Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x5aXEJC9heiGXZDQst0jBI6qPwM.roa
File: x5aXEJC9heiGXZDQst0jBI6qPwM.roa (raw, json)
Hash identifier: NY9BRXmglVJsK5VKgwqNiByUjJo8LAaP36pLZrIkIn4=
Subject key identifier: C7:96:97:10:90:BD:85:E8:86:5D:90:D0:B2:DD:23:04:8E:AA:3F:03
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182321092ED69BE46095E38EE38C3EF5B67
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x5aXEJC9heiGXZDQst0jBI6qPwM.roa
Signing time: Sun 24 Jul 2022 21:15:23 +0000
ROA not before: Sun 24 Jul 2022 21:15:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:32:10:92:ed:69:be:46:09:5e:38:ee:38:c3:ef:5b:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 24 21:15:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c796971090bd85e8865d90d0b2dd23048eaa3f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cd:90:04:df:15:9b:2c:5f:20:39:6e:23:8d:
64:2f:a2:78:7a:35:02:0a:ae:14:21:5d:78:7e:7c:
e5:cb:f8:24:02:46:f0:bd:eb:cc:28:ee:83:ae:0c:
9b:1e:c0:7e:3e:14:53:94:de:92:ad:c3:a8:9e:df:
b4:24:9f:ef:34:94:41:b5:87:14:a7:a7:4a:69:22:
18:98:3e:57:0f:b5:c5:bf:45:57:57:f8:d5:88:08:
d5:83:5e:79:d2:ea:c1:ea:21:a1:57:d2:15:8a:76:
0f:44:53:9d:db:9a:f7:de:56:03:bf:5d:90:f7:e4:
01:62:45:36:7b:ea:11:27:64:4a:ec:e9:0c:c6:43:
46:50:dc:5c:53:c1:f6:49:15:1d:08:0a:ea:c3:b4:
84:f1:39:9c:d8:41:8e:f3:d4:cf:a8:54:a1:69:9e:
ff:12:a0:39:ef:c7:40:d9:62:7a:23:11:a4:23:9a:
d0:1a:60:0c:20:3f:cf:a5:87:4b:a9:bb:74:16:29:
c8:ed:0c:7d:61:c8:dd:00:13:ba:23:97:88:e9:32:
0a:f4:b0:9c:bf:55:f0:b1:71:e0:fa:88:0c:1e:92:
45:f2:86:6f:2c:1a:6a:79:a7:2f:c1:13:63:17:ac:
83:62:59:fd:e5:f2:bb:5f:29:bf:37:44:36:f9:15:
af:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:96:97:10:90:BD:85:E8:86:5D:90:D0:B2:DD:23:04:8E:AA:3F:03
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x5aXEJC9heiGXZDQst0jBI6qPwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
94:47:db:a8:f1:03:36:3a:56:f9:1a:dd:c8:fb:93:c4:c6:ac:
0b:7d:a9:d3:47:cb:32:2b:30:ff:8f:b4:5c:2f:8d:07:e2:18:
9f:81:cb:52:5f:46:47:c5:96:9a:cb:76:8d:cf:ee:e6:04:10:
ae:43:34:15:e5:05:63:3a:cb:a8:ef:70:a0:6a:44:fd:9d:63:
09:28:e6:e9:7f:ec:ea:2f:c1:d7:37:6e:63:d7:14:99:40:b0:
ec:94:da:d3:b9:b8:e1:bd:24:b4:fc:5a:61:b5:b1:6a:30:3e:
01:2b:38:83:40:48:fd:33:39:45:bd:0f:d5:e0:4a:8b:41:08:
09:5f:68:91:c9:e9:12:f5:de:4d:0b:49:3a:b2:2b:d7:0d:ea:
ab:0a:c5:a6:fa:8d:07:2f:16:14:7f:62:fa:4e:52:7d:c7:07:
c8:62:ec:47:11:23:6d:8f:6b:8c:b3:c8:41:5d:33:6e:78:9c:
81:73:08:a5:50:65:5d:b5:2e:b5:b2:9e:b8:db:64:f4:bf:79:
8c:a9:2e:56:ba:e7:1a:4b:45:73:0d:c0:ee:a2:43:f7:69:e6:
ce:37:b5:3c:ef:ed:e5:70:0b:aa:06:70:0d:27:bf:c6:5a:21:
0c:f3:a8:cd:90:62:b0:9e:8e:57:c0:d5:12:0d:44:24:70:85:
71:84:ac:86
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYIyEJLtab5GCV447jjD71tnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwNzI0MjExNTIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzk2OTcxMDkwYmQ4NWU4ODY1ZDkwZDBiMmRkMjMwNDhlYWEzZjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAps2QBN8VmyxfIDluI41kL6J4ejUC
Cq4UIV14fnzly/gkAkbwvevMKO6DrgybHsB+PhRTlN6SrcOont+0JJ/vNJRBtYcU
p6dKaSIYmD5XD7XFv0VXV/jViAjVg1550urB6iGhV9IVinYPRFOd25r33lYDv12Q
9+QBYkU2e+oRJ2RK7OkMxkNGUNxcU8H2SRUdCArqw7SE8Tmc2EGO89TPqFShaZ7/
EqA578dA2WJ6IxGkI5rQGmAMID/PpYdLqbt0FinI7Qx9YcjdABO6I5eI6TIK9LCc
v1XwsXHg+ogMHpJF8oZvLBpqeacvwRNjF6yDYln95fK7Xym/N0Q2+RWv4QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMeWlxCQvYXohl2Q0LLdIwSOqj8DMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEveDVhWEVKQzloZWlHWFpEUXN0MGpCSTZxUHdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJRH26jxAzY6Vvka3cj7
k8TGrAt9qdNHyzIrMP+PtFwvjQfiGJ+By1JfRkfFlprLdo3P7uYEEK5DNBXlBWM6
y6jvcKBqRP2dYwko5ul/7Oovwdc3bmPXFJlAsOyU2tO5uOG9JLT8WmG1sWowPgEr
OINASP0zOUW9D9XgSotBCAlfaJHJ6RL13k0LSTqyK9cN6qsKxab6jQcvFhR/YvpO
Un3HB8hi7EcRI22Pa4yzyEFdM254nIFzCKVQZV21LrWynrjbZPS/eYypLla65xpL
RXMNwO6iQ/dp5s43tTzv7eVwC6oGcA0nv8ZaIQzzqM2QYrCejlfA1RINRCRwhXGE
rIY=
-----END CERTIFICATE-----
Generated at Fri May 2 18:36:55 2025 by rpki-client