee:54:96:4a:f8:da:b7:69:12:ee:
06:68:c2:a6:74:67:86:bc:af:ac:89:4c:d5:d6:4f:bf:93:0d:
6f:88:ef:1b:bf:f4:82:6d:16:06:24:6b:af:95:2b:df:d3:08:
d9:31:94:7c:20:f6:c4:95:b6:4a:76:55:cb:1b:8e:dd:95:33:
ab:a8:c1:4f:01:e8:64:49:69:3a:67:63:2d:c9:57:a7:29:59:
3b:71:e7:c4:72:e6:7a:d3:22:74:72:4d:46:99:31:c3:34:68:
05:bd:0e:ca:95:43:c9:e7:18:dd:ab:75:40:25:9d:b2:63:09:
2b:e9:ef:ac
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYTupUt2UlKmFY/l2SJgY/iRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjA3MjIxMjAwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzkxMmQ2N2VmYjhiZmI1ZmE1Y2QxNGY5YTMzMmY1MzcwNDJkOWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTYbJE3JBP48LQSKEF2+cnkPfPje
OfKIcyFVOcsvrGjKN8Z9eLSbWDJIL3xx6T8/r16KNkR2cXOlz++cyyfDcrI8+4aF
JdmIkRmaFd4/POMJ0ZvU4AhhRSQhVpkTO1mT4yTtlX4EgahcuC6VSMUJv0Ajftrf
PP5PHMdD0iuXk2qBgH5vNN9aDRagaeJJ6Y+3p4gFPXV8OlCz42xuBWWLkjS42gum
I00QH0veML78PYuLHOz8qmXqUrj163BjxFXU6zR1NkAKRVVnOOQ4GcH6q4c4rJ8W
OYe7EwTS9RNbMzJegDf81VqsRtlxkZy4GMHE2XkVH8GC92SKBahfs8F5/wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLeRLWfvuL+1+lzRT5ozL1NwQtmqMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvdDVFdFotLTR2N1g2WE5GUG1qTXZVM0JDMmFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIIyU/J3wlx+DcPp1OTE
GenWGlXN3EHPZzVUNI4bL7sJAI4IkUBncnLixwyghHxEeBa28JmirAWriOvOxHBT
h6OzkkAJ0GQi4FV6Ad6VebV5HCus++++KdaXxKJlezH/xBg465fHa6HqaAx0Azcm
dCWbsfEQ6BRm2dDqWNYeofKGEGGkeGrM7lSWSvjat2kS7gZowqZ0Z4a8r6yJTNXW
T7+TDW+I7xu/9IJtFgYka6+VK9/TCNkxlHwg9sSVtkp2Vcsbjt2VM6uowU8B6GRJ
aTpnYy3JV6cpWTtx58Ry5nrTInRyTUaZMcM0aAW9DsqVQ8nnGN2rdUAlnbJjCSvp
76w=
-----END CERTIFICATE-----
Generated at Wed Apr 30 19:57:30 2025 by rpki-client