Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uVnfrcFOdIih_Z-cAQ42Q_I1Mp4.roa
File: uVnfrcFOdIih_Z-cAQ42Q_I1Mp4.roa (raw, json)
Hash identifier: fvY+wb3YTnXjFRQn1gzXWwbT3mUC1H6r3TVyHBh+VcM=
Subject key identifier: B9:59:DF:AD:C1:4E:74:88:A1:FD:9F:9C:01:0E:36:43:F2:35:32:9E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184B6392FA15D2DDBA8483D9D499030ED5A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uVnfrcFOdIih_Z-cAQ42Q_I1Mp4.roa
Signing time: Sat 26 Nov 2022 23:15:11 +0000
ROA not before: Sat 26 Nov 2022 23:15:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:ae77:4719/128 maxlen: 128
2001:67c:64:ffff:0:184:9f03:9814/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:b6:39:2f:a1:5d:2d:db:a8:48:3d:9d:49:90:30:ed:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 26 23:15:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b959dfadc14e7488a1fd9f9c010e3643f235329e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:26:a7:12:c2:d9:59:a0:4a:64:aa:13:a9:92:
2b:4c:47:b3:63:45:65:6d:6f:5b:db:5a:33:c3:6a:
5f:fb:d1:74:ba:c3:f8:39:41:f3:87:d8:a4:f3:26:
45:a5:2f:e7:86:71:a6:e6:b1:e4:17:03:cf:62:a3:
a6:00:73:ee:78:7f:34:28:f7:82:03:58:e9:05:da:
41:40:1f:86:63:4d:fc:77:10:4d:b1:55:58:2a:78:
a6:8d:17:01:4a:bc:46:c9:65:a7:56:b1:2e:67:3c:
ad:47:18:eb:e3:9b:c0:a9:68:5d:81:eb:1f:d8:f6:
87:0a:51:0a:04:a0:a6:80:c6:31:3f:14:33:39:b2:
4e:9e:a6:7d:86:d4:a4:92:f5:e2:35:e1:fe:55:b4:
3a:f1:6c:b4:f0:a4:c8:54:42:e7:bf:04:44:6b:95:
68:d6:cb:a3:2e:c7:08:b3:71:71:d2:27:02:1c:6d:
09:22:a0:10:7c:43:d4:88:be:43:b2:8e:4b:17:8a:
69:c3:4f:c2:c8:9c:a5:73:1b:21:0d:2a:ca:a6:e7:
d5:f8:d3:08:ef:a5:7a:21:d1:d7:29:42:44:b7:b5:
8c:bc:d2:5e:3a:67:cd:04:87:84:9c:1a:ee:fd:f9:
95:99:31:d7:d0:c4:dd:3a:fc:ef:f4:76:a7:f3:eb:
ad:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:59:DF:AD:C1:4E:74:88:A1:FD:9F:9C:01:0E:36:43:F2:35:32:9E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uVnfrcFOdIih_Z-cAQ42Q_I1Mp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
92:9c:b5:3d:2a:56:d0:12:af:1b:d3:f2:7a:58:da:15:ba:8f:
f4:17:47:58:7c:92:20:69:d6:26:e6:4f:2f:fd:5a:c4:4b:bb:
e7:7f:9c:16:20:db:2b:72:39:4b:fb:d3:d3:83:7e:03:51:88:
5a:e4:75:35:e7:61:0a:52:3a:0d:3a:2a:c4:6c:c5:71:a2:7f:
1f:90:22:04:c1:6a:3a:c2:e7:cb:8f:7f:06:fc:62:95:aa:71:
6d:5d:32:c4:c2:b3:84:72:80:48:f7:c8:80:dc:f4:8b:50:db:
c2:27:4b:eb:e8:be:2d:b9:7d:cd:e7:4d:cb:16:e8:e7:d4:4a:
f5:97:af:03:ff:df:88:45:11:f3:a1:9b:59:33:b4:b3:7f:5c:
cb:be:c8:0a:3d:86:30:3c:27:46:a6:3a:fd:66:d1:0c:90:21:
0e:36:53:14:a8:e3:01:fc:aa:5e:42:06:0a:80:b4:59:3f:88:
f4:11:37:e6:85:41:29:01:d3:10:0d:8b:ed:75:ee:d0:f1:e2:
22:86:23:ea:0a:dd:8e:b8:f8:a1:9b:9a:a5:bd:18:4a:c9:14:
13:d9:30:ce:79:6d:73:c7:d2:d9:9d:32:99:be:42:1a:36:3d:
3a:39:8d:33:35:45:14:81:f7:4b:b2:a2:03:5c:90:bc:d4:82:
78:b2:ca:07
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYS2OS+hXS3bqEg9nUmQMO1aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMTI2MjMxNTExWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTU5ZGZhZGMxNGU3NDg4YTFmZDlmOWMwMTBlMzY0M2YyMzUzMjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSanEsLZWaBKZKoTqZIrTEezY0Vl
bW9b21ozw2pf+9F0usP4OUHzh9ik8yZFpS/nhnGm5rHkFwPPYqOmAHPueH80KPeC
A1jpBdpBQB+GY038dxBNsVVYKnimjRcBSrxGyWWnVrEuZzytRxjr45vAqWhdgesf
2PaHClEKBKCmgMYxPxQzObJOnqZ9htSkkvXiNeH+VbQ68Wy08KTIVELnvwREa5Vo
1sujLscIs3Fx0icCHG0JIqAQfEPUiL5Dso5LF4ppw0/CyJylcxshDSrKpufV+NMI
76V6IdHXKUJEt7WMvNJeOmfNBIeEnBru/fmVmTHX0MTdOvzv9Han8+utOQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLlZ363BTnSIof2fnAEONkPyNTKeMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvdVZuZnJjRk9kSWloX1otY0FRNDJRX0kxTXA0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJKctT0qVtASrxvT8npY
2hW6j/QXR1h8kiBp1ibmTy/9WsRLu+d/nBYg2ytyOUv709ODfgNRiFrkdTXnYQpS
Og06KsRsxXGifx+QIgTBajrC58uPfwb8YpWqcW1dMsTCs4RygEj3yIDc9ItQ28In
S+vovi25fc3nTcsW6OfUSvWXrwP/34hFEfOhm1kztLN/XMu+yAo9hjA8J0amOv1m
0QyQIQ42UxSo4wH8ql5CBgqAtFk/iPQRN+aFQSkB0xANi+117tDx4iKGI+oK3Y64
+KGbmqW9GErJFBPZMM55bXPH0tmdMpm+Qho2PTo5jTM1RRSB90uyogNckLzUgniy
ygc=
-----END CERTIFICATE-----
Generated at Thu May 1 22:00:03 2025 by rpki-client