Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uAErk14mzPemYo5VXJpldtDmLB4.roa
File: uAErk14mzPemYo5VXJpldtDmLB4.roa (raw, json)
Hash identifier: LdG8y9UsLkCrFq4/TMhj+rpiectdltXKOWvK2Vmxpbc=
Subject key identifier: B8:01:2B:93:5E:26:CC:F7:A6:62:8E:55:5C:9A:65:76:D0:E6:2C:1E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6D4D81BB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uAErk14mzPemYo5VXJpldtDmLB4.roa
Signing time: Thu 24 Feb 2022 11:17:22 +0000
ROA not before: Thu 24 Feb 2022 11:17:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1833796027 (0x6d4d81bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 24 11:17:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b8012b935e26ccf7a6628e555c9a6576d0e62c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4e:2f:60:bb:c2:df:c6:24:5e:5f:c9:5b:bf:
27:83:61:07:8f:c7:fa:07:08:5a:b6:59:3b:26:93:
31:e9:9b:8c:de:c0:be:25:45:72:40:57:bb:6d:f8:
a3:6a:6c:31:a4:23:85:4c:f8:a8:bd:db:04:79:4f:
a1:06:45:69:b2:3a:7d:36:69:ba:66:31:fd:50:92:
40:37:ef:77:44:00:56:bf:11:9e:8f:f7:f6:ea:81:
aa:fe:7e:f1:6b:0f:e6:ed:a7:36:33:53:a2:59:75:
2e:79:ff:95:a4:2b:08:82:7d:b6:97:c6:7d:34:d4:
59:6a:77:af:d1:d8:4a:1f:ed:d2:e9:ea:34:2c:95:
3f:d6:97:9a:0f:70:d4:80:6f:6d:a5:1b:77:91:8f:
1c:fb:a8:8c:70:6d:a7:fc:67:87:70:fa:5e:5f:2d:
db:51:63:d1:29:c6:9c:58:d2:fe:e8:8b:0b:29:33:
58:c8:7c:95:5a:06:e5:89:68:8e:b5:4a:94:08:3a:
70:42:0d:39:b7:ac:7d:0a:da:2c:9c:7a:31:4c:8a:
2d:cf:35:9f:a7:4e:f3:8a:54:50:2c:ef:d3:b3:fc:
c7:81:a0:dd:a1:f8:31:3d:d7:5b:17:22:4f:e8:f2:
7a:08:f3:c2:34:00:43:ec:df:cf:10:89:41:85:45:
0c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:01:2B:93:5E:26:CC:F7:A6:62:8E:55:5C:9A:65:76:D0:E6:2C:1E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uAErk14mzPemYo5VXJpldtDmLB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
67:57:45:b4:0e:d9:31:6c:c1:15:56:1c:10:65:ab:ca:46:68:
5a:3e:42:8d:2d:e3:5d:b5:3e:7a:90:cc:80:68:25:58:e2:c4:
3e:9a:63:b2:e3:14:ab:24:8e:e8:a1:24:91:62:1f:4e:e1:bf:
29:dc:15:4a:58:c7:52:0f:91:45:07:22:e8:69:a5:ad:ea:74:
c5:f1:c1:d5:f7:98:12:c0:2e:8d:fd:b0:9c:48:65:7b:15:23:
0b:0a:d8:8a:e4:11:84:73:f3:00:6d:c1:93:41:ff:84:90:7c:
2d:f2:56:04:9d:80:aa:20:94:27:6e:41:f9:9a:50:70:e2:69:
01:10:0a:3e:f9:30:7e:9d:45:51:c6:37:d0:5b:4d:fd:a3:c5:
1d:09:d7:76:05:bc:64:46:0a:25:b6:19:39:76:52:97:19:49:
bc:85:b5:08:55:30:dd:e1:e6:75:c6:70:33:f1:81:12:a9:85:
ab:e9:8a:96:58:c2:d4:87:da:36:b3:e3:d0:00:22:4e:54:c2:
3f:cb:cc:80:a4:56:cf:bd:cd:37:a7:1b:fa:b9:37:8d:54:cd:
86:b6:16:ff:fd:42:8b:1d:55:0e:ec:9d:90:8b:c2:80:13:d9:
98:0e:93:fb:e6:10:43:64:10:cb:ff:10:18:93:e7:7c:d4:cc:
28:b8:2f:4b
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEbU2BuzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDIy
NDExMTcyMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjgwMTJiOTM1ZTI2
Y2NmN2E2NjI4ZTU1NWM5YTY1NzZkMGU2MmMxZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALJOL2C7wt/GJF5fyVu/J4NhB4/H+gcIWrZZOyaTMembjN7A
viVFckBXu234o2psMaQjhUz4qL3bBHlPoQZFabI6fTZpumYx/VCSQDfvd0QAVr8R
no/39uqBqv5+8WsP5u2nNjNToll1Lnn/laQrCIJ9tpfGfTTUWWp3r9HYSh/t0unq
NCyVP9aXmg9w1IBvbaUbd5GPHPuojHBtp/xnh3D6Xl8t21Fj0SnGnFjS/uiLCykz
WMh8lVoG5YlojrVKlAg6cEINObesfQraLJx6MUyKLc81n6dO84pUUCzv07P8x4Gg
3aH4MT3XWxciT+jyegjzwjQAQ+zfzxCJQYVFDB0CAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBS4ASuTXibM96ZijlVcmmV20OYsHjAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L3VBRXJrMTRtelBlbVlvNVZYSnBsZHREbUxCNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQBnV0W0DtkxbMEVVhwQZavKRmhaPkKNLeNdtT56
kMyAaCVY4sQ+mmOy4xSrJI7ooSSRYh9O4b8p3BVKWMdSD5FFByLoaaWt6nTF8cHV
95gSwC6N/bCcSGV7FSMLCtiK5BGEc/MAbcGTQf+EkHwt8lYEnYCqIJQnbkH5mlBw
4mkBEAo++TB+nUVRxjfQW039o8UdCdd2BbxkRgolthk5dlKXGUm8hbUIVTDd4eZ1
xnAz8YESqYWr6YqWWMLUh9o2s+PQACJOVMI/y8yApFbPvc03pxv6uTeNVM2Gthb/
/UKLHVUO7J2Qi8KAE9mYDpP75hBDZBDL/xAYk+d81MwouC9L
-----END CERTIFICATE-----
Generated at Thu May 1 07:22:49 2025 by rpki-client