Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t5v56Tnyi5JPeMGb3Nx4lZ8QysA.roa
File: t5v56Tnyi5JPeMGb3Nx4lZ8QysA.roa (raw, json)
Hash identifier: 6on8bZ96FGogO91gyY85hq6h1P4Vb3whCNuG8J6hkPU=
Subject key identifier: B7:9B:F9:E9:39:F2:8B:92:4F:78:C1:9B:DC:DC:78:95:9F:10:CA:C0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185225A8233B9394CFF4A2F605F48ECE55E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t5v56Tnyi5JPeMGb3Nx4lZ8QysA.roa
Signing time: Sat 17 Dec 2022 23:10:34 +0000
ROA not before: Sat 17 Dec 2022 23:10:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:22:5a:82:33:b9:39:4c:ff:4a:2f:60:5f:48:ec:e5:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 17 23:10:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b79bf9e939f28b924f78c19bdcdc78959f10cac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:52:ba:d8:08:f8:bb:7e:c2:18:9c:ee:c9:5e:
fa:4a:a4:3c:6f:da:83:51:7d:71:82:ba:63:df:86:
a8:52:24:d3:4e:92:c8:c5:0f:16:c7:a9:c7:51:04:
ce:fd:2f:b9:41:8a:c4:d9:e8:48:16:22:af:a5:86:
7c:c3:08:c2:80:9b:1d:bb:0e:bd:fe:00:33:e9:13:
be:df:15:2e:62:ba:d1:7a:4f:04:19:bb:b4:07:a0:
21:99:b9:f1:72:85:01:64:3a:ab:80:9d:68:2e:11:
0f:7a:23:b7:37:37:8f:9d:db:de:b5:06:e7:c6:0f:
1d:40:20:17:5f:ea:8d:49:af:7c:11:8a:84:0e:47:
7b:51:f3:2e:ee:21:57:d8:e2:b2:2c:80:81:1f:c9:
78:56:29:0d:68:47:6a:34:99:83:f2:65:ea:49:de:
48:61:e0:97:23:91:87:4a:cd:46:1e:c0:7f:1b:7b:
07:cc:c8:74:d0:05:1f:24:1c:95:e4:90:c0:2b:f4:
7d:77:6f:79:7c:64:2e:f7:af:08:86:91:8d:0b:90:
3a:60:d4:81:ae:b9:1e:39:ce:96:79:a1:39:5e:0d:
ad:4a:f6:98:e6:f4:8c:85:ca:8a:f6:4d:38:1f:9e:
59:4f:85:fc:10:39:00:bc:da:32:9c:7d:91:72:6c:
15:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:9B:F9:E9:39:F2:8B:92:4F:78:C1:9B:DC:DC:78:95:9F:10:CA:C0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t5v56Tnyi5JPeMGb3Nx4lZ8QysA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5a:02:b5:d2:bb:bb:53:93:bf:fa:1b:5f:59:f8:d0:d7:3f:dd:
cf:4d:0a:fc:23:e0:5a:c2:aa:68:b0:87:95:98:85:8e:86:cb:
8c:39:7c:7a:31:d8:3f:ae:38:11:55:2a:bb:56:f5:c6:27:28:
d1:73:36:c9:f8:8a:fc:ca:81:8a:71:51:34:54:01:ba:5e:a7:
70:6e:2f:1f:4b:10:08:58:6b:5d:1b:96:5c:86:1e:c4:ea:94:
23:dc:d1:26:9a:a2:27:61:fb:bf:a0:70:a4:f3:95:5a:ce:8d:
89:4a:79:ef:81:e2:dd:5a:bf:60:60:60:ea:7d:db:d2:22:7e:
40:08:0f:05:b2:20:01:74:f9:3d:37:00:af:2a:71:40:cd:82:
10:72:10:01:77:6f:1f:b5:fc:9a:48:1f:98:f6:14:da:c9:13:
a7:e6:85:d0:62:b1:2f:8f:86:e0:54:ad:9c:91:ba:17:f8:2d:
c1:b8:5d:e3:b5:a7:dd:a4:18:db:b6:a7:60:9d:99:45:44:6c:
c2:34:e2:59:74:e0:ea:41:6e:fd:ee:df:ed:c5:43:e3:d7:ad:
48:26:f2:65:00:f0:9c:f8:15:cc:f0:5b:e2:b9:92:74:2d:a1:
79:31:5a:7d:28:04:8c:99:a1:a0:b7:65:6b:b9:4f:24:bc:84:
19:f4:db:ab
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYUiWoIzuTlM/0ovYF9I7OVeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjE3MjMxMDM0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzliZjllOTM5ZjI4YjkyNGY3OGMxOWJkY2RjNzg5NTlmMTBjYWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1K62Aj4u37CGJzuyV76SqQ8b9qD
UX1xgrpj34aoUiTTTpLIxQ8Wx6nHUQTO/S+5QYrE2ehIFiKvpYZ8wwjCgJsduw69
/gAz6RO+3xUuYrrRek8EGbu0B6AhmbnxcoUBZDqrgJ1oLhEPeiO3NzePndvetQbn
xg8dQCAXX+qNSa98EYqEDkd7UfMu7iFX2OKyLICBH8l4VikNaEdqNJmD8mXqSd5I
YeCXI5GHSs1GHsB/G3sHzMh00AUfJByV5JDAK/R9d295fGQu968IhpGNC5A6YNSB
rrkeOc6WeaE5Xg2tSvaY5vSMhcqK9k04H55ZT4X8EDkAvNoynH2RcmwVmwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLeb+ek58ouST3jBm9zceJWfEMrAMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvdDV2NTZUbnlpNUpQZU1HYjNOeDRsWjhReXNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFoCtdK7u1OTv/obX1n4
0Nc/3c9NCvwj4FrCqmiwh5WYhY6Gy4w5fHox2D+uOBFVKrtW9cYnKNFzNsn4ivzK
gYpxUTRUAbpep3BuLx9LEAhYa10bllyGHsTqlCPc0Saaoidh+7+gcKTzlVrOjYlK
ee+B4t1av2BgYOp929IifkAIDwWyIAF0+T03AK8qcUDNghByEAF3bx+1/JpIH5j2
FNrJE6fmhdBisS+PhuBUrZyRuhf4LcG4XeO1p92kGNu2p2CdmUVEbMI04ll04OpB
bv3u3+3FQ+PXrUgm8mUA8Jz4FczwW+K5knQtoXkxWn0oBIyZoaC3ZWu5TyS8hBn0
26s=
-----END CERTIFICATE-----
Generated at Fri May 2 17:27:10 2025 by rpki-client