Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u-r81FSxodpOPVw_9jr9ohJDP6Q.roa
File: u-r81FSxodpOPVw_9jr9ohJDP6Q.roa (raw, json)
Hash identifier: I7xUi1zZT+aac8dH3fRb/m6ysBrFAxhvnCEmrIaa0Es=
Subject key identifier: BB:EA:FC:D4:54:B1:A1:DA:4E:3D:5C:3F:F6:3A:FD:A2:12:43:3F:A4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01831360EEF6F0CB388F045B039242D5BC79
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u-r81FSxodpOPVw_9jr9ohJDP6Q.roa
Signing time: Tue 06 Sep 2022 15:17:43 +0000
ROA not before: Tue 06 Sep 2022 15:17:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:13:60:ee:f6:f0:cb:38:8f:04:5b:03:92:42:d5:bc:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 6 15:17:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bbeafcd454b1a1da4e3d5c3ff63afda212433fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5a:cd:df:85:3f:ec:e9:aa:f8:31:d5:01:99:
ea:32:a2:ab:eb:4a:d3:ec:64:7a:25:94:3e:58:28:
3f:39:ce:81:c6:ef:2b:2c:80:69:84:8b:0d:d5:13:
50:40:cb:4d:68:60:a2:5e:79:ac:cf:9c:f0:bb:03:
ca:b7:78:55:54:b2:e2:2a:c3:cb:57:bf:54:a6:be:
81:54:11:38:04:87:3f:11:91:a1:02:4c:53:45:9b:
1d:3a:03:eb:3f:d4:f3:af:9b:c2:2c:a3:d7:b7:24:
21:49:53:32:a5:f2:5f:7a:b4:6d:ef:22:7f:bc:64:
9a:49:53:59:63:df:b1:dd:c8:92:19:19:e8:20:2b:
68:4f:00:09:64:ad:af:a6:91:31:20:bb:fd:98:6f:
db:66:86:c4:b3:10:51:50:fc:1e:a1:0b:4e:74:64:
33:2e:13:eb:ff:e0:da:a6:73:34:5d:24:59:0c:70:
d2:dc:70:32:2f:d6:b9:fd:69:83:29:13:60:d7:e4:
95:55:2c:d1:81:b7:81:fa:93:95:c5:04:8e:58:40:
93:b0:fb:32:13:e2:d5:b5:1b:67:53:c4:c7:46:f9:
ba:ff:6c:8f:5f:fe:ff:a1:31:17:5e:12:21:5b:43:
86:10:9a:8f:92:f9:2d:c4:e2:0a:7d:3a:2f:b0:04:
35:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:EA:FC:D4:54:B1:A1:DA:4E:3D:5C:3F:F6:3A:FD:A2:12:43:3F:A4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u-r81FSxodpOPVw_9jr9ohJDP6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7a:a3:f8:6b:c9:ea:01:2f:f2:c4:7f:3a:30:5f:13:44:bb:9b:
13:76:93:13:f5:ae:f1:be:24:62:a9:f7:1b:82:77:32:c6:b3:
ff:b6:76:f0:93:7c:d5:24:e4:b1:d7:2e:64:e2:52:78:f2:1c:
8b:b2:85:89:ef:01:4a:ed:09:dc:bd:04:95:73:82:07:85:fe:
6d:be:b2:a5:2d:ff:e3:47:b4:c2:8d:16:09:57:bb:01:87:0c:
c5:bb:7f:61:0e:ff:9c:8f:4b:08:42:73:c7:58:39:ae:49:4b:
50:e6:5a:f1:80:9d:d3:d7:52:d4:cf:cb:6a:6d:60:8f:3c:f5:
4c:aa:51:9e:ae:16:c4:37:80:5b:f6:a2:34:19:e6:9f:29:fe:
fa:ed:1e:1d:22:84:70:93:6a:99:40:0b:cc:e7:e1:dc:2c:69:
c0:c1:7c:3d:4b:68:3b:57:f2:52:80:14:5f:e4:ec:8f:e9:8c:
48:a6:da:c3:8b:72:8f:eb:6b:4c:9e:da:c8:fb:60:59:21:ab:
ae:8a:4c:d7:42:3b:fb:2a:0e:c7:e1:f9:30:9c:c7:6f:23:bb:
e7:ca:c7:d6:77:5f:fb:94:19:c6:28:ac:e2:e4:b9:4b:38:52:
d1:61:49:87:55:9d:4d:b3:39:ab:e8:69:63:e4:76:43:d8:f8:
f0:f2:85:ef
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYMTYO728Ms4jwRbA5JC1bx5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwOTA2MTUxNzQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYmVhZmNkNDU0YjFhMWRhNGUzZDVjM2ZmNjNhZmRhMjEyNDMzZmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1rN34U/7Omq+DHVAZnqMqKr60rT
7GR6JZQ+WCg/Oc6Bxu8rLIBphIsN1RNQQMtNaGCiXnmsz5zwuwPKt3hVVLLiKsPL
V79Upr6BVBE4BIc/EZGhAkxTRZsdOgPrP9Tzr5vCLKPXtyQhSVMypfJferRt7yJ/
vGSaSVNZY9+x3ciSGRnoICtoTwAJZK2vppExILv9mG/bZobEsxBRUPweoQtOdGQz
LhPr/+DapnM0XSRZDHDS3HAyL9a5/WmDKRNg1+SVVSzRgbeB+pOVxQSOWECTsPsy
E+LVtRtnU8THRvm6/2yPX/7/oTEXXhIhW0OGEJqPkvktxOIKfTovsAQ1vwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLvq/NRUsaHaTj1cP/Y6/aISQz+kMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvdS1yODFGU3hvZHBPUFZ3XzlqcjlvaEpEUDZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHqj+GvJ6gEv8sR/OjBf
E0S7mxN2kxP1rvG+JGKp9xuCdzLGs/+2dvCTfNUk5LHXLmTiUnjyHIuyhYnvAUrt
Cdy9BJVzggeF/m2+sqUt/+NHtMKNFglXuwGHDMW7f2EO/5yPSwhCc8dYOa5JS1Dm
WvGAndPXUtTPy2ptYI889UyqUZ6uFsQ3gFv2ojQZ5p8p/vrtHh0ihHCTaplAC8zn
4dwsacDBfD1LaDtX8lKAFF/k7I/pjEim2sOLco/ra0ye2sj7YFkhq66KTNdCO/sq
Dsfh+TCcx28ju+fKx9Z3X/uUGcYorOLkuUs4UtFhSYdVnU2zOavoaWPkdkPY+PDy
he8=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:40 2025 by rpki-client